Threat Intel Engineer: AI Security & Detection Builder

Anthropic; York and North Yorkshire; On-site; GBP 85,000 - 130,000; Full time

Benefits offered by this job

Health insurance

Fertility benefits

Parental leave (22 weeks)

Flexible time off

Mental health support

Equity packages

Relocation support

Home office stipend

Education stipend

Commuter benefits

Wellness stipend

Job summary

Anthropic in the United Kingdom is seeking a Threat Intelligence Engineer to produce actionable intelligence for detections, hunts, and defensive priorities. You will track adversaries targeting frontier AI labs and build tooling to turn indicators into defenses.

You will work with Detection Engineering and Incident Response to translate intelligence into detections and durable defenses, shaping threat models and risk assessments across the enterprise.

Qualifications

• 5+ years of hands-on experience in cyber threat intelligence, threat hunting, or intrusion analysis.
• Strong engineering skills with production-grade Python and automation pipelines.
• Experience defending cloud-native, research-heavy environments (AWS/GCP, Kubernetes).
• Existing network in the CTI community with productive sharing.

Responsibilities

• Research, track, and report on threat actors targeting AI labs and tech sectors.
• Build tooling and pipelines to operationalize indicators of compromise.
• Develop intelligence-driven threat hunts across endpoints, cloud, identity, and SaaS.
• Translate intelligence into detections, hunting hypotheses, and incident context.

Skills

Python

Threat Intelligence

Threat Hunting

Incident Response

Malware Analysis

Education

Bachelor's degree in a relevant field

Tools

YARA

Sigma

Snort/Suricata

SIEM

Job description

Anthropic in the United Kingdom is seeking a Threat Intelligence Engineer to produce actionable intelligence for detections, hunts, and defensive priorities. You will track adversaries targeting frontier AI labs and build tooling to turn indicators into defenses.

You will work with Detection Engineering and Incident Response to translate intelligence into detections and durable defenses, shaping threat models and risk assessments across the enterprise.