AI Threat Intelligence Investigator

Anthropic Limited; Washington (District of Columbia); On-site; USD 150,000 - 230,000; Full time

Job summary

Anthropic is seeking a Technical Cyber Threat Investigator to join our Threat Intelligence team. You will detect, investigate, and disrupt misuse of Anthropic's AI systems by malicious actors, using open-source research, dark web monitoring, and internal data to drive defenses.

This role sits at the intersection of AI safety and cybersecurity, requiring strong SQL/Python skills, threat actor profiling, and experience with MITRE ATT&CK.

Qualifications

• Experience applying SQL/Python for data analysis and threat detection.
• Knowledge of threat intelligence frameworks (MITRE ATT&CK) and threat actor profiling.
• Experience with open-source research and dark web monitoring for cyber threats.

Responsibilities

• Detect and investigate misuse of Anthropic's AI systems for cyber operations.
• Develop abuse signals and tracking strategies to detect threat actors across platforms.
• Create actionable intelligence reports on new attack vectors, vulnerabilities, and TTPs.
• Conduct cross-platform threat analysis using open-source research, dark web monitoring, and internal data.
• Implement improvements to our safety approach based on investigation findings.
• Study trends and publish reports on AI-enabled threats and misuses.
• Build and maintain relationships with external threat intel partners and government stakeholders.
• Work cross-functionally to build out our threat intelligence program and processes.

Skills

SQL

Python

Threat intelligence

Threat actor profiling

MITRE ATT&CK

Data analysis

Project management

Communication

Job description

Anthropic is seeking a Technical Cyber Threat Investigator to join our Threat Intelligence team. You will detect, investigate, and disrupt misuse of Anthropic's AI systems by malicious actors, using open-source research, dark web monitoring, and internal data to drive defenses.

This role sits at the intersection of AI safety and cybersecurity, requiring strong SQL/Python skills, threat actor profiling, and experience with MITRE ATT&CK.