Detection & Incident Response Engineer (Hybrid)

Anthropic Limited; New York (NY); Hybrid; USD 300,000 - 405,000; Full time

Job summary

Anthropic is seeking a Detection and Response Engineer to join its security team in New York. The role involves leading incident response across diverse threats, building tooling (potentially with Large Language Models), and developing detections, playbooks, and workflows to rapidly identify and respond to incidents.

You will work cross-functionally with security and engineering teams, participate in an on-call rotation, and contribute to improving security capabilities from the ground up in a

Qualifications

• 3+ years of software engineering experience, with security experience a plus
• 5+ years of detection engineering, incident response, or threat hunting experience
• Solid understanding of cloud environments and operations
• Experience working with engineering teams in a SaaS environment
• Exceptional communication and collaboration skills
• Ability to lead projects with little guidance
• Ability to pick up new languages and technologies quickly
• Experience handling security incidents and investigating anomalies as part of a team
• Knowledge of security tooling (EDR, SIEM, SOAR)

Responsibilities

• Lead cybersecurity Incident Response efforts across external attacks and insider threats
• Develop and deploy tooling, potentially leveraging Large Language Models, to enhance detection and response
• Create and optimize detections, playbooks, and workflows for rapid incident response
• Review Incident Response metrics and drive continuous improvement
• Collaborate with security and engineering teams across functions
• Participate in an on-call rotation

Skills

Incident response

Threat hunting

Cloud security

SaaS security

Security tooling (EDR/SIEM/SOAR)

Python

SQL

Kubernetes

Leadership

Communication

Education

Bachelor’s degree or equivalent in a relevant field

Tools

EDR

SIEM

SOAR

Job description

Anthropic is seeking a Detection and Response Engineer to join its security team in New York. The role involves leading incident response across diverse threats, building tooling (potentially with Large Language Models), and developing detections, playbooks, and workflows to rapidly identify and respond to incidents.

You will work cross-functionally with security and engineering teams, participate in an on-call rotation, and contribute to improving security capabilities from the ground up in a