Detection & Response Security Engineer - Lead IR (Hybrid)

Anthropic Limited; New York (NY); Hybrid; USD 300,000 - 405,000; Full time

Benefits offered by this job

Competitive compensation

Equity donation matching (optional)

Generous vacation and parental leave

Flexible working hours

Job summary

Anthropic is seeking a Detection and Response Engineer to lead incident response and build proactive security capabilities. You will design detections, playbooks, and automation, and collaborate with research and security teams to monitor threats and coordinate responses.

The role emphasizes strong communication, rapid investigation, and the ability to work on high-impact security challenges in a fast-growing environment. Located in New York with hybrid policy.

Qualifications

• 3+ years of software engineering experience with security a plus.
• 5+ years in detection engineering, incident response, or threat hunting.
• Solid understanding of cloud environments and operations.
• Experience collaborating with engineering teams in a SaaS environment.

Responsibilities

• Lead cybersecurity incident response across diverse domains.
• Develop and deploy tooling that may leverage LLMs for detection and response.
• Create and optimize detections, playbooks, and workflows.
• Review incident response metrics and drive improvement.
• Collaborate cross-functionally with security and engineering teams.

Skills

Software engineering

Detection engineering

Incident response

Cloud environments

SaaS experience

Communication skills

Project leadership

Python

EDR/SIEM/SOAR

Kubernetes

Education

Bachelor’s degree in relevant field

Tools

EDR

SIEM

SOAR

Kubernetes

Cloud platforms (AWS/Azure)

Job description

Anthropic is seeking a Detection and Response Engineer to lead incident response and build proactive security capabilities. You will design detections, playbooks, and automation, and collaborate with research and security teams to monitor threats and coordinate responses.

The role emphasizes strong communication, rapid investigation, and the ability to work on high-impact security challenges in a fast-growing environment. Located in New York with hybrid policy.