Lead Detection & Incident Response Engineer

Anthropic Limited; Seattle (WA); On-site; USD 300,000 - 405,000; Full time

Job summary

Anthropic is seeking an exceptional Detection and Response engineer to join our security team. You will lead incident response efforts, develop tooling—potentially leveraging Large Language Models—to enhance detection, investigation, and response across Anthropic’s stack.

In this role, you will collaborate with research and security teams, participate in on-call rotations, and help shape our detection playbooks and workflows to quickly identify and respond to threats in a SaaS environment.

Qualifications

• 3+ years of software engineering experience, with security experience a plus and/or
• 5+ years of detection engineering, incident response, or threat hunting experience
• A solid understanding of cloud environments and operations
• Experience working with engineering teams in a SaaS environment
• Exceptional communication and collaboration skills
• An ability to lead projects with little guidance
• The ability to pick up new languages and technologies quickly
• Experience handling security incidents and investigating anomalies as part of a team
• Knowledge of EDR, SIEM, SOAR, or related security tools

Responsibilities

• Lead cybersecurity Incident Response efforts covering diverse domains from external attacks to insider threats involving all layers of Anthropic’s technology stack
• Develop and deploy novel tooling that may leverage Large Language Models to enhance detection, investigation, and response capabilities
• Create and optimize detections, playbooks, and workflows to quickly identify and respond to potential incidents
• Review Incident Response metrics and procedures and drive continuous improvement
• Work cross functionally with other security and engineering teams
• Note: This position will require participation in an on-call rotation

Skills

Software engineering

Detection engineering

Incident response

Threat hunting

Cloud environments

SaaS environment

Python

EDR

SIEM

SOAR

Kubernetes

Education

Bachelor’s degree in a related field

Tools

AWS

Azure

GCP

SIEM tooling

Job description

Anthropic is seeking an exceptional Detection and Response engineer to join our security team. You will lead incident response efforts, develop tooling—potentially leveraging Large Language Models—to enhance detection, investigation, and response across Anthropic’s stack.

In this role, you will collaborate with research and security teams, participate in on-call rotations, and help shape our detection playbooks and workflows to quickly identify and respond to threats in a SaaS environment.