M&A AppSec Engineer - Due Diligence & Integration

Anthropic; San Francisco (CA); Hybrid; USD 320,000 - 485,000; Full time

Job summary

Anthropic is seeking an Application Security professional focused on M&A due diligence and post-close integration. You will lead security assessments of target companies, write leadership-ready risk readouts, and formalize playbooks and tooling to scale diligence across acquisitions.

Working with cross‑functional teams—legal, corporate development, and engineering—you'll drive pre-close reviews, coordinate testing, and build Claude‑powered tooling to automate repeatable security workstreams

Qualifications

• Hands-on application and infrastructure security experience in cloud and containerized environments.
• Ability to assess unfamiliar codebases and produce clear risk assessments for non-security audiences.
• Production-grade coding ability in Python, Go, Rust, or TypeScript.
• Threat-modeling and vulnerability-identification skills with real-world bug experience.
• High autonomy, ambiguity, and handling confidential context.
• Clear written and verbal communication across executives, legal, and engineering teams.

Responsibilities

• Lead pre-close security due diligence on prospective acquisitions with external testing and threat modeling.
• Drive post-close security integration, tracking remediation and onboarding assets to automation systems.
• Coordinate security engineering teams across supply chain, cloud, corporate security, and detection.
• Work with stakeholders across corporate development, legal, and engineering to communicate risk clearly.
• Formalize the M&A security playbook and toolchain, turning processes into Claude-powered automation.
• Contribute to core AppSec projects and security automation roadmaps during deals.

Skills

Cloud security

Infrastructure security

Code security review

Threat modeling

Python

Go

Rust

TypeScript

Autonomy

Communication

Education

Bachelor's degree in a relevant field

Tools

SAST

DAST

Vulnerability management

Bug bounty tooling

Claude-powered tooling

Job description

Anthropic is seeking an Application Security professional focused on M&A due diligence and post-close integration. You will lead security assessments of target companies, write leadership-ready risk readouts, and formalize playbooks and tooling to scale diligence across acquisitions.

Working with cross‑functional teams—legal, corporate development, and engineering—you'll drive pre-close reviews, coordinate testing, and build Claude‑powered tooling to automate repeatable security workstreams