M&A AppSec Engineer: Due Diligence & Integration

Anthropic; Seattle, San Francisco (WA, CA); Hybrid; USD 320,000 - 485,000; Full time

Benefits offered by this job

Health insurance

Job summary

Anthropic seeks an Application Security professional to lead due diligence for acquisitions, assess security posture pre-close, and drive post-close integration. You will formalize playbooks, risk models, and tooling, while prioritizing M&A work and secure design reviews alongside engineers.

You’ll automate repeatable diligence tasks using Claude-powered tooling and collaborate across legal, corporate development, and security leaders to protect acquired assets.

Qualifications

• Hands-on application and infrastructure security experience in cloud and containerized environments.
• Ability to assess an unfamiliar codebase or architecture and produce a clear risk assessment for a non-security audience.
• Production-quality coding ability in at least one of Python, Go, Rust, or TypeScript.
• Threat-modeling and vulnerability-identification skills with real-world bugs.
• Comfort operating with autonomy, ambiguity, and confidential context.
• Strong written and verbal communication across executives, legal, and engineering teams.

Responsibilities

• Lead pre-close security due diligence on acquisitions, coordinate external testing, and deliver leadership risk readouts.
• Drive post-close security integration with static/dynamic analysis and remediation tracking.
• Coordinate with security, cloud, and corporate teams on each integration.
• Work with diverse stakeholders translating security workstreams for all audiences.
• Formalize M&A security playbook, risk scoring, and Claude-powered tooling.
• Share on-run rotation for bug bounties, launches, and incident response.
• Contribute to core AppSec projects including threat modeling and automation roadmaps.

Skills

Security due diligence

Threat modeling

Python/Go/Rust/TypeScript

Cloud security

Clear communication

Education

Bachelor’s degree

Job description

Anthropic seeks an Application Security professional to lead due diligence for acquisitions, assess security posture pre-close, and drive post-close integration. You will formalize playbooks, risk models, and tooling, while prioritizing M&A work and secure design reviews alongside engineers.

You’ll automate repeatable diligence tasks using Claude-powered tooling and collaborate across legal, corporate development, and security leaders to protect acquired assets.