M&A AppSec Engineer: Security Diligence & Integration

Anthropic; New York (NY); Hybrid; USD 320,000 - 485,000; Full time

Benefits offered by this job

Visa sponsorship

Job summary

Anthropic is seeking a seasoned Application Security leader to own due diligence for acquisitions and scale security integration of acquired systems. You will build playbooks, risk models, and Claude-powered tooling while coordinating across governance, legal, and engineering teams.

The role emphasizes M&A security with opportunities to contribute to AppSec projects and security automation, leveraging deep coding and threat modeling skills in a fast-paced environment.

Qualifications

• Hands-on application and infrastructure security across cloud and containerized environments.
• Ability to rapidly assess unfamiliar codebases and present risk to non-security audiences.
• Production-quality coding ability in Python, Go, Rust, or TypeScript.
• Threat-modeling and vulnerability-identification skills with real-world bug experience.
• Comfort operating with high autonomy and confidential context.
• Clear written and verbal communication with executives, legal, and engineering partners.

Responsibilities

• Lead pre-close security due diligence on prospective acquisitions — coordinate external testing, threat-model the target, assess controls, deliver leadership risk readout.
• Drive post-close security integration — static/dynamic analysis on acquired codebases, track remediation, onboard repositories to remediation/reporting systems.
• Coordinate with security engineering teams across supply chain, cloud, and corporate security on integration workstreams.
• Translate security work across governance, legal, and engineering teams, keeping workstream legible for all stakeholders.
• Formalize and scale Anthropic's M&A security playbook — risk-scoring model, diligence runbook, integration checklist, tooling automation.
• Share operational on-run rotation for bug bounty escalations, launches, and incident response.
• Contribute to core AppSec projects — secure design reviews, threat modeling for agentic systems, security automation roadmap.

Skills

Security assessment

Threat modeling

Coding in Python/Go/Rust/TypeScript

Clear communication

Autonomy

Education

Bachelor's degree

Tools

SAST/DAST tooling

Bug bounty tooling

LLMs in security workflows

Job description

Anthropic is seeking a seasoned Application Security leader to own due diligence for acquisitions and scale security integration of acquired systems. You will build playbooks, risk models, and Claude-powered tooling while coordinating across governance, legal, and engineering teams.

The role emphasizes M&A security with opportunities to contribute to AppSec projects and security automation, leveraging deep coding and threat modeling skills in a fast-paced environment.