Security Engineer, Offensive Security

Anthropic; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

Anthropic is seeking an offensive security engineer to proactively identify and exploit vulnerabilities across systems. You will partner with product and platform teams to surface weaknesses before adversaries and to strengthen the organization's defensive posture.

The role focuses on planning tests, developing exploit tooling, and delivering risk-informed guidance to engineers and leadership. Collaboration across teams is essential to reduce real-world risk.

Qualifications

• Hands-on experience in offensive security, penetration testing, or red team operations.
• Strong programming or scripting skills to develop exploits and custom tooling.
• Working knowledge of common vulnerability classes and exploitation techniques.
• Ability to explain findings to both technical and non-technical audiences.

Responsibilities

• Plan and execute offensive security assessments, including penetration tests and red team exercises.
• Identify and demonstrate exploitation paths across applications, services, and infrastructure.
• Build or extend tooling and automation to scale offensive testing coverage.
• Collaborate with engineering teams to validate fixes and reduce real-world risk.
• Communicate findings through clear written reports and risk briefings.

Skills

Offensive security

Penetration testing

Red team

Programming/scripting

Vulnerability types

Communication

Job description

Role overview

An offensive security engineering role focused on proactively identifying and exploiting vulnerabilities across systems. The engineer partners with product and platform teams to surface weaknesses before adversaries can and to strengthen the organization's defensive posture.

Responsibilities

• Plan and execute offensive security assessments, including penetration tests and red team exercises
• Identify and demonstrate exploitation paths across applications, services, and infrastructure
• Build or extend tooling and automation to scale offensive testing coverage
• Collaborate with engineering teams to validate fixes and reduce real-world risk
• Communicate findings through clear written reports and risk briefings

Requirements

• Hands-on experience in offensive security, penetration testing, or red team operations
• Strong programming or scripting skills to develop exploits and custom tooling
• Working knowledge of common vulnerability classes and exploitation techniques
• Ability to explain findings to both technical and non-technical audiences

Nice to have

• Background securing cloud or distributed systems
• Public security research, CVEs, or community contributions