Staff AppSec Engineer: M&A Security Integrations

Anthropic; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

Anthropic is seeking an Application Security professional focused on M&A to lead security due diligence, integration, and risk readouts for acquisitions. You will work with corporate development, legal, security leadership, and engineering teams to translate risk into actionable plans and ensure acquired codebases meet Anthropic's security bar.

This role emphasizes pre-close assessment, post-close remediation, and scalable playbooks.

Responsibilities

• Lead pre-close security due diligence on prospective acquisitions — coordinate external penetration testing, threat-model the target's architecture, assess security controls, and deliver the security risk readout for leadership ahead of close and integration planning
• Drive post-close security integration — stand up static and dynamic analysis coverage on acquired codebases, track high- and critical-severity remediation to closure, fold acquired assets into bug bounty scope, and onboard repositories to Anthropic's automated vulnerability remediation and reporting systems
• Coordinate adjacent security engineering teams (supply chain, cloud, corporate security, detection response) on their portions of each integration
• Work across a wide set of stakeholders on every deal — corporate development, legal, security leadership, and the engineering teams inheriting acquired systems internally; engineering and security counterparts at the target company externally — translating between them and keeping the security workstream legible to all of them
• Formalize and scale An

Job description

Anthropic is seeking an Application Security professional focused on M&A to lead security due diligence, integration, and risk readouts for acquisitions. You will work with corporate development, legal, security leadership, and engineering teams to translate risk into actionable plans and ensure acquired codebases meet Anthropic's security bar.

This role emphasizes pre-close assessment, post-close remediation, and scalable playbooks.