Threat Intel Engineer: AI Security & Threat Hunts

Anthropic Limited; New York (NY); Hybrid; USD 320,000 - 405,000; Full time

Job summary

Anthropic is seeking a Threat Intelligence Engineer to drive detections, hunts, and defensive priorities for a frontier AI lab. You’ll build tooling, track adversaries, and work with detection engineers to operationalize intelligence.

You will analyze malware and attacker tooling, write detection logic (YARA, Sigma, Snort/Suricata), and collaborate with incident response to inform security architecture across the enterprise.

Qualifications

• 5+ years of hands-on experience in cyber threat intelligence, threat hunting, or intrusion analysis.
• Strong engineering: production-quality Python and automation experience.
• Experience defending cloud-native environments (AWS/GCP, Kubernetes).
• Experience applying AI tooling to accelerate intelligence collection, enrichment, and analysis.
• Ability to write clear, concise intelligence products that drive action.
• Existing network in the threat intelligence community and track record of share collaborations.

Responsibilities

• Research, track, and report on threat actors and campaigns targeting AI labs, cloud infrastructure, and the technology sector; produce actionable intelligence for stakeholders.
• Build and maintain tooling and pipelines to collect, enrich, correlate, and operationalize indicators of compromise.
• Develop and execute intelligence-driven threat hunts across endpoint, cloud, identity, and SaaS telemetry and turn findings into durable detections.
• Analyze malware, phishing infrastructure, and attacker tooling to extract indicators, TTPs, and attribution signals.
• Collaborate to translate intelligence into detection rules, hunting hypotheses, and incident context in real-time.
• Curate inbound intelligence from feeds, open source, government, and trusted peers.
• Contribute to threat models and risk assessments to inform security architecture.
• Build and maintain external intelligence-sharing relationships with peers, ISACs, and government partners.

Skills

Python programming

Threat hunting

Malware analysis

Incident response

Detection engineering

Log analysis

Communication

Education

Bachelor's degree

Tools

YARA

Sigma

Snort/Suricata

SIEM

Job description

Anthropic is seeking a Threat Intelligence Engineer to drive detections, hunts, and defensive priorities for a frontier AI lab. You’ll build tooling, track adversaries, and work with detection engineers to operationalize intelligence.

You will analyze malware and attacker tooling, write detection logic (YARA, Sigma, Snort/Suricata), and collaborate with incident response to inform security architecture across the enterprise.