Threat Intel Engineer: Build AI Security Detections & Hunts

Anthropic; Washington, Baltimore (District of Columbia, MD); Hybrid; USD 320,000 - 405,000; Full time

Benefits offered by this job

Health insurance

Flexible work policy

Job summary

Anthropic is seeking a Threat Intelligence Engineer to produce actionable intelligence for detections, hunts, and defensive priorities. You will track adversaries targeting frontier AI labs, build tooling to convert indicators into defenses, and collaborate with Detection Engineers and Incident Responders to ensure intelligence changes outcomes.

This hands-on role requires Python proficiency, experience with malware analysis, and the ability to translate research into durable detections across

Qualifications

• 5+ years of hands-on experience in cyber threat intelligence, threat hunting, or intrusion analysis.
• Deep knowledge of nation-state or advanced criminal threat actors, tooling, infrastructure patterns, tradecraft, and targeting.
• Strong engineer: production-quality Python and built automation/data pipelines.
• Experience performing malware/infrastructure analysis to extract indicators and signals.
• Experience authoring detection logic (YARA, Sigma, Snort/Suricata) and durable detections.

Responsibilities

• Research, track, and report on threat actors and campaigns targeting AI labs and the tech sector.
• Build and maintain tooling and automated pipelines to collect and enrich indicators of compromise.
• Develop intelligence-driven threat hunts across endpoints, cloud, identity, and SaaS telemetry.
• Perform malware analysis to extract indicators, TTPs, and attribution signals.
• Translate intelligence into detection rules, hunting hypotheses, and incident context in near real-time.
• Curate inbound intelligence from commercial feeds, open source, government, and trusted peers.
• Contribute to threat models and risk assessments to inform security architecture.

Skills

Python

Threat intelligence

Threat hunting

Automation

Detections

Written communication

Industry network

Education

Bachelor's degree or equivalent

Tools

YARA

Sigma

Snort/Suricata

SIEM

Job description

Anthropic is seeking a Threat Intelligence Engineer to produce actionable intelligence for detections, hunts, and defensive priorities. You will track adversaries targeting frontier AI labs, build tooling to convert indicators into defenses, and collaborate with Detection Engineers and Incident Responders to ensure intelligence changes outcomes.

This hands-on role requires Python proficiency, experience with malware analysis, and the ability to translate research into durable detections across