Threat Intelligence Engineer: Build AI Defense & Detections

Anthropic; United States; Hybrid; USD 320,000 - 405,000; Full time

Benefits offered by this job

Competitive compensation

Equity donation matching

Generous vacation and parental leave

Flexible working hours

Job summary

Anthropic is seeking a Threat Intelligence Engineer in the United States to build intelligence-driven defenses for a frontier AI lab. You will track threat actors, develop tooling, and work with detection engineers to translate intelligence into actionable detections and hunts.

You will own tooling and pipelines to turn indicators into defenses, perform malware and infrastructure analysis, and contribute to risk models and defensive investments across the enterprise.

Qualifications

• 5+ years of hands-on experience in cyber threat intelligence, threat hunting, or intrusion analysis.
• Deep knowledge of specific nation-state or advanced criminal threat actors—their tooling, infrastructure patterns, tradecraft, and targeting.
• Strong engineer: production-grade Python, automation, and data pipelines.
• Experience authoring detection logic (YARA, Sigma, Snort/Suricata, or SIEM-native queries).
• Clear and concise written intelligence that informs detection and response.

Responsibilities

• Research, track, and report on threat actors and campaigns targeting AI labs and the tech sector.
• Build and maintain tooling and automated pipelines to collect, enrich, correlate, and operationalize indicators of compromise.
• Develop and execute intelligence-driven threat hunts across endpoint, cloud, identity, and SaaS telemetry.
• Perform malware, phishing infrastructure, and attacker tooling analysis to extract indicators and attribution signals.
• Collaborate with Detection Engineering and Incident Response to translate intelligence into detections and hunting hypotheses.
• Curate inbound intelligence from open source, commercial feeds, government and peer relationships.
• Contribute to threat models and risk assessments informing security architecture and investments.

Skills

Python

Threat hunting

Threat intelligence

Incident response

Data pipelines

Malware analysis

YARA/Sigma/Snort

Education

Bachelor’s degree in a related field

Tools

AWS

GCP

Kubernetes

SIEM

Job description

Anthropic is seeking a Threat Intelligence Engineer in the United States to build intelligence-driven defenses for a frontier AI lab. You will track threat actors, develop tooling, and work with detection engineers to translate intelligence into actionable detections and hunts.

You will own tooling and pipelines to turn indicators into defenses, perform malware and infrastructure analysis, and contribute to risk models and defensive investments across the enterprise.