Threat Intelligence Engineer for AI Security & Defenses

Anthropic Limited; Washington (District of Columbia); Hybrid; USD 320,000 - 405,000; Full time

Job summary

Anthropic is seeking a Threat Intelligence Engineer to join our Detection & Response team in Washington, DC. You will produce actionable intelligence, build pipelines, and shape defenses against frontier threats targeting AI labs and tech infrastructure.

This hands-on role requires strong Python skills and experience turning data into durable detections. As part of a small, high-leverage team, you’ll collaborate with detection engineers and incident responders, triaging feeds, sharing insights,

Qualifications

• 5+ years of hands-on cyber threat intelligence and threat hunting experience.
• Deep knowledge of nation-state or advanced criminal threat actors.
• Strong engineer who writes production Python and builds automations.
• Experience malware, infrastructure analysis, logs for validating findings.
• Experience with detection logic (YARA, Sigma, Snort/Suricata, SIEM).
• Clear, concise intelligence products that drive action.
• Existing network in the threat intel community and sharing.

Responsibilities

• Research and report on threat actors targeting AI labs and tech sectors.
• Build tooling and pipelines to convert indicators into detections.
• Conduct intelligence-driven threat hunts across endpoints and cloud.
• Analyze malware and attacker tooling to extract indicators.
• Translate intelligence into detection rules and incident context.
• Curate intelligence from feeds and trusted sources.
• Contribute to threat models and risk assessments.
• Build external intelligence-sharing relationships.

Skills

Threat intelligence

Threat hunting

Python

Automation pipelines

Malware analysis

Log analysis

YARA

Sigma

Incident response

Education

Bachelor’s degree

Tools

YARA

Sigma

Snort/Suricata

SIEM

Job description

Anthropic is seeking a Threat Intelligence Engineer to join our Detection & Response team in Washington, DC. You will produce actionable intelligence, build pipelines, and shape defenses against frontier threats targeting AI labs and tech infrastructure.

This hands-on role requires strong Python skills and experience turning data into durable detections. As part of a small, high-leverage team, you’ll collaborate with detection engineers and incident responders, triaging feeds, sharing insights,