Senior/Staff Security Engineer, Detection & Response

<div class="content-intro"><h2><strong>About Anthropic</strong></h2> <p>Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.</p></div><h2>About the role</h2><p>As Anthropic's models grow more capable, so does the interest of people who want to attack or misuse them. The Detection and Response (D&amp;R) team spots those threats and responds to incidents across every layer of Anthropic's technology stack.</p><p>The team is early-stage, so you'll help build our detection and response capabilities from the ground up and work closely with our security and research teams.</p><h2>Key responsibilities</h2><ul><li><p>Lead incident response across a range of domains, from external attacks to insider threats, spanning all layers of Anthropic's technology stack</p></li><li><p>Build and deploy tooling, including tools that use large language models, to improve how we detect and respond to threats</p></li><li><p>Create and tune detections, playbooks, and workflows to catch and respond to incidents quickly</p></li><li><p>Review incident response metrics and procedures, and drive improvements</p></li><li><p>Work across security and engineering teams</p></li><li><p>Take part in an on-call rotation</p></li></ul><h2>Minimum qualifications</h2><ul><li><p>Experience handling security incidents and investigating anomalies as part of a team</p></li><li><p>Working knowledge of EDR, SIEM, SOAR, or similar security tooling</p></li><li><p>A solid understanding of cloud environments and operations</p></li><li><p>Experience working with engineering teams in a SaaS environment</p></li><li><p>Proficiency with a scripting language such as Python and query languages such as SQL</p></li><li><p>Strong communication and collaboration skills</p></li><li><p>Able to lead projects with little guidance</p></li><li><p>Able to pick up new languages and technologies quickly</p></li></ul><h2>Preferred qualifications</h2><ul><li><p>7+ years of software engineering experience, or 7+ years of detection engineering, incident response, or threat hunting experience</p></li><li><p>Security operations or investigations involving large-scale Kubernetes environments</p></li><li>