Staff+ Application Security Engineer

What Anthropic offers

Anthropic provides a compensation package that recognizes impact and responsibility, with a salary range of USD 320,000 to 485,000 per year and comprehensive benefits. The company also supports an optional equity donation matching, generous vacation and parental leave, flexible working hours, and a collaborative in person environment offered through a lovely office space for team synergy. Location for this role is remote, with a policy that may require time in an office at least 25% of the time depending on the role.

Role overview

In this Staff plus level position, you will help secure Claude powered systems by building security tooling, leading threat modeling and secure design reviews, and owning end-to-end security for production AI services. You will collaborate with cross-functional teams to shape architecture and integrate security into launches and ongoing operations.

Responsibilities

• Design, build, and operate Claude powered security systems, including LLM driven code analysis, automated vulnerability remediation, and AI assisted threat modeling, owning one or more end-to-end and coordinating cross-functional partnerships
• Lead secure design reviews and threat modeling for novel AI systems, surfacing risks that extend beyond existing frameworks
• Develop and evolve a public bug bounty program with automation handling routine triage and root-cause work, while engineers address escalations and nuanced cases
• Partner as an embedded security owner with Product, Infrastructure, and Research teams to influence launches and architectural decisions where security is the constraint
• Participate in on-run rotations for bounty escalations, incident response, and launch consultations for systems serving Claude in production

Requirements

• Hands-on experience in application and infrastructure security, including cloud and containerized environments
• Production-quality coding ability in at least one of Python, Go, Rust, or TypeScript, with a track record of building durable systems
• Practical threat modeling and vulnerability identification skills, with a history of finding and reasoning about real bugs in real systems
• Ability to operate with high autonomy and navigate ambiguity, delivering results with limited direction
• Clear technical communication with both engineers and leadership

Technologies

• Claude
• Python
• Go
• Rust
• TypeScript

Representative projects

• An increasingly autonomous vulnerability pipeline where Claude analyzes, scores real exploitability, and opens fix PRs with human review as needed
• Bug bounty operations with Claude handling initial triage and drafting while engineers focus on high-signal reports
• AI assisted threat modeling that generates intake prompts, drafts models, and flags design reviews needing human input
• Automated remediation of dependency vulnerabilities across Anthropic's codebase
• A company wide vulnerability dashboard with SLA enforcement guiding engineering teams
• Threat models and security architecture for agentic surfaces, including code execution sandboxing and delegated authentication

Logistics

• Minimum education: Bachelor’s degree or equivalent experience
• Field of study: Relevant to the role, demonstrated through coursework, training, or work experience
• Location: Remote with a hybrid policy that may require in-office presence at least 25% of the time
• Visa sponsorship: Available; efforts will be made to sponsor where feasible with assistance from an immigration lawyer
• We encourage applications from candidates who may not meet every listed qualification; diverse backgrounds are welcome
• Your safety matters: Anthropic recruiters contact through @anthropic.com addresses; beware of scams and never share banking information before employment begins

About Anthropic

Anthropic aims to build reliable, interpretable, and steerable AI systems that are safe and beneficial for users and society. The company brings together researchers, engineers, policy experts, and business leaders to advance responsible AI at scale.

About the role

The Application Security team focuses on protecting the systems that build and serve Claude. The space presents unique challenges such as multi-agent orchestration and sandboxed code execution, with tools and processes tailored to these complex scenarios. Claude enhances the work across static analysis, vulnerability drafting, bug bounty triage, and threat modeling, while engineers provide judgment and build the next generation of security capabilities.

How we are different

Anthropic prioritizes large-scale, collaborative research and a strong emphasis on impact and long term goals for steerable, trustworthy AI. The team operates with a culture of joint problem solving and a focus on systemic security rather than isolated fixes, treating AI safety as an empirical discipline.

Come work with us

Anthropic is a public benefit corporation with headquarters in San Francisco. The company offers competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a collaborative office environment. The firm provides guidance on AI usage during the application process to ensure a smooth experience for every candidate.