Application Security Engineer

Role Overview

Staff Application Security Engineer responsible for safeguarding Anthropic’s AI systems (including those powered by large language models). You will design, build, and operate security systems, automate threat detection, and strengthen defenses across the development lifecycle.

Responsibilities

• Design, develop, and operate security systems powered by large language models, including AI-driven code analysis and vulnerability remediation tools
• Lead secure design reviews and threat modeling for novel AI systems, identifying unique risks and mitigation strategies
• Enhance and evolve the company’s bug bounty program by automating triage and escalation
• Partner with Product, Infrastructure, and Research as an embedded security expert on architecture, launches, and security best practices
• Participate in on-call rotations for incident response and vulnerability escalations
• Build and maintain security automation and developer-facing security tooling for vulnerability detection and management
• Contribute to security policies, standards, and documentation to ensure compliance and best practices

Requirements

• Hands-on experience in application and infrastructure security, including cloud and containerized environments
• Production-quality coding in Python, Go, Rust, or TypeScript
• Practical threat modeling and vulnerability identification experience (proven ability to find and reason about real bugs)
• Ability to operate autonomously in ambiguous situations with strong initiative and problem-solving
• Strong technical communication skills for working with engineers and leadership
• 3+ years of relevant experience in security engineering or application security (or equivalent)

Nice to Have

• Experience building security automation tools and/or integrating AI/ML techniques into security workflows
• Experience supporting bug bounty operations at scale