Staff Application Security Engineer – M&A

🔥 0 minutes ago

🏄 California, New York, +1 more states – Remote

🏄 California – Remote 🗽 New York – Remote ☕ Washington – Remote

💵 $320k - $485k / year

⏰ Full Time

🔴 Lead

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Anthropic

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2020

🤖 Artificial Intelligence

☁️ SaaS

🏢 Enterprise

Artificial Intelligence • SaaS • Enterprise

Anthropic is an AI safety and research company based in San Francisco. The company focuses on developing research and creating reliable, beneficial AI systems. It offers products such as the Claude AI model, designed to be safe and efficient for enterprise use, and provides tools like the Claude API to help drive efficiency and create new revenue streams for businesses. Anthropic places a strong emphasis on AI safety, aligning its work with principles of harmlessness and ethical AI deployment.

📋 Description

• Lead pre-close security due diligence on prospective acquisitions — coordinate external penetration testing, threat-model the target's architecture, assess security controls, and deliver the security risk readout for leadership ahead of close and integration planning • Drive post-close security integration — stand up static and dynamic analysis coverage on acquired codebases, track high- and critical-severity remediation to closure, fold acquired assets into bug bounty scope, and onboard repositories to Anthropic's automated vulnerability remediation and reporting systems • Coordinate adjacent security engineering teams (supply chain, cloud, corporate security, detection & response) on their portions of each integration • Work across a wide set of stakeholders on every deal — corporate development, legal, security leadership, and the engineering teams inheriting acquired systems internally; engineering and security counterparts at the target company externally — translating between them and keeping the security workstream legible to all of them • Formalize and scale Anthropic's M&A security playbook — risk-scoring model, diligence runbook, integration checklist — and turn as much of it as possible into Claude-powered tooling rather than manual process • Share the team's operational on-run rotation (bug bounty escalations, launch consults, incident response), swapping out during periods of active deal work • Contribute to core AppSec projects between deals — secure design reviews, threat modeling for agentic systems, and the team's security automation roadmap

🎯 Requirements

• Hands-on application and infrastructure security experience, including cloud and containerized environments • Demonstrated ability to rapidly assess an unfamiliar codebase or architecture and produce a clear, prioritized risk assessment for a non-security audience • Production-quality coding ability in at least one of Python, Go, Rust, or TypeScript • Practical threat-modeling and vulnerability-identification skills — you've found and reasoned about real bugs in real systems • Comfort operating with high autonomy, ambiguity, and tightly-held confidential context • Clear written and verbal communication across varied audiences — executives, legal and corporate development partners, and engineering counterparts at an acquired company.

🏖️ Benefits

• Competitive compensation and benefits • Optional equity donation matching • Generous vacation and parental leave • Flexible working hours • Lovely office space for collaboration