← All roles

Staff+ Application Security Engineer - M&A

Anthropic· Security
Apply on company site
Hybrid (Remote-friendly)$320k - $485kFull-timePosted 3mo ago

About the role

Role focusing on pre-close security due diligence and post-close security integration for Anthropic's acquisitions, formalizing playbooks, risk models, and tooling, with emphasis on M&A rather than core product security.

Responsibilities

  • Lead pre-close security due diligence on prospective acquisitions — coordinate external penetration testing, threat-model the target's architecture, assess security controls, and deliver the security risk readout for leadership ahead of close and integration planning
  • Drive post-close security integration — stand up static and dynamic analysis coverage on acquired codebases, track remediation to closure, fold acquired assets into bug bounty scope, and onboard repositories to automated vulnerability remediation and reporting systems
  • Coordinate adjacent security engineering teams (supply chain, cloud, corporate security, detection & response) on their portions of each integration
  • Work across a wide set of stakeholders on every deal — corporate development, legal, security leadership, and the engineering teams inheriting acquired systems internally; external counterparts — translating between them and keeping the security workstream legible to all of them
  • Formalize and scale Anthropic's M&A security playbook — risk-scoring model, diligence runbook, integration checklist — and turn as much of it as possible into Claude-powered tooling rather than manual process
  • Share the team's operational on-run rotation (bug bounty escalations, launch consults, incident response), swapping out during periods of active deal work
  • Contribute to core AppSec projects between deals — secure design reviews, threat modeling for agentic systems, and the team's security automation roadmap

Qualifications

  • Hands-on application and infrastructure security experience, including cloud and containerized environments
  • Demonstrated ability to rapidly assess an unfamiliar codebase or architecture and produce a clear, prioritized risk assessment for a non-security audience
  • Production-quality coding ability in at least one of Python, Go, Rust, or TypeScript
  • Practical threat-modeling and vulnerability-identification skills — you've found and reasoned about real bugs in real systems
  • Comfort operating with high autonomy, ambiguity, and tightly-held confidential context
  • Clear written and verbal communication across varied audiences — executives, legal and corporate development partners, and engineering counterparts at an acquired company

Skills

Required:Application securityCode review / secure codingThreat modelingCommunication
Nice to have:Security governance / playbook development

Benefits

  • Competitive compensation
  • Optional equity donation matching
  • Generous vacation and parental leave
  • Flexible working hours
  • Office space for collaboration
Last updated Jul 15, 2026. Interested? Apply on the company site.

About Anthropic

building reliable, interpretable, and steerable AI systems

Anthropic is an AI safety and research company that's working to build reliable, interpretable, and steerable AI systems.

ai-infrastructure-and-developmentliquid-ai-recruiting-targetsetter-30setter-30-2026-q1wing-list-2026wing-list-2026-giga-stage
Company profileWebsite

More open roles at Anthropic