Lead incident response and build detection capabilities in a growing security team at Anthropic.
Posted by employer 2 days ago
First seen on Joblaze 1 day ago
Last verified on the company career page 15 hours ago
What you'll build
- Lead incident response across a range of domains
- Build and deploy tooling to improve detection and response
- Create and tune detections, playbooks, and workflows
- Review incident response metrics and procedures
- Work across security and engineering teams
Must have
- Experience handling security incidents
- Working knowledge of EDR, SIEM, SOAR
- Solid understanding of cloud environments
- Experience working with engineering teams in a SaaS environment
- Proficiency with a scripting language such as Python
- Strong communication and collaboration skills
Nice to have
- 7+ years of software engineering experience
- Security operations involving large-scale Kubernetes environments
- Experience analyzing attack behavior
- Experience with threat intelligence or malware analysis
- Experience contributing to a high-growth startup environment
Practical constraints
- On-call rotation
- Currently, staff expected to be in office at least 25% of the time
AI in the day-to-day
Build and deploy tooling, including tools that use large language models, to improve how we detect and respond to threats.
Requirements
- Experience
- 7+ years
- Education
- Bachelor's degree
- Visa
- Sponsorship available
Not disclosed in this posting: compensation.
Benefits
Joblaze summary
In the role of Staff Security Engineer for Detection and Response at Anthropic, the individual will lead incident response efforts, addressing both external attacks and insider threats while developing detection capabilities. Key skills include experience with security tooling like EDR and SIEM, as well as proficiency in scripting languages such as Python. This position is suited for seasoned professionals with a background in security operations or software engineering, particularly those familiar with cloud environments and SaaS. The team is in its early stages, offering a chance to shape security practices within a rapidly growing organization.
Joblaze insights
- Listed yesterday — first seen on Joblaze September 29, 2026. Last confirmed on Anthropic's careers page September 30, 2026.
Quick facts
- Is the Staff Security Engineer, Detection & Response role remote?
- It's hybrid — Anthropic expects some on-site time in Zürich, CH.
- How much experience is required?
- At least 7 years of relevant experience for this Staff Security Engineer, Detection & Response role.
- Where is the role based?
- Anthropic is hiring for this position in Zürich, CH.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: EDR, Kubernetes, Python, SIEM, SOAR, SQL.
- Does Anthropic sponsor work visas for this role?
- Yes — the posting indicates visa sponsorship is available for the right candidate.
- What seniority level is this role?
- Anthropic targets staff-level candidates for this position.
- Is this full-time or contract?
- Full-time for this Staff Security Engineer, Detection & Response role at Anthropic.
From the original posting
About Anthropic
About the role
As Anthropic's models grow more capable, so does the interest of people who want to attack or misuse them. The Detection and Response (D&R) team spots those threats and responds to incidents across every layer of Anthropic's technology stack.
The team is early-stage, so you'll help build our detection and response capabilities from the ground up and work closely with our security and research teams.
Key responsibilities
- Lead incident response across a range of domains, from external attacks to insider threats, spanning all layers of Anthropic's technology stack
- Build and deploy tooling, including tools that use large language models, to improve how we detect and respond to threats
- Create and tune detections, playbooks, and workflows to catch and respond to incidents quickly
- Review incident response metrics and procedures, and drive improvements
- Work across security and engineering teams
- Take part in an on-call rotation
Minimum qualifications
- Experience handling security incidents and investigating anomalies as part of a team
- Working knowledge of EDR, SIEM, SOAR, or similar security tooling
- A solid understanding of cloud environments and operations
- Experience working with engineering teams in a SaaS environment
- Proficiency with a scripting language such as Python and query languages such as SQL
- Strong communication and collaboration skills
- Able to lead projects with little guidance
- Able to pick up new languages and technologies quickly
Preferred qualifications
- 7+ years of software engineering experience, or 7+ years of detection engineering, incident response, or threat hunting experience
- Security operations or investigations involving large-scale Kubernetes environments
- Experience analyzing attack behavior and prototyping high-quality detections
- Experience with threat intelligence, malware analysis, infrastructure as code, or forensics
- Experience contributing to a high-growth startup environment
Logistics
Standard company text repeated across Anthropic's postings is omitted here.
Similar positions
Explore more