Staff+ Application Security Engineer - M&A

Job summary

Responsibilities

Anthropic's Application Security team secures the systems that build, serve, and increasingly are Claude — and as Anthropic's footprint grows, that mandate now extends to companies and codebases we bring in from outside. This role establishes that function.

• Lead pre-close security due diligence on prospective acquisitions — coordinate external penetration testing, threat-model the target's architecture, assess security controls, and…
• Drive post-close security integration — stand up static and dynamic analysis coverage on acquired codebases, track high- and critical-severity remediation to closure, fold…
• Coordinate adjacent security engineering teams (supply chain, cloud, corporate security, detection & response) on their portions of each integration
• Work across a wide set of stakeholders on every deal — corporate development, legal, security leadership, and the engineering teams inheriting acquired systems internally…
• Formalize and scale Anthropic's M&A security playbook — risk-scoring model, diligence runbook, integration checklist — and turn as much of it as possible into Claude-powered…

What they're looking for

• Hands-on application and infrastructure security experience, including cloud and containerized environments
• Demonstrated ability to rapidly assess an unfamiliar codebase or architecture and produce a clear, prioritized risk assessment for a non-security audience
• Production-quality coding ability in at least one of Python, Go, Rust, or TypeScript
• Practical threat-modeling and vulnerability-identification skills — you've found and reasoned about real bugs in real systems
• Comfort operating with high autonomy, ambiguity, and tightly-held confidential context

Tech stack

• Go
• Python
• Rust
• TypeScript