Staff+ Application Security Engineer

About the role

Anthropic’s Application Security team protects the systems that build, serve, and interact with Claude. This senior engineering role blends hands‑on security work with AI‑driven tooling, using Claude itself to power static analysis, vulnerability remediation, and threat‑modeling.

Key responsibilities

• Design, build, and operate Claude‑powered security systems such as LLM‑driven code analysis and AI‑assisted threat modeling.
• Lead secure design reviews and threat modeling for novel AI products, identifying risks beyond existing frameworks.
• Develop and evolve a public bug bounty program with automation handling routine triage.
• Partner with Product, Infrastructure, and Research teams as an embedded security owner, influencing architecture and launch decisions.
• Participate in on‑call rotation for bounty escalations, incident response, and production launch consults.

Required profile

• Hands‑on application and infrastructure security experience, including cloud and containerized environments.
• Production‑grade coding ability in at least one of Python, Go, Rust, or TypeScript.
• Proven threat‑modeling and vulnerability‑identification skills on real systems.
• Ability to work autonomously in ambiguous situations with minimal specifications.
• Clear technical communication with engineers and leadership.
• 7+ years of experience in application security or security‑focused software engineering (preferred).
• Experience securing agentic, code‑execution, or LLM‑integrated systems (preferred).

Required skills

• Python
• Go
• Rust
• TypeScript