Staff+ Application Security Engineer, M&A at Anthropic

Role overview

The Staff+ Application Security Engineer - M&A opening at Anthropic is centered on Deliver technical or research work for application security for mergers and acquisitions. The employer also lists Collaborate with research, engineering, security, product and business teams. and Improve reliability, testing, documentation and operational readiness. These responsibilities define the practical scope more clearly than the job title: applicants should be ready to explain what they have built, supported or delivered that relates directly to this work. The listing summary says: Anthropic is hiring a staff+ application security engineer, m&a focused on application security for mergers and acquisitions. The named technologies include Python, TypeScript, Go.

The posting identifies Hands-on application and infrastructure security experience, including cloud and containerized environments and Demonstrated ability to rapidly assess an unfamiliar codebase or architecture and produce a clear, prioritized risk assessment for a non-security audience as relevant qualifications. Candidates should connect these requirements to evidence from their own work, including their individual contribution, technical decisions and outcomes. The listing describes the work arrangement as remote and gives the location as Remote-Friendly (Travel-Required) | San Francisco, CA | Seattle, WA | New York City, NY. Confirm country eligibility, travel, employment terms and any details absent from this summary directly with Anthropic before applying. This overview is based on the employer-provided posting; it does not infer team structure or expectations that the source does not state.

Responsibilities

• Deliver technical or research work for application security for mergers and acquisitions.
• Collaborate with research, engineering, security, product and business teams.
• Improve reliability, testing, documentation and operational readiness.
• Translate complex technical questions into measurable systems or research outcomes.

Qualifications

• Hands-on application and infrastructure security experience, including cloud and containerized environments
• Demonstrated ability to rapidly assess an unfamiliar codebase or architecture and produce a clear, prioritized risk assessment for a non-security audience
• Production-quality coding ability in at least one of Python, Go, Rust, or TypeScript
• Practical threat-modeling and vulnerability-identification skills — you've found and reasoned about real bugs in real systems
• Comfort operating with high autonomy, ambiguity, and tightly-held confidential context
• Clear written and verbal communication across varied audiences — executives, legal and corporate development partners, and engineering counterparts at an acquired company
• 7+ years in application security, security consulting, or security architecture
• Prior M&A security due diligence, third-party security assessment, or technical due diligence experience
• Experience standing up or scaling SAST/DAST, bug bounty, or vulnerability management coverage across multiple codebases
• Track record of building security automation or tooling rather than relying solely on manual review
• Familiarity with using LLMs as a core part of your security workflow
• Experience securing agentic, code-execution, or LLM-integrated systems
• Point Anthropic's internal LLM-driven code analysis and AI-assisted scanning at an acquired repository nobody here has seen, and turn the output into a prioritized remediation plan in days rather than weeks
• Design the risk-scoring framework Anthropic uses to compare security posture across acquisitions of different shapes and sizes
• Build the automation that onboards an acquired codebase to Anthropic's vulnerability dashboard, dependency auto-patching, and bounty scope without a human running a checklist
• Write the security risk memo for a live deal and present it to corporate development and security leadership

Technology in this role

• Python: The named technologies include Python, TypeScript, .
• TypeScript: The named technologies include Python, TypeScript, .
• Go: The named technologies include Python, TypeScript, .
• Rust: Hands-on application and infrastructure security experience, including cloud and containerized environments Demonstrated ability to rapidly assess an unfamiliar codebase or architecture and produce a clear, prioritized risk assessment for a non-security audience .
• LLM: Hands-on application and infrastructure security experience, including cloud and containerized environments Demonstrated ability to rapidly assess an unfamiliar codebase or architecture and produce a clear, prioritized risk assessment for a non-security audience .
• SAST: Hands-on application and infrastructure security experience, including cloud and containerized environments Demonstrated ability to rapidly assess an unfamiliar codebase or architecture and produce a clear, prioritized risk assessment for a non-security audience .
• DAST: Hands-on application and infrastructure security experience, including cloud and containerized environments Demonstrated ability to rapidly assess an unfamiliar codebase or architecture and produce a clear, prioritized risk assessment for a non-security audience .

Role-specific candidate guide

Preparation notes based on the employer’s stated responsibilities and qualifications.

Understanding the scope. This Staff+ Application Security Engineer - M&A position at Anthropic is best assessed through the work described in the employer’s posting, rather than the title alone. The available role overview says: “The Staff+ Application Security Engineer - M&A opening at Anthropic is centered on Deliver technical or research work for application security for mergers and acquisitions. The employer also lists Collaborate with…” Read that statement together with the responsibilities below to understand the likely balance.

Benefits

• Remote-friendly United States arrangement as stated; travel or office requirements vary by role.
• Opportunity to support Anthropic’s frontier AI and safety mission.

About Anthropic

Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.

Browse job categories

Related jobs

• Staff+ Application Security Engineer at Anthropic — Anthropic
• Senior Application Security Engineer at Temporal — Temporal
• Session Lead (External Contractor) - Integrated Application Security Services Nanodegree Session lead(India) at Udacity — Udacity
• Senior Software Engineer, Security Assurance at Grafana Labs — Grafana Labs
• Senior Software Engineer, Security Assurance at Grafana Labs — Grafana Labs
• Senior Software Engineer, Security Assurance at Grafana Labs — Grafana Labs