Technical Cyber Threat Investigator

Overview

As a Technical Cyber Threat Investigator on the Threat Intelligence team, you will detect, investigate, and disrupt misuse of Anthropic’s AI systems for malicious cyber operations.

What you'll do

• Detect and investigate attempts to misuse Anthropic’s AI systems for cyber operations, including influence operations, malware development, and social engineering.
• Develop abuse signals and tracking strategies to proactively detect sophisticated threat actors across the platform.
• Create actionable intelligence reports on new attack vectors, vulnerabilities, and threat actor TTPs targeting LLM systems.
• Conduct cross-platform threat analysis using open-source research, dark web monitoring, and internal data.
• Use investigation findings to implement systematic improvements to safety and mitigate harm at scale.
• Study misuse trends and generate and publish reports.
• Build cross-functional threat intelligence processes, tools, and best practices.

What you'll need

• Proficiency in SQL and Python for data analysis and threat detection.
• Experience with large language models and understanding how AI could be misused for cyber threats.
• Subject matter expertise in abusive user behavior detection (e.g., influence operations, coordinated inauthentic behavior, or cyber threat intelligence).
• Experience tracking threat actors across surface, deep, and dark web environments.
• Ability to derive insights from large datasets to make decisions and recommendations.
• Experience with threat actor profiling and using threat intelligence frameworks such as MITRE ATT&CK.

Details

• May require responding to escalations during weekends and holidays.
• Minimum education: Bachelor’s degree or equivalent combination of education, training, and/or experience.
• Location-based hybrid policy: expected to be in one of the offices at least 25% of the time.
• Visa sponsorship is available, but not for every role/candidate.