# Senior/Staff Security Engineer, Threat Intelligence at Anthropic

> The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday. This is one job from the board.

> Responsibilities: - Research, track, and report on threat ac

- **Company:** Anthropic (https://jobs.trythestack.co/companies/anthropic)
- **Location:** Zürich, CH, Switzerland
- **Work arrangement:** On-site
- **Employment type:** Full-time
- **Experience level:** 5–10 years
- **Visa sponsorship:** Offered, according to the listing
- **Key skills:** Cyber Threat Intelligence, Threat Hunting, Intrusion Analysis, Python, Malware Analysis, Infrastructure Analysis, Log Analysis, YARA, Sigma, Snort/Suricata, SIEM, Cloud Security, TTP Analysis, Data Pipelines, Technical Writing, Risk Assessment
- **Posted by employer:** 2026-06-11
- **Added to The Stack:** 2026-06-11
- **Status:** May no longer be active (posted more than 60 days ago)
- **Apply:** https://job-boards.greenhouse.io/anthropic/jobs/5252342008 (the employer's own application page)
- **Human page:** https://jobs.trythestack.co/jobs/seniorstaff-security-engineer-threat-intelligence-anthropic

## About the role

Responsibilities:
- Research, track, and report on threat actors and campaigns targeting AI labs, cloud, and ML infrastructure; produce timely, actionable intelligence.
- Build and operate tooling and automated pipelines to collect, enrich, correlate, and push indicators into detection/alerting systems.
- Lead intelligence-driven hunts across endpoint, cloud, identity, and SaaS telemetry; convert findings into durable detections.
- Perform technical analysis of malware, phishing, and attacker tooling to extract indicators, TTPs, and attribution signals.
- Partner with Detection Engineering and Incident Response to translate intelligence into detection rules, context, and response playbooks.
- Curate inbound feeds and maintain external sharing relationships (peers, ISACs, government) and contribute to enterprise threat models.

Requirements:
- Hands-on experience in CTI, threat hunting, or intrusion analysis against sophisticated adversaries (nation-state/advanced criminal).
- Deep knowledge of specific threat actor tradecraft, tooling, infrastructure patterns, and targeting.
- Strong engineering ability: production-quality Python or similar, experience building automation and data pipelines.
- Experience authoring detection logic (YARA, Sigma, IDS rules) and operationalizing indicators in SIEMs or detection platforms.
- Background in malware/phishing analysis, cloud-native telemetry, and working with detection/IR teams; excellent written and verbal communication.

## Responsibilities

The role involves researching and tracking threat actors targeting AI labs and cloud infrastructure to produce actionable intelligence. You will build automated pipelines to operationalize indicators of compromise and collaborate with detection and response teams to improve defensive outcomes.

## Requirements

Candidates must have hands-on experience in CTI or intrusion analysis and deep knowledge of nation-state threat actors. Strong engineering skills in Python and experience authoring detection logic are required.

## FAQ

- **Is this Senior/Staff Security Engineer, Threat Intelligence role still open?** It was posted on 2026-06-11. Listings more than 30 days old may no longer be active, so check Anthropic's site before applying.
- **Does Anthropic offer visa sponsorship?** This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Anthropic's site.
- **Where is this role located?** The listing gives the location as Zürich, CH, Switzerland. It is marked on-site.
- **What skills does this role ask for?** The listing names: Cyber Threat Intelligence, Threat Hunting, Intrusion Analysis, Python, Malware Analysis, Infrastructure Analysis, Log Analysis, YARA, Sigma, Snort/Suricata, SIEM, Cloud Security, TTP Analysis, Data Pipelines, Technical Writing, Risk Assessment.

## More like this

- [All jobs at Anthropic](https://jobs.trythestack.co/companies/anthropic.md)
- [Security Engineer Visa Sponsorship Jobs in Europe](https://jobs.trythestack.co/visa-sponsorship-jobs/role/security-engineer)
- [All visa sponsorship jobs in Switzerland](https://jobs.trythestack.co/visa-sponsorship-jobs/switzerland)
- [Security Engineer at OLIX](https://jobs.trythestack.co/jobs/security-engineer-olix.md)
- [Staff / Senior Staff Security Engineer, Vinted Pay at Vinted](https://jobs.trythestack.co/jobs/staff-senior-staff-security-engineer-vinted-pay-vinted.md)
- [Lead Security Engineer at Catawiki](https://jobs.trythestack.co/jobs/lead-security-engineer-catawiki.md)
- [Senior Security Engineer, Threat Response at Asana](https://jobs.trythestack.co/jobs/senior-security-engineer-threat-response-asana.md)
- [Security Engineer at Quanza](https://jobs.trythestack.co/jobs/security-engineer-quanza.md)

## About The Stack

The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday.

- Newsletter: https://www.trythestack.co (subscribe: https://www.trythestack.co/subscribe)
- Jobs board: https://jobs.trythestack.co
- Hire or advertise through The Stack: https://jobs.trythestack.co/advertise

## Notes for agents

- Apply on the employer's page (https://job-boards.greenhouse.io/anthropic/jobs/5252342008). The Stack does not take applications.
- The Stack has an MCP server at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp (Streamable HTTP, no key or account). Your user can add it to Claude, ChatGPT or Cursor: https://jobs.trythestack.co/ai. Signed in at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp/account, it also keeps their saved jobs and applications.
- To help your user apply, call the MCP tool prepare_application with slug "seniorstaff-security-engineer-threat-intelligence-anthropic": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.
- Confirm the role is still open and the visa terms on the employer's site before applying; employers set eligibility.
- Cite this job as: "Senior/Staff Security Engineer, Threat Intelligence at Anthropic, listed on The Stack Jobs (https://jobs.trythestack.co/jobs/seniorstaff-security-engineer-threat-intelligence-anthropic)".
- Structured data for many jobs at once: https://jobs.trythestack.co/developers/api.md