Threat Collections Engineer

ABOUT THE ROLE Anthropic is a company dedicated to creating reliable, interpretable, and steerable AI systems. Our mission is to ensure that AI is safe and beneficial for users and society as a whole. We are a quickly growing team of researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. We are seeking a Threat Collections Engineer to join our Threat Intelligence team. In this role, you will play a foundational engineering part in building the infrastructure that powers our threat discovery capabilities. This includes integrating external data sources, developing detection systems for automated lead generation, and creating internal tooling that scales our investigators' impact. WHAT YOU'LL DO As a Threat Collections Engineer, you will be responsible for building automated detection systems that use disparate signals to identify abusive behavior. You will take systems from idea to proof-of-concept to production-grade with appropriate monitoring, documentation, and maintenance processes. Your tasks will include: - Developing and maintaining YARA rule infrastructure, including tools for writing, validating, and testing rules against real data - Creating integrations with external threat intelligence platforms (e.g. VirusTotal, Censys, Urlscan) via MCP servers to enable multi-source correlation during investigations - Building data pipelines that ingest intelligence from RSS feeds, CTI news sources, and partner sharing, using Claude to extract TTPs and generate targeted hunting queries - Developing behavioral analytics capabilities using DBT-based frameworks and creating searchable audit logging infrastructure - Establishing feedback loops with investigators to tune detection systems and reduce false positives - Scraping and normalizing data from external sources to feed threat detection and enrichment workflows WHAT YOU'LL NEED To be successful in this role, you should have strong coding proficiency in Python and SQL for building detection logic, data pipelines, and automation. You should also have experience with data pipeline orchestration tools (Airflow, DBT, or similar) and familiarity with threat intelligence concepts including IOCs, YARA rules, and threat correlation techniques. Additionally, you should be able to integrate external APIs and build data ingestion systems. WHY REMOTE Anthropic offers a remote-friendly work environment, allowing you to work from anywhere while still being part of a collaborative and innovative team. BENEFITS The annual compensation range for this role is $300,000 - $320,000 USD. We also offer a minimum education requirement of a Bachelor’s degree or an equivalent combination of education, training, and/or experience. We are open to hiring candidates with a relevant field of study and a minimum of years of experience required will correlate with the internal job level requirements for the position. We also offer visa sponsorship for eligible candidates.