Staff+ Software Engineer, Account Compromise

Job Overview

We are seeking a Staff+ Software Engineer to join our Account Compromise team at Anthropic. As a key member of our Safeguards organisation, you will be responsible for setting the technical direction for detecting, containing, and remediating account compromise across Claude and the Claude Developer Platform.

Responsibilities

• Set the technical direction and own the architecture for account compromise detection, response, and remediation
• Independently scope and lead complex, multi-month engineering projects
• Build and evolve detection systems to identify account takeover, credential abuse, and compromised API keys in near real time
• Design automated response flows to cut off attacker access while minimising disruption to legitimate users
• Lead investigations into significant compromise incidents and convert learnings into durable, automated defences
• Threat model how attackers are likely to adapt and prioritise the team's work against that view
• Drive cross-organisational alignment on account security direction with Security, Product, Support, Policy, and other partners
• Define how the team measures success and hold the work to those measures
• Set technical standards for the domain and raise the bar for other engineers through code review, design review, and mentorship
• Surface patterns from compromise cases to research and product teams to improve protections upstream

Requirements

• 10+ years of experience designing, building, and operating detection, anti-fraud, anti-abuse, or security systems in production
• A track record of independently scoping and delivering complex, ambiguous, multi-month technical projects
• Experience making architectural decisions in an adversarial domain that other engineers and teams then build on
• Proficiency in Python and SQL with strong software engineering fundamentals and hands-on coding ability
• Experience leading investigations into account-based abuse or security incidents and translating findings into automated detection
• Ability to reason rigorously about large behavioural or telemetry datasets and distinguish attacker behaviour from unusual but legitimate use
• Strong written communication and a track record of driving alignment across multiple teams and stakeholders
• Sound judgement about the tradeoff between stopping bad actors and disrupting legitimate users

Nice to Have

• Significant engineering experience in trust and safety, platform integrity, fraud, or detection and response
• Deep familiarity with account attack techniques
• Experience with authentication and identity systems, including OAuth, single sign-on, multi-factor authentication, device binding, and risk-based authentication
• Experience applying machine learning to fraud or abuse detection
• Experience with cloud data tooling such as BigQuery, Spark, dbt, Airflow, or similar
• Experience building tooling for operational or investigative teams
• Interest in AI safety and the specific ways account compromise intersects with model misuse

What We Offer

• Competitive compensation: £325,000-£390,000 GBP per year
• Optional equity donation matching
• Generous vacation and parental leave
• Flexible working hours
• A lovely office space in which to collaborate with colleagues