Staff+ Software Engineer, Account Compromise

Job Overview

We are seeking a Staff+ Software Engineer to join our Account Compromise team at Anthropic. You will be responsible for setting the technical direction for detecting, containing, and remediating account compromise across our Claude and Claude Developer Platform.

Responsibilities

• Set the technical direction and own the architecture for account compromise detection, response, and remediation
• Independently scope and lead complex, multi-month engineering projects
• Build and evolve detection systems to identify account takeover, credential abuse, and compromised API keys in near real time
• Design automated response flows to cut off attacker access while minimising disruption to legitimate users
• Lead investigations into significant compromise incidents and convert learnings into durable, automated defences
• Threat model how attackers are likely to adapt and prioritise the team's work against that view
• Drive cross-organisational alignment on account security direction with Security, Product, Support, Policy, and other partners
• Define how the team measures success and hold the work to those measures
• Set technical standards for the domain and raise the bar for other engineers through code review, design review, and mentorship
• Surface patterns from compromise cases to research and product teams to improve protections upstream

Requirements

• 10+ years of experience designing, building, and operating detection, anti-fraud, anti-abuse, or security systems in production
• A track record of independently scoping and delivering complex, ambiguous, multi-month technical projects
• Experience making architectural decisions in an adversarial domain that other engineers and teams then build on
• Proficiency in Python and SQL with strong software engineering fundamentals and hands-on coding ability
• Experience leading investigations into account-based abuse or security incidents and translating findings into automated detection
• Ability to reason rigorously about large behavioural or telemetry datasets and distinguish attacker behaviour from unusual but legitimate use
• Strong written communication and a track record of driving alignment across multiple teams and stakeholders
• Sound judgement about the tradeoff between stopping bad actors and disrupting legitimate users

Nice to Have

• Significant engineering experience in trust and safety, platform integrity, fraud, or detection and response
• Deep familiarity with account attack techniques
• Experience with authentication and identity systems, including OAuth, single sign-on, multi-factor authentication, device binding, and risk-based authentication
• Experience applying machine learning to fraud or abuse detection
• Experience with cloud data tooling such as BigQuery, Spark, dbt, Airflow, or similar
• Experience building tooling for operational or investigative teams
• Interest in AI safety and the specific ways account compromise intersects with model misuse

What We Offer

• Competitive compensation: £325,000-£390,000 GBP per year
• Optional equity donation matching
• Generous vacation and parental leave
• Flexible working hours
• A lovely office space