# Security Risk Analyst, Risk Engineering **Company**: Anthropic **Location**: San Francisco, CA **Work arrangement**: hybrid **Experience**: senior **Job type**: full-time **Salary**: $270,000-$345,000 USD **Category**: IT **Industry**: Technology **Wikidata**: https://www.wikidata.org/wiki/Q116758847 **Apply**: https://job-boards.greenhouse.io/anthropic/jobs/5397704008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_c50360b6-555 ## Description ## About the role The Security Risk team at Anthropic is responsible for identifying, prioritizing, and driving treatment of its most important security risks. As a Security Risk Analyst, you will help define what replaces the conventional GRC playbook, with a direct line to CISO-level decisions. You will take risk questions from leadership and partner teams and drive them to a decision. This involves conducting fast, structured qualitative assessments and deep FAIR-based quantitative analyses. You will bring leadership a clear position, tradeoffs, and honest uncertainty, and defend it under challenge. In parallel, you will help turn quantitative risk into a product partner teams can leverage, and define the standards a growing risk function will run on. ## Key responsibilities - Enable leadership and partner teams to make risk-informed decisions by taking ambiguous risk questions, driving them to a documented decision, and communicating the quantitative and qualitative tradeoffs clearly. - Lead quantitative analysis of the company's top security risk scenarios using FAIR, calibrated estimation, and simulation, working with engineers who own the systems and presenting results in terms leadership can act on. - Partner with Security Engineering to assess threat scenarios and control effectiveness so security investment is right-sized to actual risk and remediation is sequenced where it buys down the most risk. - Frame escalations and risk treatment decisions with a clear recommendation, an honest statement of uncertainty, and re-evaluation triggers, and pressure test those decisions with risk owners. - Shape the analysis and narrative behind leadership risk reviews, and help define risk appetite and the risk metrics the organization should measure and why. - Use AI and automation to scale risk analysis, and own the calibration and quality review that keep the outputs trustworthy. - Turn one-off analyses into reusable methods, templates, and training so risk analysis becomes increasingly self-service for partner teams, and raise the analytical quality of the risk register. ## You may be a good fit if you - Have owned security or technology risk analysis end-to-end, qualitative and quantitative, and can point to a decision your output changed. - Have hands-on FAIR-style quantification experience, including scenario decomposition, calibrated estimation, and Monte Carlo simulation in Python, R, or spreadsheet tooling, briefed to decision-makers. - Thrive in ambiguity, framing a moving question into something analyzable, picking the depth that fits, and driving to a decision rather than a report. - Put defensible severity and likelihood on ambiguous problems, state uncertainty honestly, and change your position when the evidence changes. - Have enough technical security depth to decompose an attack path with security engineers and be credible in the room. - Can compress a complex risk position into one paragraph for the CISO, make the tradeoff explicit, and defend it under pointed questions. - Use Claude or other LLMs as daily working tools and review model output critically. - Are low ego and collaborative, build credibility through the work, and care about AI safety and the role security risk plays in it. ## Benefits - Competitive compensation - Optional equity donation matching - Generous vacation and parental leave - Flexible working hours - Lovely office space ## Logistics - Annual Salary: $270,000-$345,000 USD - Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience - Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience - Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position - Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. - Visa sponsorship: We do sponsor visas! ## Skills ### Required - FAIR - quantitative risk analysis - security risk management - AI - automation - Python - R - Monte Carlo simulation ### Nice to have - applied FAIR-CAM - cyber risk quantification program - risk appetite definition - security engineering - detection - threat intelligence - actuarial science - decision science --- Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/anthropic/jobs/5397704008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)