Head of Vulnerability Disclosure & Security Community

Anthropic is seeking a Head of Vulnerability Disclosure & Security Community to lead its coordinated vulnerability disclosure program and CVE Numbering Authority (CNA).

The successful candidate will own Anthropic's public, coordinated-disclosure jailbreak program and represent the company at security conferences.

Key responsibilities include:

• Owning and operating Anthropic's public, coordinated-disclosure jailbreak program
• Leading Anthropic's CVE Numbering Authority (CNA) function for vulnerability disclosure
• Building and maintaining partnerships with the external security research community and threat-intelligence organizations
• Representing Anthropic at security conferences and within the broader vulnerability-research community
• Maintaining close familiarity with vulnerability-database ecosystems
• Leading Anthropic's external technical engagement on cyber safety topics
• Collaborating with the Senior Cyber Policy Lead to ensure disclosure findings inform evaluations and policy
• Building the function, including hiring and mentoring a future analyst

The annual compensation range for this role is $330,000-$395,000 USD.

Minimum qualifications:

• Experience operating or participating in a coordinated vulnerability disclosure program
• Experience coordinating multi-party disclosures involving researchers, vendors, and open-source maintainers
• Experience managing a disclosure queue with defined triage and response timelines
• Experience handling sensitive or embargoed vulnerability information

Preferred qualifications:

• Experience running or working inside a PSIRT
• Experience coordinating disclosures that include government parties
• A track record of authoring CVEs or vulnerability disclosures
• Experience presenting original research at security conferences
• Experience operating or supporting a CNA
• Experience incorporating artificial intelligence into coordinated vulnerability disclosure or CNA processes