Staff+ Application Security Engineer - M&A

Job Overview

You'll join Anthropic's Application Security team as a Staff+ Application Security Engineer, focusing on Mergers and Acquisitions (M&A). Your primary responsibility will be to establish and lead the security due diligence and secure integration process for Anthropic's acquisitions.

Key Responsibilities

• Conduct pre-close security due diligence on prospective acquisitions, including coordinating external penetration testing, threat modeling, and assessing security controls.
• Drive post-close security integration, such as setting up static and dynamic analysis coverage, tracking high- and critical-severity remediation, and onboarding acquired assets to Anthropic's vulnerability management systems.
• Collaborate with various stakeholders, including corporate development, legal, security leadership, and engineering teams, to ensure smooth integration and clear communication.
• Formalize and scale Anthropic's M&A security playbook, risk-scoring model, and tooling, leveraging Claude-powered automation where possible.
• Participate in the team's operational on-run rotation and contribute to core AppSec projects between deals.

Requirements

• Hands-on experience in application and infrastructure security, including cloud and containerized environments.
• Ability to rapidly assess unfamiliar codebases and produce clear risk assessments.
• Production-quality coding skills in languages like Python, Go, Rust, or TypeScript.
• Practical threat modeling and vulnerability identification skills.
• Comfort working with high autonomy, ambiguity, and confidential context.
• Strong written and verbal communication skills across various audiences.

Preferred Qualifications

• 7+ years of experience in application security, security consulting, or security architecture.
• Prior M&A security due diligence or technical due diligence experience.
• Experience with SAST/DAST, bug bounty, or vulnerability management.
• Familiarity with using Large Language Models (LLMs) in security workflows.
• Experience securing agentic, code-execution, or LLM-integrated systems.

Compensation

The annual compensation range for this role is $320,000 - $485,000 USD.