Staff+ Application Security Engineer - M&A
Core
Lead security due diligence and secure integration for Anthropic's acquisitions, assessing target security posture pre-close and bringing acquired systems up to Anthropic's standards post-close.
Role type
Staff+ Application Security Engineer (M&A)
Builds
Security risk readouts, integration playbooks, and automated vulnerability remediation tooling for acquired codebases.
Domain
AI safety, Application Security, Mergers & Acquisitions
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
Application and infrastructure security, cloud/container security, rapid codebase assessment, production coding (Python/Go/Rust/TypeScript), threat modeling, vulnerability identification, high autonomy, technical communication
Preferred skills
7+ years in AppSec/security consulting, M&A security due diligence experience, SAST/DAST/bug bounty scaling, security automation development, LLM workflow integration, agentic system security
Technologies
Claude, SAST, DAST, bug bounty platforms, automated vulnerability remediation systems
Responsibilities
Lead pre-close security due diligence including threat modeling and risk readouts; Drive post-close security integration including static/dynamic analysis and remediation tracking; Coordinate with supply chain, cloud, and detection teams; Formalize and scale M&A security playbook and automation; Participate in operational on-run rotation (bug bounty, incident response); Contribute to core AppSec projects like secure design reviews and automation roadmap
Seniority
Staff+, hands-on IC with strategic scope
