Insider Risk Investigator
Anthropic · Boston, MA; New York City, NY; Washington, DC · Security · listed August 6, 2026
The shape of it
Seniority
Entry level
Experience asked
1–8 years
Where
Hybrid
Stated pay
$245,000 – $305,000 USD
Requirements listed
16
Length
1,177 words
In the posting’s own words
We are seeking an exceptional Insider Risk Investigator with expertise in both human and technical investigations to support and protect Anthropic's mission. The Insider Risk Team works cross-functionally to deter, identify, investigate and mitigate risks to Anthropic's most critical assets — our people, our data, and our infrastructure.
What it asks for · 16
- Bachelor's degree and/or higher education in a related field
- 5-8 years of experience in insider risk, corporate investigations or a related domain
- 3-5 years experience in conducting investigative interviews
- At least 1-2 years of private sector experience
- Experience conducting OSINT for threat assessment, or counterintelligence
- Experience leveraging DLP, UEBA, SIEM, SOAR and other insider risk security tooling for detections and investigations
- Knowledge of open source research techniques and tooling
- Broad understanding of internal and external investigations, cybersecurity, interview techniques, risk assessment and managing strong cross-functional relationships
- Ability to communicate complex security findings clearly and concisely to non-technical stakeholders (written and verbal)
- Track record of rapid response to time-sensitive security requests
- Comfort operating across organizational boundaries (Security, People, Legal, IT)
- Exceptional communication, collaboration skills and the ability to lead projects with little guidance
- Demonstrated ability to operate independently with minimal oversight while managing sensitive cases
- 100% of the skills needed to perform the job
2 more in the original.
Also a plus
- Experience working in the technology industry or at/with AI/ML companies
- Experience with counterintelligence investigations and nation-state threat actor TTPs
- Background in open-source intelligence collection and analysis
- Track record of AI/LLM adoption for productivity gains in investigative work
- Experience contributing to a high growth startup environment
- Specialized knowledge of risks unique to the AI sector
- Experience with data exfiltration investigations across multiple vectors (email, cloud, removable media)
- Experience working in government, defense, or high-security environments
What the job covers
- Triage custom technical detection alerts
- Independently conduct end-to-end insider risk investigations while working closely with IT, Detection and Response, Legal, HR and other cross-functional teams
- Monitor and triage external threats targeting employees
- Conduct sensitive interviews of employees or other involved parties
- Perform technical analysis of logs from SIEM, DLP, UEBA systems
- Leverage AI tools (Claude, Claude Code) to accelerate investigation workflows and data analysis
- Build and maintain investigation documentation
- Assist in iterating and improving on processes, procedures and systems to detect, mitigate and investigate insider risks
- Work cross-functionally to develop, refine and operationalize insider risk indicators, scenarios and mitigation strategies
- Provide rapid-turnaround security assessments to support business operations
- Support education and awareness programs to promote a robust security culture
- Serve as the subject matter expert for insider risk and provide training to team members as needed
Degree language
- Bachelor's degree and/or higher education in a related field
Tools and skills named
Security & compliance
- Security7×
Ways of working
- Cross-functional3×
- Technical writing
Models & research
- LLM2×
- Machine learning
Words the posting leans on
- experience11×
- investigations9×
- insider risk8×
- security6×
- data4×
- interviews4×
- technical4×
- analysis3×
- assessment3×
- cross-functional3×
- detection3×
- mission3×
- support3×
- threat3×
- build2×
- claude2×
Counted from the posting after the mission statement and the legal notices are set aside. The ones near the top are the ones a screener is looking for.
The posting, your resume, and the gaps between them. One click loads all three.
More open at Anthropic
- Account Executive, AI NativeNew York City, NY; San Francisco, CA | New York City, NY
- Account Executive - DNBSingapore
- Account Executive, Public SectorSydney, Australia
- Account Executive - Public Sector (ASEAN)Singapore
- Accounting, Revenue Internal ControlsSan Francisco, CA | Seattle, WA
- AI Fluency Education LeadSan Francisco, CA | New York City, NY