Head of Vulnerability Disclosure & Security Community

Details

Anthropic is seeking a Head of Vulnerability Disclosure & Security Community to own its coordinated vulnerability disclosure program and CVE Numbering Authority (CNA) end to end, including its public coordinated-disclosure jailbreak program. The role will set disclosure policies and timelines, serve as the public face of Anthropic's disclosure work, and help shape industry practices for handling model-level vulnerabilities. Findings will inform model-release decisions, evaluations, and policy.

Responsibilities

• Own and operate Anthropic's public coordinated-disclosure jailbreak program end to end.
• Lead Anthropic's CVE Numbering Authority function for vulnerability disclosure, including in open-source contexts.
• Build and maintain partnerships with the external security research community and threat-intelligence organizations.
• Represent Anthropic at security conferences and within the broader vulnerability-research community.
• Maintain familiarity with vulnerability-database ecosystems and align the program with industry norms.
• Lead Anthropic's external technical engagement on cyber safety topics, including public and community-facing communications.
• Collaborate with the Senior Cyber Policy Lead to ensure disclosure findings inform evaluations and policy.
• Build the function by hiring and mentoring a future analyst and implementing the tooling and AI-assisted triage needed to scale the program.

Requirements

Minimum Qualifications

• Experience operating or participating in a coordinated vulnerability disclosure program.
• Experience coordinating multi-party disclosures involving researchers, vendors, and open-source maintainers.
• Experience managing a disclosure queue with defined triage and response timelines.
• Experience handling sensitive or embargoed vulnerability information, including TLP-marked material.

Preferred Qualifications

• Experience running or working inside a PSIRT.
• Experience coordinating disclosures involving government parties.
• A track record of authoring CVEs or vulnerability disclosures.
• Experience presenting original research at security conferences.
• Experience operating or supporting a CNA, either internally or on behalf of third parties.
• Experience incorporating artificial intelligence into coordinated vulnerability disclosure or CNA processes, such as automated triage, severity assessment, or report handling.
• Experience operating or scaling a bug bounty program through a commercial platform.
• Established relationships across the disclosure coordination community and its programs.

A bachelor's degree or an equivalent combination of education, training, and experience is required. The field of study should be relevant to the role as demonstrated through coursework, training, or professional experience. Required years of experience correlate with the internal job level requirements for the position.

Compensation

• Annual salary: $330,000–$395,000 USD

Benefits

Anthropic offers competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and office spaces for collaboration.