Safeguards Enforcement Analyst, Account Takeover & Credential Abuse

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role As a Safeguards Enforcement Analyst on the account abuse team, you'll build and execute enforcement workflows that keep our products safe, with a focus on detecting and mitigating potential harm. Your initial focus will be account compromise: Anthropic's enforcement systems have to distinguish customers whose accounts have been compromised from actors abusing the platform — and today those two populations can look identical in the data. Stolen credentials and leaked keys are a growing abuse vector, and the collateral damage from enforcement against them lands on legitimate users. You'll own this problem end to end: detection, revocation, user notification, remediation, and the criteria for restoring access — turning what is today ad hoc incident response into a scalable, repeatable program. This position may expand into broader areas of enforcement over time. Safety is core to our mission, and you'll help shape policy enforcement so that our users can safely interact with and build on top of our products in a harmless, helpful, and honest way. Key responsibilities - Investigate credential-compromise incidents across first-party and third-party platforms, tracing actor behavior across accounts and surfaces - Design and operate remediation workflows for compromised accounts: revocation, customer notification, and standards for restoring access - Partner with Engineering and Data Science teams to improve how we separate compromised-customer traffic from willful abuse - Enforce usage policies with a focus on detecting and mitigating potentially harmful use of AI systems - Work with threat intelligence on emerging credential-abuse patterns and the actors behind them - Support the Safeguards policy design team by providing detailed feedback on policy gaps based on real enforcement scenarios - Keep up to date with emerging AI policy enforcement best practices, and use these to inform our decision-making and workflows - Write the policy framework for compromise scenarios, including cases where Anthropic can't independently verify a customer's security posture - Act as the enforcement SME when account compromise intersects with active abuse investigations Minimum qualifications - Experience in trust and safety, fraud investigation, security operations, or a related field - Subject matter expertise in one or more of: account takeover, credential abuse, session security, or incident response - Experience designing or operating enforcement, remediation, or customer-recovery flows — not just detection - Comfort using data (SQL or similar tools) to trace actor behavior across accounts and to measure what's working - A thoughtful perspective on the tension between protecting the platform and restoring access for legitimate compromised customers - Strong written communication skills, with experience producing clear briefs about messy incidents for technical and non-technical stakeholders - Excellent judgment and the ability to collaborate with team members while navigating rapidly evolving priorities and workstreams Preferred qualifications - Familiarity with credential-theft ecosystems or threat intelligence tooling - Experience working with fraud/risk vendors (e.g., device or network intelligence platforms) - Experience with API platform abuse specifically, not just consumer-account ATO - A deep interest in AI safety and responsible technology development - Experience writing effective prompts for generative AI systems in a content review or enforcement context The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $245,000—$285,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we

Experience in trust and safety, fraud investigation, security operations, or a related field. Subject matter expertise in one or more of: account takeover, credential abuse, session security, or incident response. Experience designing or operating enforcement, remediation, or customer-recovery flows — not just detection. Comfort using data (SQL or similar tools) to trace actor behavior across accounts and to measure what's working. A thoughtful perspective on the tension between protecting the platform and restoring access for legitimate compromised customers. Strong written communication skills, with experience producing clear briefs about messy incidents for technical and non-technical stakeholders. Excellent judgment and the ability to collaborate with team members while navigating rapidly evolving priorities and workstreams.