Head of Vulnerability Disclosure & Security Community

Anthropic is seeking a Head of Vulnerability Disclosure & Security Community to own the coordinated vulnerability disclosure program and CVE Numbering Authority (CNA) end to end. This role sets disclosure policy and timelines, serves as the public face of disclosure work, and helps shape industry handling of model-level vulnerabilities. The findings feed model-release decisions, and the role works as a peer of the Senior Cyber Policy Lead, building relationships with security researchers and threat-intelligence partners.

• Lead Anthropic's CVE Numbering Authority (CNA) function for vulnerability disclosure, including in open-source contexts
• Build and maintain partnerships with the external security research community and threat-intelligence organizations
• Represent Anthropic at security conferences and within the broader vulnerability-research community
• Maintain close familiarity with vulnerability-database ecosystems to keep the program aligned with industry norms
• Lead external technical engagement on cyber safety topics, including public and community-facing communication
• Collaborate with the Senior Cyber Policy Lead to ensure disclosure findings inform evaluations and policy
• Build the function: hire and mentor a future analyst, and put in place tooling and AI-assisted triage for scaling

• Experience operating or participating in a coordinated vulnerability disclosure program
• Experience coordinating multi-party disclosures involving researchers, vendors, and open-source maintainers
• Experience managing a disclosure queue with defined triage and response timelines
• Experience handling sensitive or embargoed vulnerability information, including TLP-marked material

• Experience running or working inside a PSIRT
• Experience coordinating disclosures that include government parties
• A track record of authoring CVEs or vulnerability disclosures
• Experience presenting original research at security conferences
• Experience operating or supporting a CNA, either internally or on behalf of third parties
• Experience incorporating AI into coordinated vulnerability disclosure or CNA processes, such as automated triage, severity assessment, or report handling
• Experience operating or scaling a bug bounty program through a commercial platform
• Established relationships across the disclosure coordination community and programs

Annual salary: $330,000—$395,000 USD. Anthropic offers competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space.

Apply via the Greenhouse link. Anthropic encourages applications even if not all qualifications are met. Visa sponsorship is available with reasonable effort.