Safeguards Policy Analyst, Cyber Harms

Anthropic•San Francisco, WA

3d•Hybrid

About The Position

Anthropic is seeking an analyst to support its cyber product policy work. This role involves developing usage policy language, help-center and enforcement guidance, and launch policy notes that define what Anthropic permits and prohibits for cyber-relevant use, ensuring consistency with the company's constitution and access tiers. The analyst will examine the constitution and usage policies to verify that enforcement aligns with them, collaborate with threat intelligence and enforcement teams to meet safety standards, and coordinate cyber policy inputs for model releases and regulatory requirements alongside the Senior Cyber Policy Lead. Additionally, the role will assist in maintaining the controlled-access framework and keeping cyber-related policy commitments current with evolving standards. While coding is not required, a strong ability to engage with technical material, such as probes and classifiers, and translate it into robust policy is essential.

Requirements

Demonstrated ability to write clear policy analysis (professional or academic).
Familiarity with how AI developers or platforms enforce usage policies, or with cybersecurity policy, standards, or regulatory frameworks (e.g., usage policies/AUPs, trust and safety enforcement, NIST CSF, CVD).
Ability to read and interpret technical security material, such as vulnerability reports or threat assessments.
Ability to work across teams (threat intelligence, enforcement, engineering, policy) and communicate clearly in writing.

Nice To Haves

Experience in cybersecurity policy, including familiarity with coordinated vulnerability disclosure.
Exposure to government information-sharing and incident-notification frameworks.
Experience supporting engagement with government agencies, regulators, or standards bodies on cybersecurity or AI matters.
Experience with legal, technical, or policy aspects of vulnerabilities and disclosure.
Experience with model-release or product-launch review processes.
Familiarity with trust-and-safety or product-policy work at a platform (usage policies, enforcement appeals, policy communications).

Responsibilities

Contribute to the team's cyber product policy artifacts (usage policy language, help-center and enforcement guidance, launch policy notes) and help keep them consistent with the constitution and access tiers.
Analyze Anthropic's constitution and cyber-related usage policies, and check that enforcement decisions and safeguards match what they say; maintain a running gap log and propose text fixes.
Work with the threat intelligence and enforcement teams to ensure cyber safety standards are met; review a sample of enforcement decisions against policy text on a regular cadence and report drift.
Coordinate cyber policy inputs to model releases and to regulatory requirements: prepare the cyber policy section of launch/model-card reviews and regulator pre-briefs, in support of the Senior Cyber Policy Lead.
Support Anthropic's access-requirements policy and contribute to consolidation of the controlled-access framework across existing and emerging access programs.
Help keep Anthropic's cyber-related policy commitments current with shifting industry and regulatory standards, and ensure they map cleanly to our technical safeguards.
Draft inputs to reporting for partners and regulators.
Help translate technical evaluation and safeguard work into policy positions and internal guidance.
Engage closely with technical teams to understand the capabilities of probes and classifiers relevant to access policy.