Research Engineer, RSP Evaluations
Anthropic is looking for Research Engineers to design and run "gold standard" evaluations for catastrophic AI risks, determining AI Safety Levels (ASLs) for models. This role involves collaborating with experts in biosecurity, cybersecurity, and national security to measure the dangerous capabilities of AI systems, with significant implications for model training, deployment, and security strategies.
We are looking for Research Engineers to build “gold standard” evaluations for catastrophic risks, in order to understand what AI Safety Level (ASL) to assign to models. This will have major implications for the way we train, deploy, and secure our models, as detailed in our Responsible Scaling Policy (RSP). The policy defines a series of capability thresholds – AI Safety Levels (ASLs) – that represent increasing risks – crossing an ASL threshold would trigger a commitment to more stringent safety, security, and operational measures, intended to handle the increased level of risk.
Our evaluations teams have recently expanded, so we will not be actively hiring again until early 2024. However, we are still looking for expressions of interest in both teams - one focused on Autonomous Replication and Adaption (ARA) threats, one focused on CBRN and cyber threats, and a potentially expanded set of evaluation work streams in the future. By default we will reach out to candidates in the new year, or perhaps earlier for exploratory conversations. However, we would consider making offers to strong candidates on an earlier timeline if needed – there is also an option to indicate you would need an earlier response on the application form.
For all workstreams, experience designing and building evaluations would be valuable, but is definitely not essential. For National Security threats workstreams, we will particularly value experience working on confidential or sensitive projects and demonstrated integrity, responsibility, and trustworthiness. We will also value domain specific knowledge, although it is not necessary. For ARA threats workstreams, we would value experience with language model agents, although this is not essential.
Posted June 7, 2026