Security ML Engineer: Proactive Threat Detection & Automation

Proton; Paris; Hybride; EUR 46 000 - 74 000; Plein temps

Avantages offerts par ce poste

Health coverage

Stock options

Flexible schedule

Lunch & snacks

Learning & development

Résumé du poste

Proton is seeking a Security Machine Learning Engineer to advance our SOC from reactive to proactive analytics. You will design ML models, build data pipelines, and integrate AI outputs into detection workflows across global offices.

You will collaborate with the ML group and security team to ensure scalable, auditable, and impactful security solutions. The role combines ML engineering with security operations, using Python, ML frameworks, and modern data tools to reduce false positives and

Qualifications

• Proven experience in machine learning engineering or data science, ideally in a cybersecurity or operations context.
• Proficiency in Python, with strong knowledge of ML frameworks.
• Experience with data manipulation and analysis using Pandas, NumPy or similar tools.
• Familiarity with security data sources (e.g., SIEM logs, EDR telemetry, network flow, authentication logs).
• Solid understanding of ML lifecycle: data preparation, model training, evaluation, deployment, and monitoring.
• Experience with data pipelines and storage technologies (e.g., Airflow, Kafka, Redis, Elasticsearch, Clickhouse).
• Ability to work independently and collaborate effectively with both ML and security specialists.

Responsabilités

• Design, develop, and deploy machine learning models to enhance security detection, anomaly identification, and incident response.
• Integrate ML outputs into the SOC workflow to enable smarter and faster triage.
• Continuously evaluate and tune models to reduce false positives and improve detection precision.
• Ensure model outputs are interpretable and actionable for SOC analysts.
• Build and maintain data pipelines to collect, process, and transform security-relevant data into ML-ready datasets.
• Collaborate with security engineering to ensure scalable and secure data handling.
• Explore and build LLM-powered tools to automate repetitive SOC tasks (e.g., alert triage, evidence gathering).
• Apply guardrails to ensure outputs are accurate, auditable, and safe to act on in operational contexts.
• Prototype and test new ML and AI techniques; contribute to improving detection content.

Outils

Airflow

Kafka

Redis

Elasticsearch

Clickhouse

Description du poste

Proton is seeking a Security Machine Learning Engineer to advance our SOC from reactive to proactive analytics. You will design ML models, build data pipelines, and integrate AI outputs into detection workflows across global offices.

You will collaborate with the ML group and security team to ensure scalable, auditable, and impactful security solutions. The role combines ML engineering with security operations, using Python, ML frameworks, and modern data tools to reduce false positives and