AI-Driven Threat Engineer - Hybrid

Dark Trace; Cambridge; Hybrid; GBP 40,000 - 50,000; Full time

Benefits offered by this job

Private medical insurance

Life insurance

Salary sacrifice pension

Enhanced family leave

Cycle to work

Birthday off

23 days' holiday (rising to 25)

Job summary

Darktrace is seeking candidates for a hybrid role in Cambridge and London. You will complete a 12‑week structured training programme to develop expertise in threat detection and investigation, working with security analysts on real incidents and learning how the Darktrace platform detects and responds to threats.

Post training you will join the security engineering team to create AI‑driven hypotheses, conduct initial research, and release improvements to customers, collaborating with machine

Qualifications

• PhD in any technical area or equivalent research background.
• Knowledge or interest in the cyber security landscape, including network and AI threats.
• Experience with Python, including asynchronous code and structured data analysis pipelines.
• Knowledge of software engineering best practices (e.g. object‑oriented code, continuous integration, unit testing).
• Experience with AI and machine learning techniques (e.g. statistics, clustering, classification, anomaly detection, embeddings, LLM usage).

Responsibilities

• Complete a 12‑week structured training programme to develop expertise in threat detection and investigation, working alongside security analysts reviewing real incidents, understanding attacker techniques across hybrid networks, email, and AI usage.
• Join the security engineering team after training and own the end‑to‑end creation of AI‑driven hypotheses that investigate activity across the digital estate, including initial research and development, release to customers, and continuous improvement based on feedback, with collaboration across ML, security research, and software engineering teams.

Skills

Python

AI/ML techniques

Software engineering practices

Data analysis pipelines

Threat detection knowledge

Education

PhD or equivalent research background

Job description

Darktrace is seeking candidates for a hybrid role in Cambridge and London. You will complete a 12‑week structured training programme to develop expertise in threat detection and investigation, working with security analysts on real incidents and learning how the Darktrace platform detects and responds to threats.

Post training you will join the security engineering team to create AI‑driven hypotheses, conduct initial research, and release improvements to customers, collaborating with machine