Security ML Engineer: Proactive Threat Detection

Proton; Paris (TX); On-site; USD 53,000 - 85,000; Full time

Benefits offered by this job

Stock Options

In-Person Collaboration

Learning & Development

Work that Matters

Food

Job summary

Proton is seeking a Security Machine Learning Engineer to transform our SOC from reactive to proactive, integrating ML-driven analytics and LLM-powered automation. You will work within the security team and collaborate with the internal ML group to deliver scalable, interpretable detections.

The role emphasizes production-grade ML pipelines, data handling security, and ongoing improvement of detection content, in a fast-paced, diverse, on-site environment across multiple offices.

Qualifications

• Proven experience in machine learning engineering or data science in cybersecurity or operations.
• Proficiency in Python with ML frameworks.
• Experience with Pandas, NumPy or similar tools.
• Familiarity with security data sources (e.g., SIEM logs, EDR telemetry, network flow, authentication logs).
• Solid understanding of ML lifecycle: data preparation, model training, evaluation, deployment, and monitoring.
• Experience with data pipelines and storage technologies (Airflow, Kafka, Redis, Elasticsearch, Clickhouse).
• Ability to work independently and collaborate effectively with ML and security specialists.

Responsibilities

• Design, develop, and deploy machine learning models to enhance security detection, anomaly identification, and incident response.
• Integrate ML outputs into the SOC workflow to enable smarter and faster triage.
• Continuously evaluate and tune models to reduce false positives and improve detection precision.
• Ensure model outputs are interpretable and actionable for SOC analysts.

Skills

Python

ML engineering

Pandas/NumPy

Security data sources

ML lifecycle

Data pipelines

Independent collaborating

Tools

Airflow

Kafka

Redis

Elasticsearch

Clickhouse

Job description

Proton is seeking a Security Machine Learning Engineer to transform our SOC from reactive to proactive, integrating ML-driven analytics and LLM-powered automation. You will work within the security team and collaborate with the internal ML group to deliver scalable, interpretable detections.

The role emphasizes production-grade ML pipelines, data handling security, and ongoing improvement of detection content, in a fast-paced, diverse, on-site environment across multiple offices.