Senior ML Security Detection Engineer

Social Finance, Inc. (SoFi); Seattle (WA); On-site; USD 144,000 - 247,500; Full time

Job summary

SoFi in Seattle seeks a Staff Security Detection Engineer to build and mature ML-driven detection and anomaly programs. You will own the detection lifecycle end to end, from feature engineering to production across large security data lakes.

Partner with the SOC, Fraud, and Threat teams to convert telemetry into high-confidence detections, and mentor engineers on ML, data quality, and pipeline reliability.

Qualifications

• 7+ years of hands-on ML model work for detection or anomaly detection in production.
• Strong background with data lakes and big-data tech for security telemetry.
• Proficient in Python and SQL with ML/data stack usage.

Responsibilities

• Design, build, and maintain ML models for anomaly detection with measurable targets.
• Operationalize models from notebook to production with CI/CD and versioning.
• Engineer features from security telemetry to improve model signal quality.
• Partner with SOC to tune detections and close feedback loops.
• Collaborate with Threat Intelligence and Fraud to translate hypotheses into analytics.
• Establish model governance, drift monitoring, and explainability.

Skills

ML for detection

Python programming

SQL querying

Big-data tech

Security telemetry

MLOps concepts

Communication skills

Education

Bachelor's in CS or related field

Tools

Snowflake

Databricks

Spark

S3/GCS

Job description

SoFi in Seattle seeks a Staff Security Detection Engineer to build and mature ML-driven detection and anomaly programs. You will own the detection lifecycle end to end, from feature engineering to production across large security data lakes.

Partner with the SOC, Fraud, and Threat teams to convert telemetry into high-confidence detections, and mentor engineers on ML, data quality, and pipeline reliability.