Senior/ Principal Data Scientist, Security AI & ML

RADICL; Boulder (CO); Hybrid; USD 160,000 - 235,000; Full time

Job summary

RADICL is seeking a Senior or Principal Data Scientist to improve AI/ML for security in our AI-powered CSaaS platform. You will write code, run experiments, and ship models in a hands-on, production-focused role.

As an early member of the team, you will collaborate with experienced founders, work with the latest AI and security technologies, and influence platform direction while delivering measurable impact on threat detection, triage speed, and safety of our own AI systems.

Qualifications

• 6+ years in data science or applied ML for Senior, 8+ for Principal, with models you shipped and maintained in production.
• Strong Python and SQL, and large-scale data processing on a major cloud platform.
• Experience evaluating and improving LLM or agent systems in production.
• Hands-on experience adapting or training models for a specialized domain.
• Anomaly detection or classification with rare events and noisy labels.
• Solid statistics and experimental design, and the judgment to ship a simple baseline when it's good enough.
• Comfort in an engineering team: reading production code, writing tests, and writing clear RFCs.
• Principal: you've owned ML problems end to end and can defend architecture decisions for the ML stack.

Responsibilities

• Evaluate our agents. Define how we know our AI is right, measure it against analyst verdicts, and gate every change on the results.
• Make our AI better. Improve the quality, speed, and cost of our triage, investigation, and search agents.
• Adapt models to security. Decide when to customize or train models on our analyst-labeled data, and do it.
• Detect behavior, not signatures. Build models that catch threats rules miss across endpoint, identity, email, cloud and SaaS audit, network, and vulnerability data.
• Protect our own AI. Keep attacker-controlled data from manipulating our agents.
• Prove it in production. Show whether AI is helping, using measures like time to triage, analyst override rate, and false-positive load.
• Run it like software. Own versioning, monitoring, and strict per-customer data isolation, with outputs traceable enough for CMMC audits. Your skillset/experience should include:

Skills

Python & SQL

LLM in production

Model training

Anomaly detection

Statistical design

Code & tests

End-to-end ML ownership

Job description

Senior/ Principal Data Scientist, Security AI & ML

About RADICL
As the leading provider of Cybersecurity-as-a-Service (CSaaS), RADICL is revolutionizing advanced cyberthreat protection for small and medium-sized businesses (SMBs) in the U.S. Defense Industrial Base (DIB) and other regulated industries. No longer should SMBs be satisfied with lack luster solutions delivering lack luster protection. RADICL is ushering in a new era of turn-key and affordable cyberthreat protection via its AI-powered virtual SOC platform that allows human and digital agents to quickly and seamlessly become SMBs’ day-to-day compliance and security operations team.

RADICL’s turn-key CSaaS offering uniquely combines compliance management with AI and expert-driven 24/7 security operations. We guide customers to regulatory and best practice adherence with standards like CMMC and NIST CSF while also delivering 24/7 threat monitoring, deep-spectrum™ threat hunting, incident response, vulnerability management, and security awareness training.

With RADICL, customers can stay mission focused, confident their front, rear, and flank are protected, affordably and without compromise.

If you’re excited about working with industry experts to help SMBs focus on growing their businesses without the constant worry of security and compliance risks, we invite you to join us in our mission to protect American businesses and drive innovation in cybersecurity.

About the role

RADICL is a fully managed cybersecurity and compliance service for small and mid-sized organizations, many of them defense contractors facing nation-state threats and CMMC requirements. Our autonomous virtual SOC (vSOC) pairs AI agents that handle high-volume triage with expert analysts who handle judgment and response.
AI is already in production across our platform. Your job is to make it measurably better and add ML where rules fall short. This is a hands-on role: you'll write the code, run the experiments, and ship the models. We're hiring at the Senior or Principal level.

If the above excites you, RADICL Defense is seeking high performing, motivated individuals to join our mission.As an early member, you will work closely alongside an experienced founding team and realize the life-changing experience of building a company. You will work with the latest technologies in software, cybersecurity, and cloud and will have a significant impact on the formation of our platform and offering.

About You

You enjoy fast-paced environments, bring a positive attitude, and excel at getting things done. You enjoy being part of a high performing team and are also able to self-direct and self-start. You consider yourself to be top tier talent and are eager to help others raise their game. You enjoy working with customers, are an excellent communicator, and able to engage and interact with people of various backgrounds and skill levels. You want your work to have meaning, to be important. You want to be part of creating something great.

The threats you'll help us stop:

• AI-driven intrusions. Agentic attack frameworks like ARTEX have gone from first contact to privileged cloud access in under three hours.
• Hijacked AI agents and apps. Stolen OAuth tokens and compromised app identities are used to quietly pull data and change privileges.
• Copilots turned against users. Hidden prompt injections make AI assistants leak tokens and data.
• AI-built insiders. North Korean IT workers use AI personas and deepfake interviews to get hired at defense contractors.
• LLM-driven malware. Malware like LAMEHUG asks an LLM for its next command, so no two runs look alike.
• Phishing at scale. AI-written lures and MFA-bypassing token theft target exactly the organizations we protect.

What you'll do:

• Evaluate our agents. Define how we know our AI is right, measure it against analyst verdicts, and gate every change on the results.
• Make our AI better. Improve the quality, speed, and cost of our triage, investigation, and search agents.
• Adapt models to security. Decide when to customize or train models on our analyst-labeled data, and do it.
• Detect behavior, not signatures. Build models that catch threats rules miss across endpoint, identity, email, cloud and SaaS audit, network, and vulnerability data.
• Protect our own AI. Keep attacker-controlled data from manipulating our agents.
• Prove it in production. Show whether AI is helping, using measures like time to triage, analyst override rate, and false-positive load.
• Run it like software. Own versioning, monitoring, and strict per-customer data isolation, with outputs traceable enough for CMMC audits. Your skillset/experience should include:

What you bring:

• 6+ years in data science or applied ML (Senior), or 8+ (Principal), with models you shipped and maintained in production.
• Strong Python and SQL, and large-scale data processing on a major cloud platform.
• Experience evaluating and improving LLM or agent systems in production.
• Hands-on experience adapting or training models for a specialized domain.
• Anomaly detection or classification with rare events and noisy labels.
• Solid statistics and experimental design, and the judgment to ship a simple baseline when it's good enough.
• Comfort in an engineering team: reading production code, writing tests, and writing clear RFCs.
• Principal: you've owned ML problems end to end and can defend architecture decisions for the ML stack.

Nice to have:

• Security data and detection experience; MITRE ATT&CK.
• Vulnerability data (CVSS, EPSS) or CMMC / NIST 800-171.

Why this role:

• You’ll choose the methods and tools, and build it yourself.
• Real data: security telemetry at scale, analyst-labeled cases, and AI agents already in production.
• The mission: defending defense suppliers and other high-risk small organizations from nation-state threats.

Details:
Compensation: $160,000 – $195,000 base (Senior) / $195,000 – $235,000 base (Principal), plus equity, health, dental, vision, 401(k), and PTO.

About the Workplace

At RADICL, we prioritize our culture and believe the strongest teams are built through daily, side-by-side collaboration and experiential sharing. We also value individual freedom and flexibility. For this reason, we have a hybrid work model. As a team, we are in office M/W/Th with work-from-home on Tuesdays and Fridays. For remote positions, periodic travel to Boulder will be expected to participate in company events and meaningful side-by-side collaboration opportunities.

RADICL offices are in downtown Boulder, Colorado with easy-to-access employee parking provided by the company. We offer comprehensive, competitive benefits including health, dental, and vision as well as 401K and a responsible PTO plan .

The pay range for this role is:

160,000 - 235,000 USD per year (Boulder, CO)