Staff ML Security Detection Engineer

SoFi; Seattle (WA); On-site; USD 180,000 - 260,000; Full time

Job summary

SoFi is seeking a Staff Security Detection Engineer to build and mature an ML-driven detection program. You will own the detection lifecycle end to end, from feature engineering to model validation, operating over large security data lakes and streaming pipelines.

You will partner with SOC, Fraud, and security teams to deliver high-confidence detections at scale. You will design and deploy models, operationalize them in production with CI/CD, and guide governance, data quality, and

Qualifications

• 7+ years hands-on experience building and operating ML models for detection or anomaly detection in production.
• Experience with data lake/big-data technologies for large-scale security telemetry.
• Strong programming and SQL skills with ML/data stack tools for feature engineering and automation.
• Understanding of security telemetry sources and how to shape them into features.
• Experience with anomaly detection techniques and end-to-end model lifecycle.
• Familiarity with security frameworks (MITRE ATT&CK) and threat scenarios.
• Excellent written communication for models, runbooks, and stakeholder updates.

Responsibilities

• Design, build, and maintain ML models for anomaly detection with measurable precision/recall targets.
• Operationalize models from notebook to production with CI/CD and versioning.
• Engineer and tune features from identity, endpoint, network, cloud, and SaaS telemetry.
• Collaborate with SOC to tune detections and close feedback loops.
• Translate threat hypotheses into repeatable, model-backed analytics with clear metrics.
• Establish model governance including drift monitoring, retraining, and explainability.
• Contribute to reference architectures and documentation for ML detection platform and data pipelines.
• Mentor engineers and analysts on applied ML and pipeline reliability.

Skills

Anomaly detection

Python

SQL

Data lake

Collaboration with SOC

Model governance

Communication

Education

Bachelor's degree in CS/Data Science

Tools

Snowflake

Databricks

Spark

Delta/Iceberg

S3/GCS

Pandas

scikit-learn

PyTorch or TensorFlow

SageMaker

Job description

SoFi is seeking a Staff Security Detection Engineer to build and mature an ML-driven detection program. You will own the detection lifecycle end to end, from feature engineering to model validation, operating over large security data lakes and streaming pipelines.

You will partner with SOC, Fraud, and security teams to deliver high-confidence detections at scale. You will design and deploy models, operationalize them in production with CI/CD, and guide governance, data quality, and