Senior/Staff/Principal AI/ML Engineer - Threat Detection Engineering

4 months ago
Full-time
Lead
Artificial Intelligence and Machine Learning
Appgate

Appgate

Appgate is the secure access company empowering secure connections with Zero Trust principles for people, devices, and systems.

Professional Services
251-1K
Founded 2020

Description

  • Design and implement detection algorithms across authentication, authorization, network/location, data access, session management, and behavioral domains.
  • Build threat detection models and systems to identify identity compromise, privilege escalation, impossible travel, data exfiltration, and other threats.
  • Develop and deploy anomaly detection models such as Isolation Forest, One-Class SVM, and autoencoder neural networks.
  • Design explainable risk aggregation and scoring systems that correlate detection signals into dynamic user, device, and session risk scores.
  • Build scalable, low-latency streaming pipelines for real-time processing of ZTNA audit logs and security telemetry.
  • Architect and operate the end-to-end detection pipeline from log ingestion through risk aggregation and enforcement integration.
  • Define and maintain the detection taxonomy and lifecycle for the broader detection library.
  • Measure and improve signal quality by tracking MTTD, false positives, and MITRE ATT&CK coverage.
  • Partner with red teams to validate detections against realistic attack scenarios.
  • Collaborate with security, product, and platform engineering to align detection coverage with customer threat models and roadmap priorities.

Requirements

  • 7+ years of production AI/ML engineering experience.
  • Experience building threat detection, UEBA, ITDR, or identity security platforms, preferably at leading security or cloud companies.
  • Hands-on experience designing detections for identity-based threats such as credential compromise, privilege escalation, insider activity, behavioral anomalies, and data exfiltration.
  • Experience building AI-powered security systems using large language models, deep learning, and agentic AI techniques.
  • Real-time or near-real-time streaming pipeline experience with Kafka, Flink, Spark Streaming, or equivalent.
  • Familiarity with lakehouse formats such as Apache Iceberg or Parquet.
  • Knowledge of MITRE ATT&CK, identity threat kill chains, ZTNA or network access control systems, and audit log analysis.
  • Experience with detection-as-code frameworks such as Sigma or YARA is a bonus.
  • Experience applying LLMs or GNNs to security is a bonus.
  • Publications at USENIX, CCS, NeurIPS, or ICML are a bonus.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Technical Lead Manager

Point 251-1K Real Estate

Point is hiring a Technical Lead Manager to lead a senior engineering team building production-scale AI agents for homeowner customer experiences across voice, email, chat, and SMS.

System Design
8 hours, 48 minutes ago

Senior Information Security Infrastructure Engineer - Security Architecture - InfoSec

Elastic 1K-5K Internet Software & Services

Elastic is hiring a Senior Information Security Infrastructure Engineer for its InfoSec Security Architecture team to ingest security telemetry into Elasticsearch and maintain the clusters and pipelines that support detection, incident response, and security consulting.

Elasticsearch GitHub GitHub Actions Helm Kubernetes Python REST API Terraform
8 hours, 48 minutes ago

Cybersecurity Specialist (DISA)

Horizon Industries Limited is seeking a Cybersecurity Specialist to support DISA enterprise software systems remotely in the USA, providing security engineering and information assurance support in an agile environment.

Agile Bash Cybersecurity Linux Perl SIEM SQL Windows Server
8 hours, 48 minutes ago

Senior Machine Learning Engineer

Fullscript 251-1K Health Care Providers & Services

Fullscript is hiring a Senior Machine Learning Engineer for its AI & Analytics Engineering team to build and deploy reliable AI experiences for lab interpretation, clinical decision support, and practitioner workflows.

CI/CD Elixir Generative AI Git Hugging Face Machine Learning Python SQL
9 hours, 3 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers