Senior Machine Learning Engineer (SOC)

About the role

Proton is looking for a Senior Machine Learning Engineer to transform its Security Operations Center (SOC) from reactive to proactive. You will integrate advanced ML models and AI tools into detection and response workflows, working closely with both security and ML teams.

Key responsibilities

• Design, develop, and deploy ML models for security detection, anomaly identification, and incident response.
• Integrate model outputs into SOC workflows to enable faster, smarter triage and reduce false positives.
• Build and maintain data pipelines for security‑relevant data (logs, network traffic, endpoint events) using technologies such as Airflow, Kafka, and Elasticsearch.
• Explore and build LLM‑powered tools to automate repetitive SOC tasks, ensuring safety and auditability.
• Stay current on security data science advances, prototype new techniques, and contribute to detection content improvement.
• Deploy models securely, implement monitoring, alerting, and retraining mechanisms, and document methodologies for auditability.

Required profile

• Proven experience in machine learning engineering or data science, preferably in cybersecurity or operations.
• Strong Python skills and familiarity with ML frameworks.
• Experience with data manipulation tools such as Pandas and NumPy.
• Understanding of the full ML lifecycle from data preparation to monitoring.
• Ability to work independently and collaborate with both ML and security specialists.

Required skills

• Python
• ML frameworks (e.g., TensorFlow, PyTorch)
• Pandas, NumPy
• Data pipeline tools (Airflow, Kafka, Redis, Elasticsearch, Clickhouse)
• Familiarity with security data sources (SIEM logs, EDR telemetry, network flow, authentication logs)

What we offer

• Impactful work protecting millions of users' privacy.
• State‑of‑the‑art hardware and software.
• Learning & development opportunities and fast career acceleration.
• Comprehensive health coverage, retirement options, generous leave, and wellness support.
• Stock options, daily lunch and snacks, and transport benefits.
• Flexible working hours with an office‑first environment.