The Opportunity

We are looking for a Software Engineer II, Backend to join our Federated Intelligence Platform team in India. The team serves as the federated intelligence layer within the Abnormal Data Platform, managing the ingestion, storage, and retrieval of critical entity insights and threat indicators that drive core detection and the customer portal. This position focuses on scaling NEP reads, managing OpenSearch, and ensuring the reliability of domain and vendor-engine federation. The hire will design and maintain high-volume ingestion and low-latency services across global infrastructures, playing a vital role in upholding detection efficacy as the company expands its security footprint into identity and AI-agent protection.

In this role, you will contribute to scalable backend services and distributed systems, taking ownership of features from design through production. You’ll partner closely with product managers, designers, and engineers across teams to solve meaningful customer problems and deliver secure, intuitive experiences.

What You'll Do as a Software Engineer II - Backend

As part of our Federated Intelligence Platform team, you will:

Design and Development:

Build out performant APIs to serve consistent data that serve as sources of truth for many systems in Abnormal.
Build and maintain high-throughput, low latency systems that process 100s of millions of events per day to enable detection to identify notable events.
Establish data pipelines that ensure our data is updated regularly and reliably
Enhance our frameworks to allow us to make changes to our APIs and datasets in an agile manner
Develop robust and scalable backend integrations with external applications
Define deliverables towards key projects, de-risking projects and executing them towards key milestones.
Be relied upon to own the delivery of complex features for a Standing Team -- to design, decompose, execute, and launch.
Own SLAs/SLOs for our systems and drive improvements.

Testing and Debugging

Conduct thorough testing of applications, including unit testing and integration testing
Use debugging tools and techniques to diagnose and fix issues in a timely manner.
Driving overall quality of the systems and codebase
Influence quality culture of the team by example.

Support and On-call

Provide operational support to maintain a high level of system uptime and performance
Provide technical support to troubleshoot and resolve issues reported by users or identified through monitoring systems and participate in on-call rotations.
Proactively identify inefficiencies in monitoring and alerting systems and address them through efficient solutions

Collaboration and Communication

Communicate effectively in an async manner with team members to provide updates, discuss challenges and propose solutions.
Participate in code reviews to maintain code quality and in system design discussions
Create a magical work environment with colleagues and memorable interview process for candidates
Mentor and coach other junior team members on the team.

Continuous Learning and Improvement

Actively contribute to knowledge sharing within the team and participate in professional development activities.

You are someone who wants to make an impact. You are passionate about solving customer problems and have built up a base of skills in backend and distributed systems development to do so. You want to apply those skills on a problem that leaves the world in a better place.

We are a scrappy team: we are building multiple systems from scratch - this means you should be comfortable with a level of uncertainty beyond what you’d find at a more mature company or even a more mature team at Abnormal. Many of our projects will come with vague requirements across multiple teams, and we expect this engineer to be able to refine the requirements from the teams by reaching out to them to make sure we fulfill their needs.

We are a very distributed team, as such you will need to have excellent communication skills across both verbal and written mediums. You will need to be just as comfortable on a zoom call as writing a 1 pager project proposal to be shared across the team for technical feedback.

Must Haves

Experience building and operating highly scalable and highly available distributed systems and services.
Experience working with data pipelines, both event-driven and synchronous.
3+ years of overall software engineering experience
Experience with relevant tech stack:

Language: Golang, Python
Cloud Platform : AWS
Framework: Spark
Experience with Storage / Data Pipelines

At least 1 year of experience designing complex distributed systems
Proven experience with end to end ownership across various stages of SDLC including requirements gathering, design, development, production support and maintenance
Demonstrated expertise in Kafka or comparable high-throughput messaging and streaming platforms
Hands-on experience with OpenSearch, DynamoDB, or architecting large-scale search and indexing systems
Familiarity with Airflow or equivalent workflow orchestration and data pipeline management tools
Background in production observability using Grafana or Prometheus and experience with on-call rotations
Proven experience working with agile development methodologies (both scrum and kanban)
Proven experience working and communicating effectively with cross-functional teams across multiple time zones with with remote stakeholders
BS degree in Computer Science or related engineering field

Nice to Have

Proficiency and comfort utilizing AI-augmented development workflows and engineering toolsets
1.5+ years of experience with Golang
1.5+ years of experience with Protobuf
1.5+ years of experience with Apache Spark (mainly PySpark)
Exposure to Airflow, Elasticsearch, Kafka, Parquet

#LI-FS1

A note on AI in our process:
Abnormal AI uses AI-assisted tools to help our recruiting team prepare for candidate interviews. These tools analyze resume content and role requirements to suggest interview questions and areas for the interviewer to explore.They do not make hiring decisions or screen candidates automatically. Every decision about a candidacy is made by a person. Further, if your application is successful and Abnormal AI makes a conditional offer of employment, we will carry out pre-employment checks which must be successfully completed to progress to a final offer. All processes and pre-employment checks are in line with prevailing legislation and Abnormal AI's policies relevant to our security and privacy standards.

Abnormal AI is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by law. For our EEO policy statement please click here. If you would like more information on your EEO rights under the law, please click here.

About the company

Abnormal Security provides AI-driven email security for large enterprises to prevent phishing, malware, and business email compromise. Its platform analyzes emails using machine learning to detect suspicious patterns and behaviors in real time, stopping threats before they reach users. The product integrates with existing email systems via an API, allowing quick deployment with minimal disruption. The company differentiates itself by focusing on sophisticated, modern threats that bypass traditional defenses, backed by a leadership team with deep AI, ML, and enterprise security experience, and by offering a subscription model that supports continuous protection and updates. The goal is to help organizations securely communicate by continuously detecting and blocking email-based attacks and staying ahead of attackers through ongoing research and development and growth.

Company Size

1,001-5,000

Company Stage

Series D

Total Funding

$534M

Headquarters

San Francisco, California

Founded

2018

Get referred to Abnormal Security

See people who can refer or advise you

Simplify's Take

What believers are saying

August 2026 OpenAI partnership expands product capabilities and internal adoption immediately.
July 2026 launches added Identity Threat Protection, AI Governance, and Infiltration Prevention.
September 2026 AI Cloud Security targets rogue agents, expanding beyond email into cloud.

What critics are saying

Proofpoint, Mimecast, and Microsoft bundle adjacent controls, pressuring Abnormal pricing by 2027.
AI Cloud Security remains private preview until September 2026, delaying revenue from new bets.
If email-security growth stalls, Abnormal's IPO path and $5.1 billion valuation weaken.

What makes Abnormal Security unique

API-deployed behavioral AI catches BEC and vendor fraud legacy gateways miss.
Abnormal protects 4,500+ organizations, including over 25% of the Fortune 500.
August 2026 AI App Store lets customers activate products in a single click.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Competitive pay and equity
One of the most proven machine learning teams in Silicon Valley
Best-in-class customer traction and growth
Team-wide commitment to excellence, velocity, and customer-focus
Strong growth opportunities and high ownership expectations
Full medical, dental, and vision health insurance benefits
Daily catered lunches and snacks
Generous PTO

Growth & Insights and Company News

Headcount

6 month growth

1 year growth

2 year growth

Abnormal AI

Oct 14th, 2026

Abnormal AI Earns AWS AI Competency for Generative AI.

Abnormal AI Earns AWS AI Competency for Generative AI. Abnormal AI has earned the Amazon Web Services AI Competency for generative AI, a validation by AWS of technical proficiency in building generative AI capabilities in solutions. Security teams evaluating generative AI have good reason to ask for proof. Claims about AI capabilities are easy to make and hard to verify from the outside, which is why third-party validation carries weight. AWS designed its AI Competency to help customers identify partners with demonstrated generative AI experience before ever running a pilot. Abnormal Security Corp. is pleased to share that Abnormal AI has earned the AWS AI Competency for Generative AI, a recognition AWS reserves for AWS Partners it has validated for technical expertise, security, and operational excellence in building generative AI solutions. The recognition builds on its standing as an AWS ISV Accelerate Program and AWS Security Competency partner, extending the work Abnormal Security Corp. already do to help shared customers protect themselves against advanced attacks. What the AWS AI Competency for Generative AI recognition means. The Generative AI Competency is one of two categories inside the broader AWS AI Competency, alongside Agentic AI. To qualify, AWS Partners undergo technical and commercial vetting from AWS Partner Solution Architects that confirms they can build, train, deploy, and scale generative AI solutions responsibly. For customers, the badge provides assurance that AWS has reviewed Abnormal's approach to building generative AI solutions against AWS's standards of security, reliability, and operational excellence for the program, so they don't have to take that on faith. How Abnormal puts Generative AI to work. Abnormal's core detection engine is designed not to rely on frontier models or generative AI. It runs on proprietary behavioral AI that establishes a baseline of normal behavior across the entities in your environment and is designed to autonomously catch and remediate the advanced attacks that bear no known signature, indicator, or payload. Behavioral AI also enables its customers to secure their own AI use. AI Governance, one of several new products Abnormal Security Corp. recently launched, gives organizations visibility into their AI tools, agents, and chat context to identify risk and help enforce policy automatically, including for AI usage on cloud platforms like Amazon Bedrock. Yet for the use cases where explaining, coaching, and reporting matter to its customers, Abnormal applies generative AI from model providers to support them. Generative AI translates complex security data into digestible, plain-language summaries through Inbound Email Security and other products and features. With AI Security Mailbox, GenAI helps its customers tailor the autonomous and personalized feedback employees receive after reporting a phishing message. It supports content creation via AI Phishing Coach, from attack simulations to ad hoc campaigns and video training, all personalized to the recipient and based on real attacks. These are just some of the ways the Abnormal Behavioral Security Platform uses generative AI, complementing its behavioral AI approach while helping ensure its customers continue to benefit from security that runs itself. How Abnormal works with AWS. Abnormal integrates with AWS environments, aligns to AWS security modernization initiatives, and is available in AWS Marketplace, giving AWS customers a path to procure, deploy, and scale Abnormal alongside the rest of their AWS environment. As generative AI reshapes both sides of the security equation, the vendors worth trusting are the ones who can show their work. The AWS AI Competency for generative AI is one more proof point of the reliability of its approach to building generative AI solutions. Ready to see how Abnormal leverages generative AI? Schedule a demo below or stop by Booth #435 at AWS re:Invent on November 30-December 3 to meet its team.

Business Wire

Sep 3rd, 2026

Abnormal AI adds OpenAI Daybreak models to cloud security platform to counter rogue AI threats

Abnormal AI has launched AI Cloud Security, a platform that uses behavioural AI to detect malicious AI agent activity in cloud environments. The announcement follows the OpenAI-Hugging Face incident, where AI agents accessed unintended production infrastructure during a security evaluation. The platform builds models of normal behaviour for every identity in a cloud estate, including human users, service accounts, and AI agents. It can automatically respond to threats by isolating workloads or revoking credentials, and uses OpenAI Daybreak models to assist incident responders with investigations. AI Cloud Security is currently in private preview for select Abnormal customers, with general availability planned for Q4 2026. Abnormal AI protects more than 4,500 organisations, including over 25% of the Fortune 500.

Associated Press

Aug 26th, 2026

Abnormal AI expands email security platform with outbound DLP and phishing simulation tools

Abnormal AI has expanded its email security platform with three new capabilities addressing inbound threats, outbound data loss, and employee training. The additions include Control Center, which allows teams to create custom detection models without coding; Email DLP Rules, which combines policy controls with an AI Triage Agent to manage outbound data; and upgraded AI Phishing Coach features that tailor simulation training based on actual threats facing the organisation. The AI-native security company serves more than 4,500 organisations, including over 25% of the Fortune 500. CEO Evan Reiser said the expansion reflects how email security must now address risks from multiple directions as attackers increasingly use generative AI to research targets and craft convincing messages. Custom AI Models and the newest AI Phishing Coach capabilities become generally available on 31 August, whilst Custom Rules and Email DLP Rules enter early access.

Abnormal AI

Aug 19th, 2026

Abnormal + OpenAI: accelerating secure AI adoption in the enterprise.

Abnormal + OpenAI: accelerating secure AI adoption in the enterprise. Abnormal is proud to partner with OpenAI to strengthen enterprise AI security and advance cyber defense. The companies will collaborate on new capabilities that improve security outcomes and help enterprises accelerate the safe adoption of AI. Abnormal will also expand its use of OpenAI across its products and business. Today, Abnormal AI and OpenAI announced a partnership to enable enterprises to securely adopt AI, build new product capabilities for the security industry, and advance the joint goal of using AI to protect and empower people. Both companies are innovators bringing AI technologies to cyber defenders. OpenAI is known globally for developing frontier models and products that help security teams investigate threats. Abnormal trains and deploys Behavioral AI to stop highly sophisticated cybersecurity attacks that conventional tools miss. At Abnormal, Abnormal Security Corp. want to partner with like-minded companies shaping the next generation of AI and cyber defense. OpenAI is one of those partners. With the partnership, Abnormal customers will be able to better address security, privacy, compliance, and governance requirements. Partnering with OpenAI to protect and empower people. GenAI has enabled attackers to operate at greater speed, sophistication, and scale than ever before. This means cyber defenses need to evolve to meet these criteria every single time an attack unfolds. Abnormal's behavioral AI is a critical requirement for preventing attackers from blending into an organization. As part of this partnership, Abnormal will join the OpenAI Daybreak Cyber Partner Program as an early security partner, which brings OpenAI together with cybersecurity companies and service providers to develop practical, governed solutions for defenders. The companies plan to explore how OpenAI's frontier models and Codex Security can complement Abnormal's Behavioral AI, including capabilities that help security teams monitor agent activity and identify anomalous behavior. Deploying OpenAI at Abnormal. As one early example of this collaboration in practice, Abnormal will also deploy OpenAI for its internal business operations and software development. Abnormal Security Corp. will work with OpenAI to develop practical patterns that help other enterprises accelerate adoption of AI safely. Importantly, its platform architecture does not change for its customers. Abnormal's core detection and response products will continue to be powered by its proprietary behavioral AI. To learn more about the latest evolution of the Abnormal Behavioral Security Platform, request a demo to connect with a member of its team.

Welcome.AI

Aug 6th, 2026

Aldine ISD enhances email security with AI against phishing attacks.

Aldine ISD enhances email security with AI against phishing attacks. Discover how Aldine ISD transformed its email security by implementing Abnormal's AI technology to thwart advanced phishing attacks and streamline IT operations, ultimately enhancing the safety and productivity of its email environment. Key facts. * Aldine ISD protects 40,000 mailboxes, showcasing the scale of AI's impact on security. * Legacy systems failed against sophisticated phishing, revealing vulnerabilities in traditional defenses. * Automated threat detection reduced IT workload, highlighting efficiency gains from AI integration. * Enhanced email security improves user experience, indicating a strategic shift towards proactive defense. * Adoption of Abnormal AI reflects a growing trend in education sector prioritizing cybersecurity investments. Summary. Aldine Independent School District (ISD) faced increasing security risks from sophisticated phishing attacks and account compromises that bypassed their legacy email defenses. To address these challenges, they implemented Abnormal's AI-powered email security platform, which significantly enhanced their protection and reduced manual workloads. As a result, Aldine ISD strengthened security for nearly 40,000 mailboxes and improved threat detection. Background. Aldine ISD, located in Texas, serves approximately 52,000 students and 9,000 staff members. Before deploying the new solution, the district relied on legacy email defenses that were inadequate against advanced phishing attacks and other security threats, leading to increased risks and a heavier burden on their IT team. Challenge. The specific problem Aldine ISD aimed to solve was the ineffectiveness of their existing email security measures, which allowed sophisticated phishing attacks, job scams, and account compromises to occur, putting their entire Google Workspace environment at risk. Solution. Aldine ISD deployed Abnormal's AI-powered email security platform to enhance their email defenses. This solution was designed to stop advanced phishing attempts, detect and remediate compromised accounts, automate the review of user-reported messages, and reduce inbox clutter. The implementation involved replacing their legacy email security solution after a successful evaluation period. Results. The deployment of Abnormal's platform led to measurable operational benefits, including improved threat detection and a reduction in manual workloads for IT staff. The solution effectively strengthened protection for nearly 40,000 mailboxes, although specific quantitative metrics were not provided in the source material. Key insights. Organizations facing sophisticated email threats should consider adopting AI-driven security solutions to enhance their defenses. Transitioning from legacy systems to modern platforms can lead to significant operational efficiencies and improved security outcomes. Customer testimonial. No direct quote was provided in the source material. AI-powered email security platform Technologies Google Workspace Organizations Aldine ISD Key concepts. phishing attacks email security automated approach compromised accounts user-reported messages operational benefits threat detection manual workloads Definitions. * phishing attacks - Fraudulent attempts to obtain sensitive information by disguising as a trustworthy entity in electronic communications. * AI-powered email security platform - A security solution that utilizes artificial intelligence to detect and prevent email-based threats. * compromised accounts - User accounts that have been accessed without authorization, often due to security breaches. * Google Workspace - A suite of cloud computing, productivity, and collaboration tools developed by Google. * automated approach - A method that uses technology to perform tasks with minimal human intervention. Use cases. * | Stopping advanced phishing * | Detecting compromised accounts * | Automating review of user-reported messages * | Reducing inbox clutter * | Strengthening protection for mailboxes * | Improving threat detection Frequently asked questions. What challenges did Aldine ISD face with their previous email defenses? Aldine ISD struggled with sophisticated phishing attacks, job scams, and account compromises that bypassed their legacy email defenses, leading to increased security risks. How did Abnormal's AI platform help Aldine ISD? The AI-powered email security platform helped Aldine ISD stop advanced phishing, detect compromised accounts, and automate the review of user-reported messages, significantly enhancing their email security. What was the scale of Aldine ISD's email environment? Aldine ISD serves approximately 52,000 students and 9,000 staff, protecting nearly 40,000 mailboxes with their email security solution. What operational benefits did Aldine ISD experience? After deploying the AI-driven email security, Aldine ISD experienced reduced manual workloads and improved threat detection, leading to a safer email experience. Why did Aldine ISD replace their legacy email solution? The district replaced its legacy solution after a successful evaluation of Abnormal's platform, which provided a more effective and automated approach to email security.

Abnormal Security

Software Engineer 2 - Abnormal Data Platform

About the job