Full-Time
Demo Systems Engineer
Multiple Teams
Posted on 8/21/2025
Abnormal Security
1,001-5,000 employees
AI-driven email threat detection and prevention
Compensation Overview
$126.7k - $149.1k/yr
Remote in USA
Remote
 IT & Security (1) |
|---|
- 5+ years experience designing and building demo / lab environments at a hyper growth SaaS company
- 3+ years experience in a customer facing role (Sales Engineer, Solutions Architect, TAM, etc)
- Proven track record of working across functional teams with multiple stakeholders
- Proven experience translating business requirements into technical requirements and executing on them
- Experience working effectively with cross-functional teams
- Experience managing multiple projects within the same time schedule and time management experience
- BS degree in Computer Science, Applied Sciences, Information Systems or other related engineering field or relevant applicable experience
- Experience designing and operating secure cloud-based environments
- Deep understanding of M365 and/or GWS
- Scripting and automation skills (eg; Python, Go, Powershell)
- Experience with IaaS toolsets (eg; Terraform, Ansible. K8s)
- Experience with demo orchestration platforms (Demostack, Reprise, Consensus)
- Curiosity and experience with AI tool sets (ChatGPT, Gemini, CoPilot, Claude)
- Architect and maintain modular, reusable, cloud-based demo environments that simulate real-world cybersecurity use cases (e.g., phishing attacks, BEC, insider threats, SOC automation)
- Build secure, multi-tenant demo lab infrastructures using public cloud services (AWS, GCP, Azure) and technologies (eg; Docker, Kubernetes, Terraform)
- Integrate 3rd-party security tools (SIEM, SOAR, email gateways, identity providers, EDR) to replicate modern enterprise security stacks
- Develop automation pipelines and scripts (Python, Bash, PowerShell) to deploy, reset, and scale demo labs reliably across different regions and user profiles
- Implement CI/CD workflows to ensure environments stay in sync with the latest product updates, integrations, and threat intelligence
- Partner with Sales Engineering, Product Marketing, and Product Management to design demo scenarios aligned with market messaging and customer needs
- Serve as a technical advisor to go-to-market teams, enabling them with tools, assets, and training to deliver differentiated technical demos
- Own / work with InfoSec team on the architecture and evolution of internal demo labs and sandbox environments used for training, proof-of-concept testing, and competitive benchmarking
- Implement access controls, data reset workflows, and observability frameworks to ensure consistency, security, and auditability of demo environments
- Create detailed runbooks, environment diagrams, and troubleshooting guides for internal teams
- Offer hands-on support for high-stakes customer demos, field trials, and executive briefings
- Identify and resolve performance and User interface scalability issues
- Demonstrate good judgment in selecting methods and techniques for obtaining solutions
- Experience with big data, statistics and Machine Learning
- AI Code build automation (eg; Cursor)
- Experience with security platform tools (eg; Splunk, Crowdstrike, Okta)
- Security certifications (eg; CISSP, CEH)
- Other relevant certifications (eg; AWS Cloud Practitioner, Microsoft Azure Solutions Architect)
Abnormal Security provides AI-driven email security for large enterprises to prevent phishing, malware, and business email compromise. Its platform analyzes emails using machine learning to detect suspicious patterns and behaviors in real time, stopping threats before they reach users. The product integrates with existing email systems via an API, allowing quick deployment with minimal disruption. The company differentiates itself by focusing on sophisticated, modern threats that bypass traditional defenses, backed by a leadership team with deep AI, ML, and enterprise security experience, and by offering a subscription model that supports continuous protection and updates. The goal is to help organizations securely communicate by continuously detecting and blocking email-based attacks and staying ahead of attackers through ongoing research and development and growth.
Company Size
1,001-5,000
Company Stage
Series D
Total Funding
$534M
Headquarters
San Francisco, California
Founded
2018
Simplify's Take
What believers are saying
- Secured $250M Series D at $5.1B valuation from Wellington Management in 2024.
- Appointed executives from MGM, Palo Alto, Check Point amid 97% threat surge.
- Protects over 25% of Fortune 500 with FedRAMP pursuit and global expansion.
What critics are saying
- Microsoft 365 Defender integrates native behavioral AI, commoditizing Abnormal by November 2025.
- Proofpoint erodes market share with superior phishing prevention in 12-24 months.
- Google Workspace's free Gemini BEC detection diverts mid-market in 6-12 months.
What makes Abnormal Security unique
- Abnormal deploys via three-click API integration with Microsoft 365 and Google Workspace.
- Behavioral AI ingests 10x more signals than legacy SEGs for anomaly detection.
- Platform stops BEC, account takeovers, and AI-generated impersonations in real time.
Help us improve and share your feedback! Did you find this helpful?
Your Connections
People at Abnormal Security who can refer or advise you
Benefits
Competitive pay and equity
One of the most proven machine learning teams in Silicon Valley
Best-in-class customer traction and growth
Team-wide commitment to excellence, velocity, and customer-focus
Strong growth opportunities and high ownership expectations
Full medical, dental, and vision health insurance benefits
Daily catered lunches and snacks
Generous PTO
Growth & Insights and Company News
6 month growth
↑ 0%1 year growth
↑ 2%2 year growth
↑ 2%Abnormal AI has launched Attune 1.0, a behavioural foundation model for cybersecurity trained on over one billion derived behavioural signals. The model now powers 85% of detections across the Abnormal Behavior Platform. Attune 1.0 uses a unified multimodal architecture to understand normal organisational communication patterns and detect AI-driven attacks. The system identifies approximately 150,000 more attack campaigns weekly than earlier systems and delivers 50% higher precision. It recently identified and blocked a novel Microsoft Teams OAuth phishing campaign two months before public documentation. The company also released Detection 360 Insights for visibility into AI determinations and Custom AI Models in early access. New features for AI Phishing Coach include Phishing Risk Scoring and BEC and VEC Simulations, both now generally available.
One week in San Francisco: where to find Abnormal AI at RSAC 2026. Abnormal AI heads to RSA Conference 2026 to showcase the Abnormal Behavior Platform. Join Abnormal Security Corp. for AI-driven security insights, BEC defense, and exclusive RSAC events. March 10, 2026 The countdown to RSA Conference 2026 is on, and Abnormal AI is showing up in a big way. Trusted by more than 3,000 organizations worldwide - including over 25% of the Fortune 500 - Abnormal Security Corp. is bringing a unified presence to San Francisco to showcase the future of the Abnormal Behavior Platform. From the Abnormal AI Hub and executive panels to elite activations, curated networking, and its exclusive customer appreciation party, AI After Dark, this week is about connecting security leaders around what comes next in AI-driven security. Whether you're looking to eliminate sophisticated BEC attacks or explore how AI agents are reshaping modern defense, here's your ultimate guide to finding Abnormal at RSAC.
Financial services institutions have long relied on machine learning for risk management, but the threat landscape has grown exponentially in the age of generative artificial intelligence (AI), according to executives from Capital One, Visa and Alloy. Fraudsters now have access to AI tools, including synthetic identity generation and real-time phishing attacks, they said. But AI is also arming companies to supercharge their defensive capabilities, since trust and security are the foundation of financial transactions. “Trust is the very foundation of commerce,” said Rajat Taneja, president of technology at Visa. “When two unknown parties are transacting, they have to trust that the transaction will occur correctly, the money will be transferred properly, any dispute will be managed, and there’s someone handling fraud and scams.”
Abnormal Security has been recognized as a Leader in the inaugural Gartner Magic Quadrant for Email Security Platforms.
Patlytics announced significant growth, securing new funding led by Myriad Venture Partners, following a $4.5M seed round in April. The company achieved a 20x increase in ARR and an 18x expansion in its customer base, with a 300% monthly growth rate. Patlytics' GenAI-powered platform enhances patent intelligence, streamlining workflows and improving IP protections. The patent industry is projected to reach $31.3 billion by 2032, driven by the need for efficient patent management solutions.