Full-Time

Staff Machine Learning Engineer

Message Security Detection

Posted on 10/31/2025

Abnormal Security

Abnormal Security

1,001-5,000 employees

AI-driven email threat detection and prevention

Compensation Overview

$233.8k - $275k/yr

+ Bonus + RSUs

Remote in USA

Remote

Category
AI & Machine Learning (2)
,
Required Skills
Scikit-learn
Python
Tensorflow
Neural Networks
Pytorch
Machine Learning
Data Analysis
Requirements
  • 8+ years of experience designing and building high-impact, customer-facing machine learning applications.
  • Proven experience working on ML at scale with direct product impact in mature ML industries such as recommendation systems, ad tech, quantitative finance, or fraud detection.
  • Strong grasp of the theoretical limitations of deep learning models and a systematic approach to investigating and debugging poor model performance.
  • Demonstrated experience in the productionization of large-scale ML models in fast-feedback environments.
  • Ability to reason about abstract system gaps and propose generalizable, architecturally sound ML solutions, not just point fixes.
  • Expertise across the entire ML lifecycle, from data exploration and feature engineering to model deployment and online scoring.
  • Fluency in Python and ML frameworks like Scikit-learn, PyTorch, or TensorFlow.
  • BS degree in Computer Science, Applied Sciences, Information Systems, or a related engineering field.
Responsibilities
  • Serve as a technical leader and subject matter expert, providing architectural guidance and mentorship across multiple machine learning workstreams.
  • Architect and design generalizable ML systems to address the most critical gaps in our detection capabilities, moving beyond incremental improvements.
  • Reason holistically about our entire detection engine, defining the architectural vision for how different classes of models—from heuristic and behavioral to complex deep learning systems—should integrate and operate.
  • Drive the technical roadmap for foundational, long-term projects, such as evolving our global model training paradigms and creating centralized ML capabilities that can be leveraged as platforms by other teams.
  • Provide technical mentorship and feedback on ML decisions across different workstreams, elevating the performance of the entire team.
  • Own the end-to-end ML lifecycle: from data analysis, feature engineering, and model prototyping to working with infrastructure teams on productionization, deployment, and monitoring of large-scale models.
  • Investigate complex model performance issues, applying a deep theoretical understanding of machine learning and deep learning to diagnose and resolve them.
  • Continuously adapt our systems to new, unseen attacks by developing and refining our automated model retraining and evaluation pipelines.
Desired Qualifications
  • MS or PhD degree in Computer Science, Electrical Engineering, or another related engineering/applied sciences field.
  • Experience leading multi-quarter, cross-functional ML projects.
  • Experience with MLOps tools and building scalable data pipelines.

Abnormal Security provides AI-driven email security for large enterprises to prevent phishing, malware, and business email compromise. Its platform analyzes emails using machine learning to detect suspicious patterns and behaviors in real time, stopping threats before they reach users. The product integrates with existing email systems via an API, allowing quick deployment with minimal disruption. The company differentiates itself by focusing on sophisticated, modern threats that bypass traditional defenses, backed by a leadership team with deep AI, ML, and enterprise security experience, and by offering a subscription model that supports continuous protection and updates. The goal is to help organizations securely communicate by continuously detecting and blocking email-based attacks and staying ahead of attackers through ongoing research and development and growth.

Company Size

1,001-5,000

Company Stage

Series D

Total Funding

$534M

Headquarters

San Francisco, California

Founded

2018

Simplify Jobs

Simplify's Take

What believers are saying

  • Secured $250M Series D at $5.1B valuation from Wellington Management in 2024.
  • Appointed executives from MGM, Palo Alto, Check Point amid 97% threat surge.
  • Protects over 25% of Fortune 500 with FedRAMP pursuit and global expansion.

What critics are saying

  • Microsoft 365 Defender integrates native behavioral AI, commoditizing Abnormal by November 2025.
  • Proofpoint erodes market share with superior phishing prevention in 12-24 months.
  • Google Workspace's free Gemini BEC detection diverts mid-market in 6-12 months.

What makes Abnormal Security unique

  • Abnormal deploys via three-click API integration with Microsoft 365 and Google Workspace.
  • Behavioral AI ingests 10x more signals than legacy SEGs for anomaly detection.
  • Platform stops BEC, account takeovers, and AI-generated impersonations in real time.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Competitive pay and equity

One of the most proven machine learning teams in Silicon Valley

Best-in-class customer traction and growth

Team-wide commitment to excellence, velocity, and customer-focus

Strong growth opportunities and high ownership expectations

Full medical, dental, and vision health insurance benefits

Daily catered lunches and snacks

Generous PTO

Growth & Insights and Company News

Headcount

6 month growth

0%

1 year growth

2%

2 year growth

1%
Business Wire
Mar 17th, 2026
Abnormal AI launches Attune 1.0 behavioral foundation model to combat AI-driven cyberattacks

Abnormal AI has launched Attune 1.0, a behavioural foundation model for cybersecurity trained on over one billion derived behavioural signals. The model now powers 85% of detections across the Abnormal Behavior Platform. Attune 1.0 uses a unified multimodal architecture to understand normal organisational communication patterns and detect AI-driven attacks. The system identifies approximately 150,000 more attack campaigns weekly than earlier systems and delivers 50% higher precision. It recently identified and blocked a novel Microsoft Teams OAuth phishing campaign two months before public documentation. The company also released Detection 360 Insights for visibility into AI determinations and Custom AI Models in early access. New features for AI Phishing Coach include Phishing Risk Scoring and BEC and VEC Simulations, both now generally available.

Abnormal AI
Mar 10th, 2026
One Week in San Francisco: Where to Find Abnormal AI at RSAC 2026

One week in San Francisco: where to find Abnormal AI at RSAC 2026. Abnormal AI heads to RSA Conference 2026 to showcase the Abnormal Behavior Platform. Join Abnormal Security Corp. for AI-driven security insights, BEC defense, and exclusive RSAC events. March 10, 2026 The countdown to RSA Conference 2026 is on, and Abnormal AI is showing up in a big way. Trusted by more than 3,000 organizations worldwide - including over 25% of the Fortune 500 - Abnormal Security Corp. is bringing a unified presence to San Francisco to showcase the future of the Abnormal Behavior Platform. From the Abnormal AI Hub and executive panels to elite activations, curated networking, and its exclusive customer appreciation party, AI After Dark, this week is about connecting security leaders around what comes next in AI-driven security. Whether you're looking to eliminate sophisticated BEC attacks or explore how AI agents are reshaping modern defense, here's your ultimate guide to finding Abnormal at RSAC.

PYMNTS
Mar 19th, 2025
A Matter Of Trust: How Ai Is Reshaping Risk Assessment

Financial services institutions have long relied on machine learning for risk management, but the threat landscape has grown exponentially in the age of generative artificial intelligence (AI), according to executives from Capital One, Visa and Alloy. Fraudsters now have access to AI tools, including synthetic identity generation and real-time phishing attacks, they said. But AI is also arming companies to supercharge their defensive capabilities, since trust and security are the foundation of financial transactions. “Trust is the very foundation of commerce,” said Rajat Taneja, president of technology at Visa. “When two unknown parties are transacting, they have to trust that the transaction will occur correctly, the money will be transferred properly, any dispute will be managed, and there’s someone handling fraud and scams.”

SDxCentral
Dec 20th, 2024
Abnormal Security recognized as Leader in 2024 Gartner Magic Quadrant for Email Security Platforms

Abnormal Security has been recognized as a Leader in the inaugural Gartner Magic Quadrant for Email Security Platforms.

PR Newswire
Nov 19th, 2024
Patlytics Secures Funding, Expands Customer Base

Patlytics announced significant growth, securing new funding led by Myriad Venture Partners, following a $4.5M seed round in April. The company achieved a 20x increase in ARR and an 18x expansion in its customer base, with a 300% monthly growth rate. Patlytics' GenAI-powered platform enhances patent intelligence, streamlining workflows and improving IP protections. The patent industry is projected to reach $31.3 billion by 2032, driven by the need for efficient patent management solutions.

INACTIVE