Proton
Privacy
(Security)MachineLearningEngineer
Neural analysis suggests this role is
optimal for Mid candidates.
“(Security) Machine Learning Engineer at Proton. Skills: Machine learning model development for security detection, Data engineering for security data pipelines, AI engineering and LLM-powered automation for SOC tasks, Research and innovation in security data science and ML. Design, develop, and deploy machine learning models to enhance security detection, anomaly identification, and incident response. Integrate ML outputs into the SOC workflow to enable smarter and faster triage”
What You'll Achieve.
SOC analysts leverage ML-powered detections to identify threats faster; Reduction in alert fatigue and false positives through adaptive and data-driven models; Collaboration established between the security and MSA ML teams, sharing expertise and best practices; Security data becomes more accessible, structured, and usable for analytical and predictive use cases; New, intelligent detections, enrichment, and incident response automations become part of the SOC’s standard toolkit
Industry & Context.
Data-driven approaches; Anomaly identification; Automated threat detection; Statistical analysis; Clustering
What They're Looking For.
Must Have
Proven experience in machine learning engineering or data science, ideally in a cybersecurity or operations context, Proficiency in Python, Knowledge of ML frameworks, Experience with data manipulation and analysis using Pandas, NumPy or similar tools, Familiarity with security data sources (e. g. , SIEM logs, EDR telemetry, network flow, authentication logs), Solid understanding of ML lifecycle: data preparation, model training, evaluation, deployment, and monitoring, Experience with data pipelines and storage technologies (e. g. , Airflow, Kafka, Redis, Elasticsearch, Clickhouse, etc.), Ability to work independently and collaborate effectively with both ML and security specialists
Nice to Have
Prior experience in threat detection, SOC operations, or security automation, Knowledge of adversarial ML, graph analytics, or behavioral modeling in security contexts, Experience integrating ML models into SIEM pipelines or automated detection frameworks, Exposure to LLMs and AI engineering (e. g. , prompt engineering, RAG, agent design), and awareness of LLM-specific risks like prompt injection and data leakage
What You'll Do.
and deploy machine learning models to enhance security detection
anomaly identification
and incident response
Integrate ML outputs into the SOC workflow to enable smarter and faster triage
Continuously evaluate and tune models to reduce false positives and improve detection precision
Ensure model outputs are interpretable and actionable for SOC analysts
Build and maintain data pipelines to collect
and transform security-relevant data into ML-ready datasets
Collaborate with security engineering team to ensure scalable and secure data handling
Explore and build LLM-powered tools to automate repetitive SOC tasks
Stay current on advancements in security data science
and automated threat detection
Prototype and test new ML and AI techniques
Contribute to improving detection content through statistical analysis and clustering
Deploy models into production securely and responsibly
ensuring reliability and scalability
and retraining mechanisms for deployed ML models
Document methodologies and performance metrics for auditability and knowledge sharing
How You'll Work.
Team & Collaboration
Collaborate with security engineering team to ensure scalable and secure data handling; Work closely with the internal Machine Learning team (MSA) to leverage their expertise and best practices; Collaborate effectively with both ML and security specialists; In-Person Collaboration
Full Job Description
Join Proton and build a better internet where privacy is the default At Proton, we believe that privacy is a fundamental human right and the cornerstone of democracy. Since our inception in 2014, founded by a team of scientists from CERN, we have dedicated ourselves to providing free and open-source technology to millions worldwide, ensuring access to privacy, security, and freedom online. Our journey began with Proton Mail, the largest secure email service globally, and has since expanded to include Proton VPN, Proton Calendar, Proton Drive, and Proton Pass. These tools empower individuals and organizations to take control of their personal data, break away from Big Tech’s invasive practices, and defeat censorship. Our work impacts hundreds of millions of lives, from activists on the front lines defending freedom to leaders in governments protecting sensitive information. In some cases, Proton’s services have even been instrumental in saving lives by enabling secure and private communications in high-risk situations. Proton is a profitable company that does not rely upon VC funding, supporting over 100 million user accounts with a growing team of over 500 people from over 50 different countries, from the world's top companies and universities. We value intelligence, learning potential, and ambition in our hiring process. Adaptability is key as we navigate uncharted territories and redefine how business is conducted online. Hiring at Proton is highly selective, with less than 1% of candidates hired. We believe smaller teams of exceptional talent will always prevail over larger teams with lower talent density. You will have the opportunity work with many of the world's top minds in their fields, ranging from former international math and science olympiad winners to chess champions. We have a global mindset and big ambitions but remain a start-up at heart. We value empowerment and flexibility and keep our structure flat to keep moving fast and avoid unnecessary politi
Applying for this (Security) Machine Learning Engineer role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Greenhouse
- Create a Greenhouse profile before applying — it saves time across multiple applications.
- Upload your resume as a PDF; the parser handles it better than Word.
- Answer all knockout questions carefully — wrong answers auto-reject before a human sees you.
- Enable email notifications to track application status in real time.
ANONYMOUS · UNFILTERED
What do employees actually say about Proton?
Real rants from real employees. Read before you apply.