Senior Machine Learning Engineer (SOC)
Proton· CC - Security
Hybrid (Paris or Geneva)€46k - €74kfull-timePosted 5mo ago
About the role
Senior Machine Learning Engineer within Proton's Security Operations Center (SOC) to transform from reactive to proactive detection and response using ML/AI, with potential LLM-powered automation, in Paris or Geneva.
Responsibilities
- Design, develop, and deploy machine learning models to enhance security detection, anomaly identification, and incident response.
- Integrate ML outputs into the SOC workflow to enable smarter and faster triage.
- Continuously evaluate and tune models to reduce false positives and improve detection precision.
- Ensure model outputs are interpretable and actionable for SOC analysts.
- Build and maintain data pipelines to collect, process, and transform security-relevant data into ML-ready datasets.
- Collaborate with security engineering to ensure scalable and secure data handling.
- Explore and build LLM-powered tools to automate repetitive SOC tasks (e.g., alert triage, evidence gathering, incident summarisation, report generation).
- Apply guardrails and evaluation to ensure outputs are accurate, auditable, and safe to act on in operational contexts.
- Stay current on advancements in security data science, adversarial ML, and automated threat detection.
- Prototype and test new ML/AI techniques (e.g., unsupervised anomaly detection, graph-based threat correlation).
- Contribute to improving detection content through statistical analysis and clustering.
- Deploy models into production securely and responsibly, ensuring reliability and scalability.
- Implement monitoring, alerting, and retraining mechanisms for deployed ML models.
- Document methodologies and performance metrics for auditability and knowledge sharing.
Qualifications
- Proven experience in machine learning engineering or data science, ideally in a cybersecurity or operations context.
- Proficiency in Python, with strong knowledge of ML frameworks.
- Experience with data manipulation and analysis using Pandas, NumPy or similar tools.
- Familiarity with security data sources (e.g., SIEM logs, EDR telemetry, network flow, authentication logs).
- Solid understanding of ML lifecycle: data preparation, model training, evaluation, deployment, and monitoring.
- Experience with data pipelines and storage technologies (e.g., Airflow, Kafka, Redis, Elasticsearch, Clickhouse, etc.).
- Ability to work independently and collaborate effectively with both ML and security specialists.
- Proton is an office-first company; in-person collaboration is valued.
Skills
Required:Machine learning engineeringPythonData manipulation (Pandas, NumPy)Security data sourcesML lifecycleData pipelines/storageIndependent collaboration
Benefits
- Work that Matters: impact-oriented role focused on privacy.
- Technology: generous hardware and software tooling.
- Learning & Development: growth-focused with real ownership from day one.
- Employee Benefits: health coverage, retirement options, generous leave, wellness support.
- Stock Options: ownership from day one.
- Food: lunch and snacks in offices.
- Transport: coverage for public transport, bike allowances, or parking.
- Flexible Working: schedule-owned, outcomes-focused.
Last updated Oct 15, 2026. Interested? Apply on the company site.
About Proton
Privacy by default
Proton was started in 2014 by scientists who met at CERN and shared a vision of an internet that defends freedom and puts people first.
EmailCalendarVPNDriveDocsSheetsPhotosPassword manager
More open roles at Proton
- CRM & Lifecycle Marketing Lead (B2B)4d agoHybrid (London and Barcelona) · Marketing
- SRE Manager (VPN)2w agoHybrid (Geneva/Barcelona) · VPN
- Site Reliability Engineer (Meet)2w agoTaipei · CC - Engineering Meet
- Senior Product Designer - (VPN)2w agoCC - Product Design
- Localization Manager3w agoHybrid (London) · CC - Localization