Staff ML Application Engineer (Cybersecurity)

TL;DR

Staff ML Application Engineer (Cybersecurity): Applying clustering, classification, and anomaly detection to cybersecurity data in the ICS/OT domain with an accent on integrating ML model outputs into production data pipelines. Focus on translating research outputs into reliable pipeline components and ensuring system observability and stability under production loads.

Location: Must be based in the United States

Salary: $225,000

Company

hirify.global is the market leader in ICS/OT Cybersecurity, dedicated to protecting critical industrial infrastructure that provides essential modern civilization services.

What you will do

• Apply ML techniques including clustering, classification, and anomaly detection to ICS/OT cybersecurity data problems.
• Integrate ML model outputs into batch and near-real-time production data pipelines and workflows.
• Collaborate with Data Engineers to define clear data contracts and ensure appropriate observability and failure modes.
• Evaluate open-source and third-party models to determine the best fit for specific use cases.
• Write clean, maintainable Python or Rust code for ML components.
• Troubleshoot production behavior to diagnose output quality issues and data drift.

Requirements

• 4+ years of software engineering experience with significant time spent on ML outputs or data pipelines in production.
• Proficiency in Python and SQL, with comfort handling data at scale.
• Hands-on experience applying ML techniques (k-means, DBSCAN, hierarchical clustering, etc.) and using scikit-learn.
• Solid understanding of data pipeline concepts, transformations, and visibility of failures.
• Ability to critically evaluate model trustworthiness beyond basic accuracy metrics.
• Must be located in the United States.

Nice to have

• Cybersecurity domain knowledge, specifically threat detection, network behavior, or ICS/OT operations.
• Experience with graph-based representations of network topology or asset relationships.
• Familiarity with stream processing or event-driven architectures.
• Exposure to containerized environments like Docker and Kubernetes.

Culture & Benefits

• Remote-first culture.
• Competitive equity package.
• Comprehensive benefits plan.
• Mission-driven environment focused on protecting global critical infrastructure.