We are seeking a Senior Security Engineer with a specialty in Detection and Incident Response to join our Security Engineering team. This role sits at the intersection of security operations and software engineering — you won't just investigate incidents, you'll build the systems that detect, contain, and prevent them. You will design and ship high-precision detections across cloud services and enterprise SaaS, develop automation that shortens response timelines, and mature the telemetry pipelines that make it all possible. Your ability to write production-quality code is just as important as your ability to triage an alert.

You will structure investigations, analyze root causes, and clearly communicate the significance of security incidents, their impact, and recommended remediation steps — but you'll also turn those findings into durable engineering improvements: better detections, tighter schemas, and smarter automation.

You will:

• Engineer, test, and deploy detection logic across cloud and enterprise environments, treating detections as software with version control, peer review, and measurable performance.
• Build and maintain incident response automation, runbooks, and tooling that reduce containment timelines without sacrificing developer velocity.
• Mature telemetry pipelines through improved schema design, normalization, enrichment, and quality checks that reduce false positives and increase signal fidelity.
• Perform digital incident investigations to identify and contain potential security breaches.
• Conduct digital forensics and malware analysis to understand attack vectors and adversary methodologies.
• Integrate alerting with messaging and ticketing systems to enable fast, traceable response workflows.
• Partner cross-functionally with IT, security, and engineering teams to harden identity and access patterns, close logging and forensics gaps, and implement maintainable guardrails that scale with the organization.
• Utilize threat intelligence platforms to improve hunting, detection, and response workflows.
• Clearly explain the significance and impact of incidents, providing actionable recommendations to both technical and non-technical stakeholders.

Ideally, you'd have:

• • 5+ years of experience in Detection Engineering, Incident Response, or Security Operations, with a strong emphasis on building and shipping security tooling and automation.
  • Proficiency in at least one programming language (e.g., Python, Go) and comfort writing production-grade code — not just scripts.
  • Hands-on experience designing or improving detection pipelines, SIEM content, and alerting workflows in cloud-native environments.
  • Practical experience with SIEM, EDR, and SOAR tools, with a preference for candidates who have built integrations or extended these platforms programmatically.
  • Strong understanding of modern cyber threats, common attack techniques, and adversary TTPs.
  • Familiarity with digital forensics tools and malware analysis techniques.
  • Experience with cloud-native environments (e.g., AWS, GCP, Azure) and the security telemetry those environments generate.
  • Exposure to threat intelligence platforms and integrating intel into detection and investigation workflows.
  • Strong communication skills, with the ability to translate complex security findings into clear business impact.
  • Relevant security certifications (e.g., GCIH, GCFA, GCIA, CISSP, GDSA) are a plus.

Scale AI is the data foundation for AI, helping organizations build and deploy reliable production AI applications. We partner with leading enterprises and government organizations to accelerate their AI initiatives through our data annotation platform, generative AI solutions, and enterprise AI capabilities.

About the General Agents Team

The General Agents team, part of Scale’s Enterprise organization, builds robust general agents for customer use cases and applications. The team sits at the intersection of frontier agent development and real-world deployment, translating state-of-the-art reasoning and agentic capabilities into reliable, production-grade systems that drive real economic value. Our agents are scalable systems built around recurring enterprise problem domains, with a strong emphasis on generalization, extensibility, and deployment across many customers.

About the Role

As a Senior/Staff Machine Learning Engineer (MLE) on the General Agents team, you’ll play a critical role in designing, building, and deploying production-ready AI agents that solve high-impact enterprise problems. You will work across the full agent lifecycle—from model and system design to evaluation, deployment, and iteration—bridging cutting-edge agentic techniques with the constraints and requirements of real customer environments.

You will:

• Design and implement end-to-end agent systems that combine LLM reasoning, tool use, memory, and control logic to solve recurring enterprise use cases.
• Build scalable, reliable agent architectures that can be deployed across many customers with varying data, tools, and constraints.
• Develop evaluation frameworks, datasets, environments, and metrics to measure agent performance, reliability, and business impact in production settings.
• Collaborate closely with product managers, customers, data annotators, and other engineering teams to translate enterprise requirements into robust agent designs.
• Productionize frontier agent techniques (e.g., planning, multi-step reasoning and tool-use, multi-agent patterns) into maintainable, observable systems.
• Own deployment, monitoring, and iteration of agent systems, including failure analysis and continuous improvement based on real-world usage.
• Contribute to technical direction and architectural decisions for general agent development best practices and methods, with increasing scope and leadership at the Staff level.

Ideally you’d have:

• 5+ years of experience building and deploying machine learning or AI systems for real-world, production use cases.
• Strong engineering fundamentals, supported by a Bachelor’s and/or Master’s degree in Computer Science, Machine Learning, AI, or equivalent practical experience.
• Deep understanding of modern LLMs, prompt-, context-, and system-level optimization, and agentic system design.
• Proven proficiency in Python, including writing production-quality, testable, and maintainable code.
• Experience building systems that integrate models with external tools, APIs, databases, and services.
• Ability to operate in ambiguous problem spaces, balancing research-driven approaches with pragmatic product constraints.
• Strong communication skills and comfort working in customer-facing or cross-functional environments.

Nice-to-haves:

• Hands-on experience building AI agents using modern generative AI stacks (OpenAI APIs, commercial or open-source LLMs).
• Experience with agent frameworks, orchestration layers, or workflow systems (e.g., tool calling, planners, multi-agent setups).
• Familiarity with evaluation, monitoring, and observability for LLM-powered systems in production.
• Experience deploying ML systems in cloud environments and operating them at scale.
• Experience fine-tuning or adapting foundation models using methods like supervised fine-tuning (SFT), reinforcement learning with verifiable rewards (RLVR), and low-rank adaptation (LoRA) to improve agent performance on domain-specific tasks.
• Interest in shaping the future of general-purpose enterprise agents and their real-world impact.

We are seeking a highly technical Security Engineer to join our Product Security team. This role is integral to ensuring the security and integrity of our products and services. You will conduct in-depth code reviews, implement security best practices, and influence the overall security strategy. Your expertise in TypeScript, Python, AWS, CI/CD, SAST, DAST, and terraform orchestration will be crucial in identifying and mitigating potential security vulnerabilities. You will also structure complex problems, diagnose root causes independently, and clearly explain the mechanics and significance of security vulnerabilities, including their exploitability and potential impact.

You will:

• Leverage broad product security expertise to build and maintain software tooling that secures every layer of the modern AI/ML software ecosystem.
• Conduct in-depth code reviews to identify and remediate security vulnerabilities.
• Evaluate and enhance the security of our product offerings, through RFC and service review.
• Implement and maintain CI/CD pipelines with a strong focus on security.
• Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) to identify vulnerabilities in production code.
• Utilize terraform orchestration to ensure secure and efficient infrastructure management.
• Guide engineering teams to build robust long-term solutions that consider security and privacy. 
• Clearly explain the mechanics and significance of security vulnerabilities, including their exploitability and potential impact.
• Influence the security strategy and direction of the team, advocating for best practices and continuous improvement.

Ideally, you’d have:

• Demonstrated ability to drive multi-month security initiatives independently, from problem definition through execution, without requiring significant direction.
• Proven experience as a Security Engineer with a focus on product security.
• Proficiency in NodeJS, TypeScript, Python, and/or Kubernetes.
• Strong understanding of modern Javascript application design.
• Production experience operating and securing AWS infrastructure at scale.
• Hands-on experience with SAST and DAST tools and methodologies.
• Familiarity with terraform orchestration for infrastructure management.
• You can structure complex problems and diagnose root causes independently, providing actionable insights without requiring manager input.
• Excellent communication skills, with the ability to clearly present technical concepts and their implications to both technical and non-technical stakeholders.
• Demonstrated ability to influence security strategies and drive improvements within a team.
• Relevant security certifications (e.g., CISSP, CEH, OSCP) are a plus.