Software Engineer II, Attack Detection

About the Role

At Abnormal AI, we are on a thrilling mission to safeguard the world's largest enterprises against a vast range of relentless email attacks. We protect our customers against adversaries who constantly evolve their techniques and tactics to outwit and undermine traditional email security approaches. That's what makes our novel behavioral- based approach so…Abnormal. Abnormal has constantly been named as one of the top cybersecurity startups and our behavioral AI system has helped us win various cybersecurity accolades resulting in being trusted to protect more than 15% of the Fortune 500 (and ever growing).

As a Software Engineer II, you will build customer-facing security features and the software that supports them. Projects may include detection services or AI agents that use models and software tools to investigate suspicious activity. Other projects support model development and evaluation, mostly driven by automated agentic loops.

You will collaborate closely with ML Engineers, Data Scientists, and fellow Software Engineers to turn new approaches into reliable production systems and in turn help us catch more attacks and improve security investigations while limiting false positives and cost. Your work will help keep our inbound email security product world-class in an ever-evolving threat landscape. Your contributions will directly influence the success of our Email Security product and Abnormal as a whole.

Strong software engineering skills are essential. Practical machine learning experience is preferred.

What You Will Do

• Build backend services and data pipelines for customer-facing security features.
• Integrate machine learning models and large language models into detection and investigation workflows.
• Develop AI agents that analyze suspicious activity and support security investigations.
• Build tools that make model training repeatable, agent-driven, and help engineers evaluate AI systems.
• Evaluate changes against real attack patterns and investigate missed attacks and false positives.
• Improve system reliability and performance within latency and cost limits.
• Write tested, readable code and contribute to technical designs and code reviews.
• Own well-defined features from design through release and monitor their behavior in production.

Must Haves

• A bachelor's degree in Computer Science, Software Engineering, Information Systems, or a related engineering field.
• At least 2 years of experience in software design and development.
• Experience with backend services or data-intensive applications where reliability and performance matter.
• Strong programming skills in a general-purpose language and knowledge of data structures and software design.
• Experience with automated tests and diagnosis of production issues through logs and metrics.
• Ability to turn a product requirement into a practical design and deliver it with guidance on larger technical decisions.
• Clear technical communication and effective collaboration with other engineers.

Preferred Qualifications

• Hands-on machine learning experience from industry, research, or substantial projects.
• Experience with large language models or AI agents, including evaluation of accuracy and reliability.
• Experience with statistical evaluation of classifiers, including precision and recall.
• Experience with Python or Go.
• Experience with data pipelines or tools that make model experiments reproducible.
• Experience with cybersecurity or fraud detection.

• #LI-PP1
• Actual compensation will be determined based on several non-discriminatory factors including skills, experience, qualifications, and geographic location.

Pay and benefits

In addition to base salary, this role may be eligible for bonus or incentive compensation, equity, and a comprehensive benefits package.

Base salary range

$149,200 - $214,500 USD

A note on AI in our process

Abnormal AI uses AI-assisted tools to help our recruiting team prepare for candidate interviews. These tools analyze resume content and role requirements to suggest interview questions and areas for the interviewer to explore.They do not make hiring decisions or screen candidates automatically. Every decision about a candidacy is made by a person.

Further, if your application is successful and Abnormal AI makes a conditional offer of employment, we will carry out pre-employment checks which must be successfully completed to progress to a final offer. All processes and pre-employment checks are in line with prevailing legislation and Abnormal AI's policies relevant to our security and privacy standards.