Senior Machine Learning Engineer (SOC) at Proton in Genève

Keywords

• Machine Learning
• Security Operations
• Cybersecurity
• Python
• Data Engineering
• LLM

Summary

Transform Proton's Security Operations Center from reactive to proactive by integrating advanced machine learning and LLM-driven automation into detection workflows. This role bridges cybersecurity operations and modern data-driven analytics to identify threats at scale.

Job Description

Proton, founded by CERN scientists, is a profitable company dedicated to building a better internet where privacy is the default. With over 100 million users and a team of more than 500 people from 50 countries, we value intelligence, learning potential, and ambition. As a Senior Machine Learning Engineer in our Security Operations Center (SOC), you will play a key role in transforming our security operations from reactive to proactive. You will bridge traditional cybersecurity and modern ML-driven analytics, working directly within the security team while collaborating with our internal Machine Learning team.

Your tasks

• Design, develop, and deploy machine learning models to enhance security detection, anomaly identification, and incident response.
• Build and maintain data pipelines to transform security-relevant data, such as logs and network traffic, into ML-ready datasets.
• Explore and build LLM-powered tools to automate repetitive SOC tasks, including alert triage and incident summarisation, with appropriate guardrails.
• Stay current on advancements in security data science and adversarial ML, prototyping new techniques like unsupervised anomaly detection.
• Deploy models securely into production, implementing monitoring and retraining mechanisms to ensure reliability and auditability.

Your profile

• Proven experience in machine learning engineering or data science, ideally in a cybersecurity or operations context.
• Proficiency in Python and strong knowledge of ML frameworks, including tools like Pandas and NumPy.
• Familiarity with security data sources such as SIEM logs, EDR telemetry, and network flows.
• Solid understanding of the full ML lifecycle, from data preparation to deployment and monitoring.
• Experience with data pipelines and storage technologies like Airflow, Kafka, or Elasticsearch.
• Prior experience in threat detection, SOC operations, or security automation is preferred.

What we offer

• The opportunity to work with top minds in their fields, including former olympiad winners and chess champions.
• A flat structure that values empowerment, flexibility, and fast movement without unnecessary politics.
• A chance to do work you can truly be proud of, contributing to a mission that impacts hundreds of millions of lives.