About this role
Analyzing large-scale network telemetry to uncover behavioral anomalies and malicious signals forms the foundation of daily tasks for this senior team member. ExtraHop builds Network Detection and Response solutions, and this role focuses on advancing the machine learning and artificial intelligence capabilities powering the RevealX platform. Practitioners will design evaluation methods for complex, imbalanced cybersecurity datasets and collaborate closely with threat researchers and software engineers to turn research into production capabilities.
Operating in an applied data science environment, the person who thrives here enjoys tackling ambiguous problems through experimentation, statistical analysis, and robust modeling. Team members mentor peers through code reviews and strategy discussions while maintaining high engineering standards. The position suits autonomous professionals who combine strong problem-solving skills with clear communication to explain technical tradeoffs to product leaders.
What you will do
- Analyze massive volumes of network telemetry to pinpoint behavioral patterns and anomalies tied to malicious activities.
- Design and refine machine learning models and artificial intelligence techniques that strengthen product detection capabilities.
- Build evaluation frameworks tailored for cybersecurity data containing incomplete labels, rare events, and shifting attacker behaviors.
- Perform exploratory data analysis, feature engineering, and rigorous error analysis using complex datasets.
- Research emerging machine learning developments and assess their practical application to company products.
- Establish performance metrics and continuous monitoring strategies for detectors over time.
- Provide technical leadership and mentorship to fellow data scientists through design discussions and code reviews.
- Write clean, well-tested production code and document experimental methodologies and model behavior.
What you need
- Hold a bachelor's degree in a quantitative discipline like Data Science, Computer Science, or Mathematics, or possess equivalent practical experience.
- Demonstrate at least 7 years of professional data science experience developing and evaluating machine learning models for real-world scenarios.
- Maintain a strong foundation in statistics, experimental design, and model evaluation techniques.
- Bring practical experience working with noisy, incomplete, or highly imbalanced data while identifying causes of false positives and negatives.
- Show strong proficiency in Python and SQL alongside the ability to write maintainable and reviewable code.
- Demonstrate past success collaborating with software engineers to integrate data models into production systems.
- Exhibit strong problem-solving skills, intellectual curiosity, and the ability to independently own complex technical projects.
- Possess excellent written and verbal communication skills for explaining technical findings and tradeoffs to diverse audiences.
Nice to have
- Master's degree or Ph.D. in Data Science, Computer Science, Mathematics, or another quantitative discipline.
- Experience applying machine learning to cybersecurity, fraud detection, abuse detection, or anomaly detection.
- Familiarity with Network Detection and Response, network protocols, threat detection, or incident investigation.
- Experience with time-series analysis, clustering, graph analytics, or unsupervised and semi-supervised learning.
- Familiarity with cloud platforms such as AWS or GCP.
Benefits
- Health, Dental, and Vision Benefits
- Flexible PTO, Sick Time, Federal Holidays, and 3 Days of Paid Volunteer Time
- Annual Discretionary Bonus Plan
- FSA and Dependent Care Accounts + EAP
- Educational Reimbursement
- 401k with Employer Match or Pension
Skills and tech stack
Questions candidates ask
What is the remote work policy for this position?
The position supports a hybrid and remote work model with locations designated as Remote (US) or Seattle, WA.
What is the salary range for the role?
The salary range for this role is $165,000 to $180,000, and non-commissioned positions may be eligible to participate in the Annual Discretionary Bonus Plan.
What type of data and domain will I be working with?
You will analyze large-scale network telemetry to identify behavioral patterns, anomalies, and signals associated with malicious activity in a cybersecurity context.