> Markdown version of [/jobs/ext/4200942-lead-machine-learning-engineer](https://www.wearedevelopers.com/jobs/ext/4200942-lead-machine-learning-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Machine Learning Engineer

- **Company:** Salesforce.com, Inc.
- **Location:** New York, NY, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Apache HTTP Server, Cluster Analysis, Continuous Integration, Machine Learning, Rapid Prototyping Process, Data Streaming, Workflow Management Systems, Snowflake, Apache Spark, Mitre Att&ck, Data Strategy, Containerization, Pyspark, Kubernetes, Apache Flink, Apache Kafka, Docker
- **Published:** October 31, 2026
- **Apply:** https://www.juju.com/job/1_6546A1B8AE44462992674BCC9B7C3D7E-NY1663283

## About the Role

Required skills: * Extensive experience (3-5+ years) in data science, with at least 2+ years dedicated to the cybersecurity domain designing, implementing and deploying systems of anomaly detection, clustering, and graph models in production. * Extended practical knowledge and familiarity with security frameworks such as MITRE ATT&CK and OCSF. * Hands-on comfort with high-volume logs and proficiency with Spark/Pyspark, Snowflake, Flink and streaming services such as Apache Kafka * Deep understanding and application of containerization (Docker) and workflow orchestration (Kubernetes, Apache Air

## Description

We are looking for a highly motivated, hands-on lead machine learning engineer with a strong business understanding of cybersecurity problems, who acts as a force multiplier security data scientist for our security organization.
The lead will not simply build models; they will architect the data-driven strategy for our threat detection capabilities.
Your impact: * Shape the Defense Strategy: You will own the decision-making process-translating vague security threats into concrete mathematical problems.
By championing a rapid prototyping culture, you will validate hypotheses in days rather than months, ensuring our engineering resources are focused only on high-value detections while killing low-signal ideas early. * Detect the "Unknown Unknowns": You will lead the evolution of our threat detection, introducing more advanced probabilistic modeling, graph analytics, supervised and unsupervised learing.
Your work will expose sophisticated threats-such as active system intrusions, lateral movement, beaconing, and insider attacks-that evade traditional defenses, directly reducing the organization's risk surface. * Elevate the Organization: You will act as a force multiplier, mentoring junior scientists and engineers, and building the internal tooling, feature stores, and libraries that make the whole team faster.
You will influence the broader security engineering roadmap to ensure a closed loop security telemetry that is treated as a first-class citizen. * Operationalize Intelligence: By prioritizing engineering rigor (CI/CD, scalable code) and adversarial resilience, you will deliver production-grade models that the SOC actually trusts-minimizing "alert fatigue" and maximizing analyst efficiency.