- Design and implement detection algorithms spanning authentication, authorization, network/location, data access, and behavioral domains.
- Build advanced detections for identity compromise, privilege escalation, impossible travel, and data exfiltration.
- Develop ML-based anomaly detection models using Isolation Forest, One-Class SVM, and Autoencoders.
- Architect and operate a real-time detection pipeline from log ingestion to risk scoring.
- Define and implement security controls for autonomous AI agents, including detection of prompt injection and privilege escalation.
- Automate threat investigation, contextual analysis, and remediation workflows.
- Instrument and improve signal quality measuring MTTD and false positive rates.
- Collaborate cross-functionally with security, product, and platform engineering teams.
Artificial IntelligenceKafkaMachine Learning+2 more