
Job Overview
Location
Hybrid - Bangalore, India
Job Type
Full-time
Category
Software Engineering
Date Posted
June 22, 2026
Full Job Description
đź“‹ Description
- • Design, build, and operate AI-native detection systems core to Abnormal’s products, focusing on impersonation threats including brand, lookalike-domain, VIP, and employee impersonation.
- • Own detection projects end-to-end, from ambiguous problem scoping to launch, monitoring, and continuous improvement, with full accountability for reliability and performance.
- • Analyze missed attack data by reviewing real malicious messages, identifying underlying attack patterns, and translating them into scalable detection logic or new systems.
- • Write and tune detection logic using scored signals and attributes, adding new signals across the pipeline while minimizing false positives and maximizing precision.
- • Build, evaluate, and iterate on LLM-based detection agents using rigorous precision and recall metrics with internal evaluation tooling.
- • Surface detection outputs as reusable intelligence that can be consumed by other products and teams across the Abnormal platform.
- • Participate in on-call rotation for detection surfaces, debugging and resolving customer escalations, and feeding operational learnings into runbooks, observability, and system design.
- • Leverage AI as a core part of the development workflow for code generation, test creation, data analysis, experimentation, and documentation, while maintaining rigorous validation practices.
- • Contribute to team health through extensive documentation, thoughtful code and design reviews, and sharing technical learnings with peers.
- • Work in a hybrid model from Bangalore, collaborating with a globally distributed team of engineers, product managers, and data scientists.
- • Operate in a high-scale, low-latency environment processing massive volumes of email and communication data across multiple cloud regions.
- • Treat internal AI tooling as a first-class deliverable, building LLM-powered detection systems rather than merely consuming AI tools.
- • Maintain strong engineering judgment when integrating AI into detection systems, ensuring decisions are validated, explainable, and aligned with customer trust.
- • Drive improvements in detection systems by continuously studying adversarial tactics, thinking like an attacker, and anticipating evasion techniques.
🎯 Requirements
- • 3+ years of professional software engineering experience with a track record of shipping and operating production systems
- • Strong software engineering fundamentals: data structures, algorithms, system design, testing, debugging, and clean, maintainable code
- • Strong Python proficiency and comfort learning new languages and frameworks as needed
- • Solid data-analysis instincts with comfort using SQL and reasoning over large datasets to find signals in noise
- • A detection or adversarial mindset: enjoyment in analyzing real attack samples and asking, "How would I get past this?"
- • Genuine fluency with AI-native development: daily use of AI coding agents and excitement to build LLM-powered detection systems
- • Demonstrated ability to own projects with initial ambiguity: clarifying scope, making tradeoffs explicit, delivering on time, and communicating status clearly
- • Excellent written and verbal communication skills, especially in remote, distributed teams where decisions are made in writing
- • Strong growth mindset and sense of ownership
🏖️ Benefits
- • Solve hard, meaningful problems at the intersection of AI, security, and large-scale detection where work directly protects customers
- • Work with smart, kind, and ambitious teammates who care deeply about detection craft, learning, and mutual growth
- • Gain real ownership and autonomy over critical detection surfaces, with clear pathways to grow into Senior and Staff roles
- • Be part of an AI-native R&D organization with strong investment in tools, workflows, and training to help engineers use AI to move faster and raise quality
Skills & Technologies
See exactly how your profile matches this role — strengths, skill gaps, and what to do about them.
About Abnormal Security Corporation
Abnormal Security Corporation provides cloud-native email security using behavioral AI to block business email compromise, phishing, malware, and socially-engineered attacks. The platform integrates via API with Microsoft 365 and Google Workspace, analyzing identity, content, and context to detect anomalies without altering mail flow. Founded in 2018 and headquartered in San Francisco, the company serves mid-market to Fortune 500 organizations, reducing risk, automating incident response, and providing visibility into human-targeted threats.
Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.
Newsletter
Weekly remote jobs and featured talent.
No spam. Only curated remote roles and product updates. You can unsubscribe anytime.
Similar Opportunities

Vanta, Inc.
4 months ago

Keyrock NV
4 months ago

Cloudera, Inc.
3 months ago

OpenAI, Inc.
4 months ago