Senior/ Principal Data Scientist, Security AI & ML

About the role

RADICL is a fully managed cybersecurity and compliance service for small and mid-sized organizations, many of them defense contractors facing nation-state threats and CMMC requirements. Our autonomous virtual SOC (vSOC) pairs AI agents that handle high-volume triage with expert analysts who handle judgment and response.

AI is already in production across our platform. Your job is to make it measurably better and add ML where rules fall short. This is a hands-on role: you'll write the code, run the experiments, and ship the models. We're hiring at the Senior or Principal level.

If the above excites you, RADICL Defense is seeking high performing, motivated individuals to join our mission. As an early member, you will work closely alongside an experienced founding team and realize the life-changing experience of building a company. You will work with the latest technologies in software, cybersecurity, and cloud and will have a significant impact on the formation of our platform and offering.

About You
You enjoy fast-paced environments, bring a positive attitude, and excel at getting things done.  You enjoy being part of a high performing team and are also able to self-direct and self-start.  You consider yourself to be top tier talent and are eager to help others raise their game.  You enjoy working with customers, are an excellent communicator, and able to engage and interact with people of various backgrounds and skill levels.  You want your work to have meaning, to be important.  You want to be part of creating something great.

The threats you'll help us stop:

• AI-driven intrusions. Agentic attack frameworks like ARTEX have gone from first contact to privileged cloud access in under three hours.
• Hijacked AI agents and apps. Stolen OAuth tokens and compromised app identities are used to quietly pull data and change privileges.
• Copilots turned against users. Hidden prompt injections make AI assistants leak tokens and data.
• AI-built insiders. North Korean IT workers use AI personas and deepfake interviews to get hired at defense contractors.
• LLM-driven malware. Malware like LAMEHUG asks an LLM for its next command, so no two runs look alike.
• Phishing at scale. AI-written lures and MFA-bypassing token theft target exactly the organizations we protect.

What you'll do:

• Evaluate our agents. Define how we know our AI is right, measure it against analyst verdicts, and gate every change on the results.
• Make our AI better. Improve the quality, speed, and cost of our triage, investigation, and search agents.
• Adapt models to security. Decide when to customize or train models on our analyst-labeled data, and do it.
• Detect behavior, not signatures. Build models that catch threats rules miss across endpoint, identity, email, cloud and SaaS audit, network, and vulnerability data.
• Protect our own AI. Keep attacker-controlled data from manipulating our agents.
• Prove it in production. Show whether AI is helping, using measures like time to triage, analyst override rate, and false-positive load.
• Run it like software. Own versioning, monitoring, and strict per-customer data isolation, with outputs traceable enough for CMMC audits.Your skillset/experience should include:

What you bring:

• 6+ years in data science or applied ML (Senior), or 8+ (Principal), with models you shipped and maintained in production.
• Strong Python and SQL, and large-scale data processing on a major cloud platform.
• Experience evaluating and improving LLM or agent systems in production.
• Hands-on experience adapting or training models for a specialized domain.
• Anomaly detection or classification with rare events and noisy labels.
• Solid statistics and experimental design, and the judgment to ship a simple baseline when it's good enough.
• Comfort in an engineering team: reading production code, writing tests, and writing clear RFCs.
• Principal: you've owned ML problems end to end and can defend architecture decisions for the ML stack.

Nice to have:

• Security data and detection experience; MITRE ATT&CK.
• LLM security: prompt injection, guardrails, red-teaming agents.
• Vulnerability data (CVSS, EPSS) or CMMC / NIST 800-171.

Why this role:

• You'll choose the methods and tools, and build it yourself.
• Real data: security telemetry at scale, analyst-labeled cases, and AI agents already in production.
• The mission: defending defense suppliers and other high-risk small organizations from nation-state threats.

Details:
Compensation: $160,000 – $195,000 base (Senior) / $195,000 – $235,000 base (Principal), plus equity, health, dental, vision, 401(k), and PTO.

About the Workplace
At RADICL, we prioritize our culture and believe the strongest teams are built through daily, side-by-side collaboration and experiential sharing. We also value individual freedom and flexibility. For this reason, we have a hybrid work model. As a team, we are in office M/W/Th with work-from-home on Tuesdays and Fridays. For remote positions, periodic travel to Boulder will be expected to participate in company events and meaningful side-by-side collaboration opportunities.

RADICL offices are in downtown Boulder, Colorado with easy-to-access employee parking provided by the company. We offer comprehensive, competitive benefits including health, dental, and vision as well as 401K and a responsible PTO plan.

We encourage motivated, talented, mission-oriented, and fun people to apply. Let’s do this!