Remote
Software Engineer - Backend - Behavioral Security Products
About this role
At Abnormal AI, we protect our customers against nefarious adversaries who are constantly evolving their techniques and tactics to outwit and undermine the traditional approaches to Security. Abnormal is recognized as a top cybersecurity startup (Leader in the 2025 Gartner Magic Quadrant for Email Security Platforms), securing a Series D funding of USD 250 million at a USD 5.1 billion valuation in August 2024. About The Team This team owns the end-to-end development and operation of the infrastructure, ML models, AI agents, customer-facing APIs, and internal tools that power Abnormal's Identity Threat Protection (ITP) product.
Our work is central to detecting malicious behavior and protecting customers from advanced identity-based attacks — including account takeover, identity spoofing, data leakage, and other high-impact threats. About The Role We are looking for a Software Engineer to help build and evolve our platform as it scales to meet expanding product requirements. This role blends hands-on backend systems development with growing ownership of features and production systems, including AI-powered and agentic components, working closely with senior engineers to improve system reliability, reduce latency, and accelerate feature release cycles.
What You'll Do Technical Delivery & Excellence Design, build, and iterate on scalable backend and ML systems, APIs, frameworks, and internal tools. Take ownership of well-scoped features and components, with guidance from senior engineers on more complex, cross-system work. Contribute to the stability, reliability, and operational excellence of critical systems. Write clean, testable, and resilient code with attention to edge cases and performance.
Contribute to technical design documents and participate in design discussions. Participate in code and design reviews, and contribute to on-call rotations. AI Engineering & Agents Help design and build LLM-powered features and agentic workflows (e.g., automated investigation, triage, or remediation assistants) as part of the ATO platform. Integrate LLM APIs and agent frameworks into backend services, with attention to reliability, cost, latency, and evaluation.