Senior Data Scientist at ExtraHop

Job description

At ExtraHop, we’re on a mission to protect and empower the connected enterprise. We reveal what is happening in the very infrastructure that sustains businesses, lives, and communities, and ensure the integrity of networks, data, systems, and processes. Organizations rely on ExtraHop to provide visibility into the cyber threats, vulnerabilities, and network performance issues that evade their existing security and IT tools. With this insight, organizations can investigate smarter, stop threats faster, and keep operations running. Our mission is fueled by a profound social and moral responsibility to be the best at what we do, ensuring a secure world where everyone can thrive. If this sounds like a place you’d like to spend the next chapter of your career, we’d love to hear from you. Position Summary ExtraHop is at the forefront of cybersecurity innovation, delivering Network Detection and Response (NDR) solutions that help organizations detect, investigate, and respond to cyber threats in real time. Join ExtraHop as a Senior Data Scientist and help advance the machine learning and artificial intelligence capabilities that power our products. You will analyze large-scale network telemetry, develop and evaluate methods for identifying malicious behavior, and improve the accuracy and efficacy of ExtraHop’s threat detection capabilities. This is an applied data science role for someone who enjoys solving ambiguous, high-impact problems using statistical analysis, experimentation, and machine learning. You will work closely with other data scientists, threat researchers, and software engineers to translate research into reliable product capabilities, and play a key role in contributing to the improvement of the RevealX platform. Key Responsibilities Analyze large-scale network telemetry to identify behavioral patterns, anomalies, and signals associated with malicious activity. Design, develop, and refine machine learning and AI-based methods that support ExtraHop’s products. Develop evaluation methods appropriate for cybersecurity data, including highly imbalanced datasets, incomplete labels, rare events, and changing attacker and network behavior. Conduct exploratory data analysis, feature engineering, model development, and error analysis using complex, high-volume datasets. Research emerging machine learning and AI techniques, relevant cybersecurity developments, and assess their applicability to ExtraHop’s products. Establish metrics and monitoring strategies for measuring model and detector performance over time. Communicate findings, limitations, tradeoffs, and recommendations clearly to technical stakeholders and product leaders. Provide technical leadership and mentorship to other data scientists through code reviews, design discussions, technical strategy, and contributions to the team’s analytical and engineering standards. Document methodologies, experiments, model behavior, and evaluation results. Write clean, maintainable, and well-tested production-quality code. Required Qualifications Bachelor’s degree in Data Science, Computer Science, Mathematics, or another quantitative discipline, or equivalent practical experience. 7+ years of professional experience in data science, including developing and evaluating machine learning models for real-world use cases, defining meaningful success metrics, and conducting rigorous offline and online evaluations. Strong foundation in statistics, experimental design, machine learning, and model evaluation. Experience working with incomplete, noisy, or highly imbalanced data; performing detailed error analysis; and identifying the causes of false positives and false negatives. Strong proficiency in Python and SQL, experience with common data science and machine learning libraries, and the ability to write maintainable, tested, and reviewable code. Experience collaborating with software engineers to integrate data science methods into production systems. Strong problem-solving skills, intellectual curiosity, and a track record of independently owning complex technical work. Excellent written and verbal communication skills, including the ability to explain technical findings, uncertainty, and tradeoffs to varied audiences. Preferred Qualifications Master’s degree or Ph.D. in Data Science, Computer Science, Mathematics, or another quantitative discipline. Experience applying data science or machine learning to cybersecurity, fraud detection, abuse detection, anomaly detection, or another adversarial domain. Familiarity with Network Detection and Response, network protocols, threat detection, or incident investigation. Experience with time-series analysis, anomaly detection, actuarial modeling, clustering, graph analytics, or unsupervised and semi-supervised learning. Experience evaluating models in domains where positive examples are rare, labels are incomplete, and the underlying behavior changes over time. Experience with generative AI, large language models, agentic systems, or other emerging AI techniques. Familiarity with cloud platforms such as AWS or GCP. The salary range for this role is $165,000 - $180,000 + bonus + benefits ABOUT EXTRAHOP ExtraHop is reinventing Network Detection and Response (NDR) to offer enterprises unparalleled visibility, context, and control against emerging threats. The platform integrates NDR with Network Performance Management (NPM), Intrusion Detection Systems (IDS), and forensics, providing a single, comprehensive solution. By decrypting and analyzing complete packet-level data at wire speed and leveraging cloud-scale machine learning, ExtraHop empowers Security Operations Centers (SOCs) to detect, investigate, and remediate modern cyber risks in real time across their entire hybrid infrastructure, including data center, cloud, and SASE environments. This comprehensive approach and market innovation have earned ExtraHop unique recognition as the only NDR vendor acknowledged as a leader by all major analyst firms, including the 2025 Gartner® Magic Quadrant for Network Detection and Response™, the 2025 Forrester® Wave for Network Analysis and Visibility, the 2024 IDC® Marketscape for NDR, and the 2025 Gigamon® Radar Report for Network Detection and Response. Since 2007, ExtraHop has consistently helped organizations worldwide extract in-depth network telemetry and contextual insights, affirming its commitment to protecting and empowering the connected enterprise. OUR VALUES Our culture is rooted in our five Values . These set the expectations for how we work individually and collectively as a team. Lead with Purpose: We are driven to deliver results that create a positive impact for our customers, partners, and colleagues. Act with Integrity: We operate with transparency, authenticity, and always in the best interest of the company. Find a Way: We are resourceful, tackle hard problems with a sense of urgency and ownership, and do what it takes to get the job done. Innovate: We listen to customers, partners, and the market, and respectfully push boundaries and challenge the status quo. Share Success: We run together, we win together. We value diverse perspectives, hold space for all voices, and achieve the best results as a team. BENEFITS Employees' wellbeing is top of mind for the ExtraHop team. Employees and their families will have the option to participate in the following benefits: Health, Dental, and Vision Benefits Flexible PTO, Sick Time Prorated Based on Date of Hire, and All Federal Holidays (US Only) + 3 Days of Paid Volunteer Time Non-Commissioned Positions may be eligible to participate in the Annual Discretionary Bonus Plan FSA and Dependent Care Accounts + EAP, where applicable Educational Reimbursement 401k with Employer Match or Pension where applicable Pet Insurance (US Only) Parental Leave (US Only) Hybrid and Remote Work Model Our people are our most important competitive advantage, leading the charge against cyber criminals. Join the fight today! To learn more, visit our website or follow us on LinkedIn . Create a Job Alert Interested in building your career at ExtraHop? Get future opportunities sent straight to your email.

Requirements

Must-haves

ExtraHop is at the forefront of cybersecurity innovation, delivering Network Detection and Response (NDR) solutions that help organizations detect, investigate, and respond to cyber threats in real time.
Analyze large-scale network telemetry to identify behavioral patterns, anomalies, and signals associated with malicious activity.
Design, develop, and refine machine learning and AI-based methods that support ExtraHop’s products.
Develop evaluation methods appropriate for cybersecurity data, including highly imbalanced datasets, incomplete labels, rare events, and changing attacker and network behavior.
Conduct exploratory data analysis, feature engineering, model development, and error analysis using complex, high-volume datasets.
Research emerging machine learning and AI techniques, relevant cybersecurity developments, and assess their applicability to ExtraHop’s products.
Establish metrics and monitoring strategies for measuring model and detector performance over time.
Communicate findings, limitations, tradeoffs, and recommendations clearly to technical stakeholders and product leaders.
Provide technical leadership and mentorship to other data scientists through code reviews, design discussions, technical strategy, and contributions to the team’s analytical and engineering standards.
Document methodologies, experiments, model behavior, and evaluation results.
Write clean, maintainable, and well-tested production-quality code.
Bachelor’s degree in Data Science, Computer Science, Mathematics, or another quantitative discipline, or equivalent practical experience.
Strong foundation in statistics, experimental design, machine learning, and model evaluation.
Experience working with incomplete, noisy, or highly imbalanced data; performing detailed error analysis; and identifying the causes of false positives and false negatives.
Strong proficiency in Python and SQL, experience with common data science and machine learning libraries, and the ability to write maintainable, tested, and reviewable code.
Experience collaborating with software engineers to integrate data science methods into production systems.
Strong problem-solving skills, intellectual curiosity, and a track record of independently owning complex technical work.

Nice-to-haves

Master’s degree or Ph.D. in Data Science, Computer Science, Mathematics, or another quantitative discipline.
Experience applying data science or machine learning to cybersecurity, fraud detection, abuse detection, anomaly detection, or another adversarial domain.
Familiarity with Network Detection and Response, network protocols, threat detection, or incident investigation.
Experience with time-series analysis, anomaly detection, actuarial modeling, clustering, graph analytics, or unsupervised and semi-supervised learning.
Experience evaluating models in domains where positive examples are rare, labels are incomplete, and the underlying behavior changes over time.
Experience with generative AI, large language models, agentic systems, or other emerging AI techniques.
Familiarity with cloud platforms such as AWS or GCP.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

machine learningaipythonsqlawsgcp

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Pto

Parental Leave