Machine Learning Engineer I

Abnormal AI is seeking a Machine Learning Engineer - I (MLE) to join the Misdirected Email Detection (MED) team. The MED team plays a critical role in preventing accidental data loss by detecting and blocking misdirected outbound emails, delivering protection at scale without adding operational burden to customer SOCs.

This is a highly applied role for MLEs who thrive on building, iterating, and experimenting. Rather than focusing solely on model training, you will also be responsible for developing practical, end-to-end ML solutions. This includes but is not limited to generating and refining features, testing hypotheses, averaging signals, and translating research ideas into production-grade systems, all while collaborating cross-functionally to turn customer needs into measurable product improvements. The ideal candidate combines a tinkerer's mindset with technical rigor, balancing innovation with production excellence to drive experimentation, scale solutions, and deliver reliable detection capabilities that create meaningful customer impact in real-world environments.

• Partner with Product Manager, Tech Lead and engineering stakeholders to align technical deliverables to roadmap milestones and ensure successful GA launches across supported environments.
• Own the full ML lifecycle for Misdirected Email, including data wrangling, feature engineering, model training and evaluation, deployment, and monitoring. Deliver iterative improvements with measurable reliability and customer impact.
• Run rigorous experiments and evaluations (offline metrics, online A/B testing, post-launch monitoring), set thresholds, and conduct targeted error analysis to prevent regressions.
• Communicate effectively across time zones, maintain high-quality technical documentation, and contribute to shared team knowledge.
• Participate in shared on-call rotation for owned components, with responsibilities focused on detection efficacy and realtime scoring systems. Priorities include resolving efficacy-related alerts, investigating high-visibility false positives, and addressing reported false positives/false negatives from customers or internal teams.