Data Scientist/ML Ops Scientist

Project description

Join our Development Centre in Bucharest and become a member of our open-minded, progressive and professional team. In this role you will be working for one of our world-famous clients.

The Chief Security Office (CSO) of our client comprises the Chief Information Security Office (CISO) and the Corporate Security unit. The CISO organization guarantees information security for our client.

This role's purpose is to design, build, and maintain scalable automation platforms that deliver end to end Cyber Hygiene outcomes across SCM, Vulnerability Management, Logging/SWAT, and Governance, enabling continuous risk reduction, regulatory compliance, and proactive remediation.

On top of attractive salary and benefits package, Luxoft will invest into your professional training, and allow you to grow your professional career.

Responsibilities

• Will build and maintain the advanced AI/ML models that drive intelligent drift analysis, root cause prediction, and risk-based prioritization within SCM
• Ensure the AI capabilities are continuously refined and deployed effectively
• Experience with groups and parsing large chunks of data, have practical application of developing work building the LLM and MCP server
• Database and data model experience
• Architecture and Automation Engineering
• Design automation services across the Cyber Hygiene Automation Architecture, covering:
• Asset discovery and inventory normalization
• Configuration and vulnerability scanning pipelines
• Data aggregation, enrichment, and correlation layers
• Implement pre activation and post activation scanning workflows for:
• Core Builds
• Applications
• Infrastructure platforms
• SCM Automation
• Automate:
• Core Build activation configuration scans
• Pre activation application configuration scanning
• CIS benchmark mapping to DB relevant technologies
• Engineer logic for:
• Configuration baseline profiling
• Config drift detection, trend analysis, and drift prediction
• Mapping regulatory key settings (TRC, SOX) to config baselines
• Integrate threat priority intelligence into configuration risk scoring.
• Vulnerability Management Automation
• Build automated pipelines for:
• Core Build vulnerability assessments
• Pre activation application vulnerability scans
• Implement:
• Patch remediation drift prediction
• Patch cluster analysis and prioritization
• Dynamic remediation owner assignment (App vs Infrastructure)
• Automate detection of remediation bottlenecks.
• Data Engineering and Analytics
• Build scalable data pipelines enabling:
• Root cause analysis (config & vuln)
• Cross domain correlation (SCM ↔ VM ↔ Syslog)
• Support predictive analytics use cases (drift, failure likelihood).
• Integration and Controls
• Integrate with:
• Scanning tools (config, vuln, logging)
• Identity and privilege detection services
• Notification and workflow engines
• Ensure secure by design, auditable automation aligned to DB standards.

Skills

Must have

• Strong experience building enterprise automation platforms
• Proficiency in:
• Python, Java, or similar backend languages
• API driven architectures
• Event driven or workflow orchestration
• Experience with:
• Configuration management & vulnerability management concepts
• Data pipelines and analytics platforms
• Regulatory or audit driven environments

Nice to have

• Experience in a multinational company