Machine Learning Scientist

Project description (VR-122545):

Join our Development Centre in Bucharest and become a member of our open-minded, progressive and professional team. In this role you will be working for one of our world-famous clients.

The Chief Security Office (CSO) of our client comprises the Chief Information Security Office (CISO) and the Corporate Security unit. The CISO organization guarantees information security for our client.

This role's purpose is to design, build, and maintain scalable automation platforms that deliver end to end Cyber Hygiene outcomes across SCM, Vulnerability Management, Logging/SWAT, and Governance, enabling continuous risk reduction, regulatory compliance, and proactive remediation.

On top of attractive salary and benefits package, Luxoft will invest into your professional training, and allow you to grow your professional career.

Responsibilities:

Will build and maintain the advanced AI/ML models that drive intelligent drift analysis, root cause prediction, and risk-based prioritization within SCM

Ensure the AI capabilities are continuously refined and deployed effectively

Experience with groups and parsing large chunks of data, have practical application of developing work building the LLM and MCP server

Database and data model experience

Architecture and Automation Engineering

Design automation services across the Cyber Hygiene Automation Architecture, covering:

Asset discovery and inventory normalization

Configuration and vulnerability scanning pipelines

Data aggregation, enrichment, and correlation layers

Implement pre activation and post activation scanning workflows for:

Core Builds

Applications

Infrastructure platforms

SCM Automation

Automate:

Core Build activation configuration scans

Pre activation application configuration scanning

CIS benchmark mapping to DB relevant technologies

Engineer logic for:

Configuration baseline profiling

Config drift detection, trend analysis, and drift prediction

Mapping regulatory key settings (TRC, SOX) to config baselines

Integrate threat priority intelligence into configuration risk scoring.

Vulnerability Management Automation

Build automated pipelines for:

Core Build vulnerability assessments

Pre activation application vulnerability scans

Implement:

Patch remediation drift prediction

Patch cluster analysis and prioritization

Dynamic remediation owner assignment (App vs Infrastructure)

Automate detection of remediation bottlenecks.

Data Engineering and Analytics

Build scalable data pipelines enabling:

Root cause analysis (config & vuln)

Cross domain correlation (SCM ↔ VM ↔ Syslog)

Support predictive analytics use cases (drift, failure likelihood).

Integration and Controls

Integrate with:

Scanning tools (config, vuln, logging)

Identity and privilege detection services

Notification and workflow engines

Ensure secure by design, auditable automation aligned to DB standards.

Skills:

Strong experience building enterprise automation platforms

Proficiency in: Python, Java, or similar backend languages

API driven architectures

Event driven or workflow orchestration

Experience with:

Configuration management & vulnerability management concepts

Data pipelines and analytics platforms

Regulatory or audit driven environments