Detections Engineer

About the company

Shift5 builds a protocol-agnostic hardware and software OT cybersecurity platform that captures onboard serial-bus data, delivers edge intrusion detection, firmware attestation, and predictive maintenance for military and commercial fleets.

About this role

<h2><strong>About Shift5</strong></h2> <p data-path-to-node="3">Shift5 is building the data platform for onboard operational technology (OT). We deliver cybersecurity, predictive maintenance, and compliance capabilities that enable defense and commercial fleets to operate with greater readiness, resilience, and mission assurance.</p> <p data-path-to-node="4">Shift5 is seeking a highly motivated and collaborative <strong>Detection Engineer</strong> to join our growing Research team. In this role, your primary responsibility will be building Proof of Concept (PoC) detection capabilities that bridge the gap between Data Science research and engineering delivery, sitting at the intersection of cybersecurity, preventative maintenance, and applied machine learning.</p> <h2><strong>What You'll Do</strong></h2> <ul> <li data-path-to-node="6,0,0"><strong data-path-to-node="6,0,0" data-index-in-node="0">End-to-End PoC Algorithm Development:</strong> Design, prototype, and build PoC capabilities to validate new anomaly detection techniques for cybersecurity threats, preventative maintenance issues, and telemetry anomalies.</li> <li> <p data-path-to-node="6,1,0"><strong data-path-to-node="6,1,0" data-index-in-node="0">Product Generalization &amp; Hand-off:</strong> Partner closely with Data Scientists to operationalize statistical insights and collaborate with Product Engineers to transition validated algorithms into Shift5's core platform.</p> </li> <li> <p data-path-to-node="6,2,0"><strong data-path-to-node="6,2,0" data-index-in-node="0">Cross-Functional Collaboration:</strong> Active participant in Integrated Product Teams (IPTs), collaborating across field engineering, product, and data science disciplines to deliver integrated detection capabilities.</p> </li> <li> <p data-path-to-node="6,3,0"><strong data-path-to-node="6,3,0" data-index-in-node="0">Advanced Data Analysis &amp; Disambiguation:</strong> Analyze large repositories of serial bus data to distinguish between benign operational traffic, hardware/software failure signatures, and malicious cyber activity.</p> </li> <li> <p data-path-to-node="6,4,0"><strong data-path-to-node="6,4,0" data-index-in-node="0">Protocol Decoding &amp; Research:</strong> Read and interpret specifications and interface control documents to build protocol parser logic, partnering with vulnerability researchers to stay ahead of novel OT failure modes.</p> </li> <li> <p data-path-to-node="6,5,0"><strong data-path-to-node="6,5,0" data-index-in-node="0">Testing &amp; Quality Frameworks:</strong> Work alongside QA and Test Engineers to build testbeds, simulation frameworks, and validation suites that verify the accuracy and efficacy of detection modules.</p> </li> </ul> <h2 data-path-to-node="8">What Success Looks Like</h2> <ul> <li data-path-to-node="8,0,0">You bridge the gap between abstract research concepts and functional engineering implementations efficiently.</li> <li> <p data-path-to-node="8,1,0">You bring a flexible mindset, ready to engage in a wide variety of evolving priorities in a fast-paced startup environment.</p> </li> <li> <p data-path-to-node="8,2,0">You efficiently break down complex, ambiguous serial bus and telemetry data anomalies to perform precise root-cause analysis and refine algorithms.</p> </li> </ul> <h2 data-path-to-node="10">What We’re Looking For</h2> <ul> <li data-path-to-node="10,0,0"><strong data-path-to-node="10,0,0" data-index-in-node="0">Technical Skills:</strong> BS/MS in CS, Computer Engineering, Electrical Engineering, Data Science, or equivalent. Proficiency in Python and/or Rust (or C/C++ with an eagerness to learn Rust). Strong developer tooling experience (Git, GitHub Actions, Docker, Linux CLI).</li> <li> <p data-path-to-node="10,1,0"><strong data-path-to-node="10,1,0" data-index-in-node="0">Applied Data &amp; Systems Knowledge:</strong> Solid understanding of data analysis techniques, basic ML concepts, operating systems (Linux), and cybersecurity anomaly detection fundamentals.</p> </li> <li> <p data-path-to-node="10,2,0"><strong data-path-to-node="10,2,0" data-index-in-node="0">Communication &amp; Mindset:</strong> Excellent collaborative skills within cross-functional teams, with a track record of documenting engineering workflows and technical usage guides for stakeholders.</p> </li> <li> <p data-path-to-node="10,3,0"><strong data-path-to-node="10,3,0" data-index-in-node="0">Logistics:</strong> Work from Shift5 HQ 2–3 days a week, with occasional travel (<15%).</p> </li> <li> <p data-path-to-node="10,4,0"><strong data-path-to-node="10,4,0" data-index-in-node="0">Preferred Experience:</strong> Experience with time-series or network traffic data, serial and embedded protocols (MIL-STD-1553, ARINC 429, CAN, Ethernet/IP), and a background in embedded systems, protocol reverse engineering, or predictive maintenance.</p> </li> </ul> <h2><strong><span data-contrast="none">Compensation &amp; Benefits</span></strong></h2> <ul> <li style="font-weight: bold;"> <p><strong>Base Salary: $170,000 - $200,000</strong></p> </li> <li style="font-weight: bold;"> <p><strong>Bonus program and equity in a fast-growing startup</strong></p> </li> <li style="font-weight: 400;"> <p><span style="font-weight: 400;">Competitive medical, dental, and vision coverage for employees and their families</span></p> </li> <li style="font-weight: 400;"> <p><span style="font-weight: 400;">Health Savings Account with annual employer contributions</span></p> </li> <li style="font-weight: 400;"> <p><span style="font-weight: 400;">Employer-paid Life and Disability Insurance&nbsp;</span></p> </li> <li data-leveltext="" data-font="Symbol" data-listid="8" data-list-defn-props="{"335552541":1,"335559684":-2,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="3" data-aria-level="1"> <p>Uncapped paid time off policy<span data-contrast="none"> </span></p> </li> <li