SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Shift5 is building a data platform for onboard operational technology (OT) cybersecurity, predictive maintenance, and compliance for defense and commercial fleets. As a Detections Engineer, you will bridge research and production by building proof-of-concept detection capabilities that validate new anomaly detection techniques for cybersecurity threats, preventative maintenance issues, and telemetry anomalies.
Your primary responsibilities include:
• End-to-End PoC Algorithm Development: Design, prototype, and build PoC capabilities to validate anomaly detection techniques across cybersecurity, preventative maintenance, and telemetry domains.
• Product Generalization & Hand-off: Partner with Data Scientists to operationalize statistical insights and collaborate with Product Engineers to transition validated algorithms into Shift5's core platform.
• Cross-Functional Collaboration: Participate in Integrated Product Teams (IPTs) across field engineering, product, and data science to deliver integrated detection capabilities.
• Advanced Data Analysis: Analyze large repositories of serial bus data to distinguish between benign operational traffic, hardware/software failure signatures, and malicious cyber activity.
• Protocol Decoding & Research: Read and interpret specifications and interface control documents to build protocol parser logic, partnering with vulnerability researchers on novel OT failure modes.
• Testing & Quality Frameworks: Work with QA and Test Engineers to build testbeds, simulation frameworks, and validation suites that verify detection module accuracy and efficacy.
Required qualifications include a BS/MS in Computer Science, Computer Engineering, Electrical Engineering, Data Science, or equivalent. You must be proficient in Python and/or Rust (or C/C++ with eagerness to learn Rust), with strong developer tooling experience (Git, GitHub Actions, Docker, Linux CLI). You should have solid understanding of data analysis techniques, basic ML concepts, Linux operating systems, and cybersecurity anomaly detection fundamentals.
Excellent collaborative skills and a track record of documenting engineering workflows for stakeholders are essential. Preferred experience includes time-series or network traffic data, serial and embedded protocols (MIL-STD-1553, ARINC 429, CAN, Ethernet/IP), and background in embedded systems, protocol reverse engineering, or predictive maintenance.
The role is hybrid, requiring 2–3 days per week at Shift5 HQ in Rosslyn, VA, with occasional travel (<15%).
