--- title: 'Senior Data Scientist at Sonatype' canonical: 'https://feeny.ai/job/senior-data-scientist-sonatype-toronto-5t4p12w0d7tk' type: 'job' last_seen: '2026-09-09' --- # Senior Data Scientist at Sonatype - **Company:** Sonatype - **Location:** Toronto, Canada - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-08-31 - **Last confirmed live:** 2026-09-09 - **Apply:** https://jobs.lever.co/sonatype/e7059360-2031-4af1-9a77-92afaeb5e5be ## Job description Sonatype is the software supply chain management company that invented componentized software development and pioneered the software supply chain category. As leaders in the open-source community and the DevSecOps industry, we run the world’s largest repository of Java open-source components—Maven Central. Our groundbreaking, full-spectrum platform empowers customers to rapidly create, deploy, and maintain innovative software at scale, all while aligning directly to their business needs. Trusted by more than 2,000 organizations—including 70% of the Fortune 100—and over 15 million software developers, Sonatype’s tools and guidance help deliver exceptional, secure software. From inventing modern artifact management with Nexus Repository to introducing the world’s only solution that halts malicious open-source malware in its tracks, we’re committed to constant innovation. We leverage AI/ML to give our clients, developers, and the industry complete confidence in the quality, automation, and security of their software. Learn more at www.sonatype.com ## The Role We're looking for a Senior Data Scientist to join our growing AI & Data Science team and help shape how Sonatype applies machine learning and generative AI across the organization. In this role, you'll provide technical leadership across high-impact AI initiatives, partnering with product, engineering, security, research, and data teams to identify opportunities, define approaches, and turn ambiguous problems into practical AI solutions. You'll help establish technical direction and best practices while remaining deeply hands-on—exploring data, designing experiments, building models, and guiding solutions into production. You'll work across use cases ranging from malicious-behavior and anomaly detection in our security data to developer- and analyst-facing GenAI experiences involving LLMs, retrieval, and agentic systems. This role is ideal for someone who combines deep technical expertise with strong judgment and influence—someone who can lead complex AI initiatives, mentor other practitioners, and help teams make thoughtful decisions about where and how AI can create meaningful impact. What you'll do: - Provide technical ownership for applied AI and data science initiatives across Sonatype, helping define approaches, architecture, priorities, and standards. - Lead complex AI projects from concept to production—translating ambiguous business and technical problems into measurable experiments and scalable solutions. - Act as a senior internal AI consultant to product, engineering, security, and research teams, helping identify high-value opportunities and advising teams on ML and GenAI approaches. - Lead the research, development, and deployment of models for malicious behavior detection, anomaly detection, fraud analysis, and other security and product use cases. - Design and guide advanced GenAI solutions using LLMs, embeddings, retrieval-augmented generation, structured outputs, tool use, and agentic or multi-step workflows. - Establish strong experimentation and evaluation practices, including representative evaluation datasets, quality metrics, cross-validation, ground-truth evaluation, drift monitoring, and business-impact measurement. - Set technical direction for reliable and maintainable AI systems, balancing experimentation with production quality, security, scalability, and responsible AI practices. - Bridge research and production by designing scalable APIs, services, tools, and workflows that allow AI capabilities to be adopted across products and internal teams. - Evaluate emerging AI technologies and frameworks and make recommendations on when and how Sonatype should adopt them. - Partner closely with engineering and MLOps teams on deployment, observability, model lifecycle management, performance, and reliability. - Mentor data scientists and other technical contributors, review technical approaches, and help elevate AI engineering and data science practices across the organization. - Communicate AI strategy, technical tradeoffs, experimental findings, and recommendations clearly to technical and non-technical stakeholders. - Partner with data governance, security, and legal stakeholders to ensure appropriate privacy, security, ethical, and responsible-AI practices. What you bring: - 7+ years of hands-on experience in applied data science, machine learning, AI engineering, or AI research. - Computer Science or equivalent technical degree strongly preferred - Strong Python skills and practical experience with data and AI libraries/platforms such as Databricks, and LLM APIs, scikit-learn - Experience building and shipping ML or GenAI applications—from early prototype through usable internal or customer-facing workflows. - Deep familiarity with modern LLM ecosystems, including OpenAI, Anthropic/Claude, Hugging Face, and open-weight models. - Ability to select models and design effective LLM applications using prompting, context management, structured outputs, retrieval, and tool use. - Experience building agentic or multi-step AI workflows with LangGraph, LangChain, Semantic Kernel, or similar orchestration frameworks. - Strong evaluation mindset: defining useful quality metrics, building representative evaluation datasets, assessing reliability, and making data-driven tradeoffs. - Comfortable working with large, messy, structured, and unstructured data to produce features, insights, and clear visualizations. - Proficiency with Git, testing, code review, and collaborative software-development practices. - Practical, balanced judgment: comfortable exploring emerging AI capabilities while building maintainable, secure, dependable systems. - Proactive and accountable, with strong written and verbal communication skills across technical and non-technical partners. It'd be great if you had: - Deep MLOps experience, including MLflow or comparable tooling, experiment tracking, reproducible pipelines, model/application versioning, CI/CD, serving, and production monitoring. - Experience designing or operating ML and GenAI platforms or systems at scale, including observability, tracing, incident response, and data or model-drift detection. - Experience with Databricks ML, AWS SageMaker, Azure ML, or similar managed ML platforms. - Experience defining AI architecture, technical standards, or reusable patterns adopted across multiple teams. - Familiarity with MCP, agent-tool integrations, LLM guardrails, AI security, and production safety practices. - Experience with AI-assisted development tools such as Copilot, Claude Code, or Codex. - Experience applying ML or AI to cybersecurity, fraud detection, anomaly detection, code analysis, threat intelligence, or software supply-chain security. - Experience with PySpark and large-scale production data pipelines. - Experience working within a software product company and partnering closely with product and engineering leadership. - Experience mentoring technical contributors or acting as a technical lead across multiple AI or data science initiatives. Things we're proud of: - 2026 Gartner® Magic Quadrant™ Leader for Software Supply Chain Security - 2026 Celebrating 15 Years of Sonatype Research Labs – Industry-leading software supply chain and open source security research - 2026 Founding Member of the Linux Foundation Initiative for Open Source Sustainability - 2026 State of the Software Supply Chain® Report – Continuing industry leadership in software supply chain security and AI security research - 2025 Visionary in Gartner® Magic Quadrant™ for Application Security Testing! - 2025 AI Compliance Solution of the Year - AI Breakthrough Awards - 2025 DEVIES Award to our SBOM Manager for a new product for its innovation and impact in developer technology - 2024 Industry Leader in Forrester-Wave for Software Composition Analysis (2024 Q4 report) - Constellation AST Shortlist: Sonatype has been listed on the Constellation ShortList™ for Application Security Testing for 2024 - Data Breakthrough Awards: Sonatype was announced as a 2024 winner in the "Open Source Data Solution of the Year." - SD Times: Best in Show Security - Fast Company Best Workplaces for Innovators 2024 - The Herd Top 100 Private Software Companies 2024 - Diversity & Inclusion Working Groups - Parental Leave Policy - Paid Volunteer Time Off (VTO) At Sonatype, we value diversity and inclusivity. We offer perks such as parental leave, diversity and inclusion working groups, and flexible working practices to allow our employees to show up as their whole selves. We are an equal-opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If you have a disability or special need that requires accommodation, please do not hesitate to let us know. ## About Sonatype ## Company Overview - **One-liner**: Sonatype provides secure software development solutions that help organizations control open source components, containers, and AI models across the software supply chain. - **Entity Type**: Private (backed by Vista Equity Partners; total funding $154.7M) - **Headquarters**: Fulton, Maryland, United States - **Founded**: 2008 - **Founders**: Not publicly available (originated from core contributors to Apache Maven) ## Core Business - **Primary industry**: Software Supply Chain Security / DevSecOps - **Target customers**: Enterprise engineering teams, DevOps organizations, and developers (B2B) - **Mission or purpose**: Help organizations continuously harness the benefits of open source without risk, by providing intelligence and automation to secure the AI SDLC. ## Products & Services - **Sonatype Nexus Repository**: The world’s most popular repository manager for storing and managing open source components, containers, and models. - **Sonatype Repository Firewall**: Blocks dangerous components and AI models before they enter the development pipeline. - **Sonatype Lifecycle**: Automates open source security and license policy enforcement across the SDLC. - **Sonatype SBOM Manager**: Generates and manages Software Bill of Materials for compliance and supply chain visibility. - **Maven Central**: The largest public repository of open source Java components, operated by Sonatype. ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed (private company) - **Key Metric**: Annual Revenue $57.1M (latest fiscal year); Total Funding $154.7M - **Notable Investors**: TPG (lead, $80M PE round), Accel, Goldman Sachs Growth Equity, New Enterprise Associates, Hummer Winblad Venture Partners - **Growth Signals**: Headcount of 421 employees (+7.6% YoY); named a Leader in the 2026 Gartner Magic Quadrant for Software Supply Chain Security; global presence across 15 countries including US, UK, India, Colombia, Canada. ## Competitive Advantages - **Unmatched OSS intelligence**: Operates both a leading repository (Nexus Repository) and a public registry (Maven Central), providing unique visibility into open source quality. - **AI-native security**: Acts as a control plane for AI-generated code and models, enabling safe adoption of frontier AI. - **Developer-first approach**: Solutions designed by developers for developers, with 50+ supported languages, formats, and integrations. - **High precision**: Fewer false positives/negatives, reducing remediation time and enabling 3x faster releases. ## Strategic Focus - Extending leadership in software supply chain security, particularly addressing risks from AI-generated code and accelerated vulnerability discovery. - Expanding Nexus platform capabilities with agentic-first development and deeper SBOM lifecycle management. - Growing customer adoption through federal sales and enterprise customer success. ## Why Work Here - **Culture**: Values trust through transparency, inclusion, boldness, and growth. Employee resource groups like Women at Sonatype and the Community, Belonging, Inclusion & Diversity cohort. - **Remote-first**: Distributed workforce with offices in Fulton MD, Tysons Corner VA, Alameda CA, London, and Sydney. Flexible work schedules. - **Benefits**: Competitive benefits, annual wellness week, paid volunteer time off, full parental leave (birth or adoption), learning & development support, leadership coaching. - **Onboarding**: New hires build community from day 1 with cross-team learning and interactive onboarding. - **Work-life balance**: Rated 3.8/5 on work-life balance by employees (263 reviews). Performance-based culture with recognition and growth opportunities. ## Sources 1. [sonatype.com](https://www.sonatype.com/) – Company overview and product info 2. [sonatype.com/company/careers](https://www.sonatype.com/company/careers) – Careers page with values, benefits, DE&I 3. [linkedin.com/company/sonatype](https://www.linkedin.com/company/sonatype) – Employee count, revenue, funding, reviews 4. [topworkplaces.com](https://topworkplaces.com/company/sonatype-inc/) – Work culture and distributed workforce details 5. [jobs.lever.co](https://jobs.lever.co/sonatype) – Open positions ## Other roles at Sonatype - [Staff Software Engineer - Agentic First](https://feeny.ai/job/staff-software-engineer-agentic-first-sonatype-colombia-cf3cfrmmadzm) — Colombia - [Manager, Product Support Engineering](https://feeny.ai/job/manager-product-support-engineering-sonatype-hyderabad-dvfedskfp43z) — Hyderabad, India - [Senior Full Stack Software Engineer](https://feeny.ai/job/senior-full-stack-software-engineer-sonatype-colombia-ysrs7t99kcgg) — Colombia - [Data Engineer](https://feeny.ai/job/data-engineer-sonatype-colombia-kw1pzrferba3) — Colombia - [Senior Account Executive, Nordics & Baltics](https://feeny.ai/job/senior-account-executive-nordics-baltics-sonatype-united-kingdom-5yqdbpdyyv7h) — United Kingdom - [Staff Software Engineer](https://feeny.ai/job/staff-software-engineer-sonatype-canada-x5w5khmbnwn6) — Canada - [Staff Software Engineer](https://feeny.ai/job/staff-software-engineer-sonatype-canada-v5kbt3a4qk33) — Canada - [Product Manager](https://feeny.ai/job/product-manager-sonatype-colombia-h513qw7yc6st) — Colombia - [Staff Software Engineer](https://feeny.ai/job/staff-software-engineer-sonatype-canada-wr1mek2fgj79) — Canada - [Staff Data Engineer](https://feeny.ai/job/staff-data-engineer-sonatype-canada-5wtke6fbv579) — Canada