Remote Senior AI SOC Engineer: Post-Detection Automation

Cribl; Jefferson City (MO); Remote; USD 230,000 - 280,000; Full time

Benefits offered by this job

Health, dental, vision

Equity

401(k)

Paid holidays and PTO

Fertility treatment benefit

Job summary

Cribl is seeking a Senior Staff Software Engineer for the Security Products team, focused on building next‑gen AI SOC capabilities. You will architect autonomous reasoning, multi-agent investigation frameworks, and context graphs that empower SOCs to operate at machine speed.

This remote‑first role requires leadership in scalable systems and deep security domain expertise. You will collaborate with Cribl Detect to ingest signals, validate concepts through prototypes, and drive production

Qualifications

• Bachelor's degree in CS/EE or equivalent; Master’s preferred.
• 12+ years building scale production software in enterprise settings.
• Experience leading AI SOC, SOAR, or post‑detection automation at scale.
• Strong knowledge of MITRE ATT&CK and security workflows.

Responsibilities

• Architect post‑detection workflows including autonomous triage and containment.
• Build production‑grade reasoning systems with LLMs, embeddings, and graphs.
• Work with Cribl Detect to trigger investigations and responses.
• Explore multi‑agent paradigms and natural language SOC interfaces.
• Define APIs, protocols, and benchmarks for model accuracy and latency.
• Create safe execution frameworks with transparent reasoning trails.
• Collaborate with product, researchers, and stakeholders to convert ideas into plans.

Skills

Leadership

Communication

AI/ML systems design

Autonomous agent frameworks

Security domain knowledge

Education

Bachelor's in CS/EE or equivalent

Master's preferred

Tools

JavaScript/TypeScript

Node.js

Go

Python

Graph databases

LLM orchestration frameworks

Job description

Cribl is seeking a Senior Staff Software Engineer for the Security Products team, focused on building next‑gen AI SOC capabilities. You will architect autonomous reasoning, multi-agent investigation frameworks, and context graphs that empower SOCs to operate at machine speed.

This remote‑first role requires leadership in scalable systems and deep security domain expertise. You will collaborate with Cribl Detect to ingest signals, validate concepts through prototypes, and drive production