Remote Senior AI SOC Engineer – Post-Detection Orchestration

Cribl; Washington (District of Columbia); Remote; USD 230,000 - 280,000; Full time

Benefits offered by this job

Health, dental, vision

Equity

Paid holidays & PTO

Job summary

Cribl seeks a Senior Staff Software Engineer for the Security Products team to architect post‑detection workflows and autonomous SOC capabilities. You will build reasoning systems with LLMs, study context graphs, and implement agentic investigations that operate at machine speed. This is a fully remote role with global teams and benefits.

You will lead AI SOC initiatives, design robust APIs, and mentor engineers while delivering production‑grade security solutions across enterprise platforms.

Qualifications

• 12+ years building scale production software.
• Led AI SOC, SOAR, or post‑detection automation at scale.
• Experience with LLM orchestration, agents, and RAG in enterprise apps.
• Design and operate low‑latency distributed systems.
• Understand security analyst workflows and MITRE ATT&CK.
• Interface with EDR, IDPs, Cloud, SIEM/SOAR via robust APIs.
• Lead ambigious autonomous initiatives to production.
• Strong ownership, quality, performance, simplicity.
• Able to explain complex ideas to remote teams.

Responsibilities

• Architect post‑detection workflows including autonomous triage and containment.
• Build reasoning systems using LLMs, embeddings, and context graphs.
• Collaborate with Cribl Detect to trigger investigations and responses.
• Explore multi‑agent and NLP SOC interfaces with prototypes.
• Write core abstractions and protocols; ensure model accuracy & latency.
• Create safe execution frameworks with transparent reasoning trails.
• Partner with product managers and security researchers to plan.
• Represent Cribl's AI SOC vision in reviews and blogs.
• Stand‑by on‑call duties as needed.

Skills

LLM orchestration

Agent frameworks

Go/Python/JavaScript/TypeScript

Distributed systems

Security workflows

API design

MITRE ATT&CK understanding

Context graphs / embeddings

On-call / standby

Education

Bachelor's degree + 12+ yrs exp

Master's preferred

Tools

NodeJS

Go/Python

Graph databases

Vector databases / embeddings

Job description

Cribl seeks a Senior Staff Software Engineer for the Security Products team to architect post‑detection workflows and autonomous SOC capabilities. You will build reasoning systems with LLMs, study context graphs, and implement agentic investigations that operate at machine speed. This is a fully remote role with global teams and benefits.

You will lead AI SOC initiatives, design robust APIs, and mentor engineers while delivering production‑grade security solutions across enterprise platforms.