Senior AI SOC Architect: Post‑Detection Automation

Cribl; Boise (ID); Remote; USD 230,000 - 280,000; Full time

Job summary

Cribl seeks a Senior Staff Software Engineer for its Security Products team to build next‑gen AI SOC capabilities. You will architect autonomous reasoning, multi‑agent investigation, and contextual enrichment post‑detection, collaborating with Cribl Detect on signal ingestion and automated responses.

The role emphasizes scalable, low‑latency distributed systems, agent communication, and secure, explainable workflows in a remote‑first, global environment.

Qualifications

• 12+ years of experience building scale production software.
• Led AI SOC, SOAR, or post‑detection automation at scale.
• Experience with LLM orchestration, agent swarms, embeddings, dynamic tool calling, and RAG in enterprise apps.
• Designed low-latency distributed systems and multi-system workflows.
• Understanding of MITRE ATT&CK and security analyst workflows.
• API frameworks to interface with EDR, IdP, cloud infra, SIEM/SOAR.

Responsibilities

• Architect post‑detection workflows, including autonomous triage, agentic investigation, evidence synthesis, and containment orchestration.
• Build production‑grade reasoning systems using LLMs, embeddings, and context graphs to formulate hypotheses, gather evidence, and deliver explainable verdicts.
• Work closely with Cribl Detect to ingest high‑fidelity detection signals and trigger automated investigations and responses.
• Explore agentic paradigms, multi‑agent frameworks, and natural language SOC interfaces, validating concepts through prototypes.
• Write core abstractions, design agent communication protocols, review code, and set benchmarks for accuracy, latency, and reliability.
• Build safe execution frameworks offering transparent reasoning trails and human‑in‑the‑loop controls.

Skills

AI SOC

LLM orchestration

Agent frameworks

Distributed systems

MITRE ATT&CK

API design

Go/Python/JS/TS

Graph databases

Open source

Communication

Education

Bachelor's degree in CS/EE

Master's degree preferred

Tools

NodeJS

Go

Python

Vector databases

Embeddings

Job description

Cribl seeks a Senior Staff Software Engineer for its Security Products team to build next‑gen AI SOC capabilities. You will architect autonomous reasoning, multi‑agent investigation, and contextual enrichment post‑detection, collaborating with Cribl Detect on signal ingestion and automated responses.

The role emphasizes scalable, low‑latency distributed systems, agent communication, and secure, explainable workflows in a remote‑first, global environment.