Senior AI SOC Engineer — Post-Detection & Automation

Cribl; Des Moines (IA); Remote; USD 230,000 - 280,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility benefit

401(k)

Equity

Job summary

Cribl seeks a Senior Staff Software Engineer for its Security Products team to own post‑detection automation and autonomous reasoning across multiple SOC workflows. You will design agentic systems, leverage LLMs, embeddings, and context graphs, and partner with Cribl Detect to enable rapid investigations and responses.

You’ll contribute to scalable, low‑latency distributed systems and APIs, with a strong emphasis on security context, explainability, and operational excellence in a remote‑first

Qualifications

• Bachelor's degree in CS/EE or equivalent; 12+ years of production software experience.
• Experience leading AI SOC, SOAR, or post‑detection automation at scale.
• Hands‑on with AI systems: LLM orchestration, embeddings, vector stores, and tool calling.

Responsibilities

• Architect post‑detection workflows: autonomous triage, investigation, containment.
• Build production‑level reasoning with LLMs, embeddings, and context graphs.
• Collaborate with Cribl Detect to ingest signals and trigger investigations and responses.
• Explore agentic paradigms and multi‑agent frameworks with rapid prototypes.
• Define clear API interfaces and ensure model accuracy, latency, and reliability.

Skills

AI SOC architecture

SOAR automation

Post‑detection workflows

LLM orchestration

Agentic multi‑agent systems

JavaScript/TypeScript

NodeJS

Go/Python

MITRE ATT&CK expertise

API design

Education

Bachelor's degree in CS / Electrical Engineering or equivalent

Master's degree preferred

Tools

Vector databases

Embeddings

Context graphs

RAG architectures

LLM orchestration frameworks

Job description

Cribl seeks a Senior Staff Software Engineer for its Security Products team to own post‑detection automation and autonomous reasoning across multiple SOC workflows. You will design agentic systems, leverage LLMs, embeddings, and context graphs, and partner with Cribl Detect to enable rapid investigations and responses.

You’ll contribute to scalable, low‑latency distributed systems and APIs, with a strong emphasis on security context, explainability, and operational excellence in a remote‑first