Senior AI SOC Engineer: Post-Detection & Autonomy (Remote)

Cribl; Madison (WI); Remote; USD 230,000 - 280,000; Full time

Benefits offered by this job

Health insurance

Dental coverage

Vision coverage

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility benefit

401(k)

Equity

Job summary

Cribl is seeking a Senior Staff Software Engineer for the Security Products team, focusing on next‑gen AI SOC capabilities. You will architect autonomous reasoning, multi‑agent investigations, and contextual enrichments to enable machine‑speed security operations in a remote‑first environment.

You’ll build safe, explainable workflows and integrate with Cribl Detect to ingest signals and drive automated responses. Strong AI systems experience and leadership are essential.

Qualifications

• Bachelor's degree in Computer Science, Electrical Engineering, or equivalent experience (Master's preferred).
• 12+ years of experience building scale production software.
• Experience leading AI SOC, SOAR, or post‑detection automation at scale.
• Deep experience with AI systems—LLMs, embeddings, vector databases, RAG, and tool calling.

Responsibilities

• Architect post‑detection workflows including autonomous triage, investigation, evidence synthesis, and containment orchestration.
• Build production‑grade reasoning systems using LLMs, embeddings, and context graphs to form hypotheses and explain verdicts.
• Collaborate with Cribl Detect to ingest detection signals and trigger investigations and responses.
• Explore agentic paradigms and multi‑agent frameworks with rapid prototypes.
• Write core abstractions, design agent protocols, review critical code and set benchmarks for accuracy, latency, and reliability.
• Develop safe execution frameworks with transparent reasoning trails and human‑in‑the‑loop controls.
• Partner with product managers and security researchers to translate ideas into executable plans.
• Lead engineering talent and represent Cribl's AI SOC vision internally and externally.

Skills

AI SOC

SOAR

LLM orchestration

vector databases

dynamic tool calling

RAG architectures

distributed systems

MITRE ATT&CK

API frameworks

JavaScript/TypeScript

NodeJS

Go/Python

graph databases

open-source contributions

Education

Bachelor's degree in CS or EE

Tools

Node.js

Go

Python

Job description

Cribl is seeking a Senior Staff Software Engineer for the Security Products team, focusing on next‑gen AI SOC capabilities. You will architect autonomous reasoning, multi‑agent investigations, and contextual enrichments to enable machine‑speed security operations in a remote‑first environment.

You’ll build safe, explainable workflows and integrate with Cribl Detect to ingest signals and drive automated responses. Strong AI systems experience and leadership are essential.