Senior AI SOC Engineer: Post-Detection Orchestration

Cribl; Little Rock (AR); Remote; USD 230,000 - 280,000; Full time

Job summary

Cribl, the B2B SAAS data observability company, is hiring a Senior Staff Software Engineer for the Security Products team. This remote-first role focuses on building AI SOC capabilities, post-detection workflows, and autonomous investigations.

You'll work on LLM-based reasoning, context graphs, multi-agent experiments, and safe execution frameworks, partnering with Cribl Detect and security stakeholders to deliver scalable, low-latency solutions.

Qualifications

• 12+ years of experience building scale production software.
• Experience leading engineering initiatives and AI SOC / post‑detection automation at scale.
• Experience with AI systems using LLM orchestration, embeddings, vector databases, and RAG architectures.

Responsibilities

• Mature post‑detection workflows including autonomous triage and containment.
• Develop production‑grade reasoning using LLMs and context graphs.
• Collaborate with Cribl Detect to ingest signals and trigger investigations.
• Explore multi‑agent paradigms and agentic SOC interfaces.
• Define core abstractions and protocols for agent communications.
• Ensure safe execution with transparent reasoning traces and human oversight.
• Partner with product, security researchers, and stakeholders to turn ideas into plans.
• Represent Cribl's AI SOC vision through reviews and blogs.

Skills

AI/ML systems

Distributed systems

Security engineering

Go/Python/JS

Leadership

Education

Bachelor's degree in CS/EE or equivalent

Master's preferred

Tools

NodeJS

Go

Python

Graph databases

LLM tools

Job description

Cribl, the B2B SAAS data observability company, is hiring a Senior Staff Software Engineer for the Security Products team. This remote-first role focuses on building AI SOC capabilities, post-detection workflows, and autonomous investigations.

You'll work on LLM-based reasoning, context graphs, multi-agent experiments, and safe execution frameworks, partnering with Cribl Detect and security stakeholders to deliver scalable, low-latency solutions.