Senior AI SOC Engineer — Remote

Cribl; Jackson (MS); Remote; USD 230,000 - 280,000; Full time

Benefits offered by this job

Health, dental, vision benefits

Short‑term disability

Life insurance

PTO & holidays

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl is seeking a Senior Staff Software Engineer for the Security Products team to build AI SOC capabilities. You will architect autonomous reasoning, multi‑agent investigation frameworks, and context enrichment layers for post‑detection workflows.

You'll work with Cribl Detect integration, design scalable, low‑latency distributed systems, and guide engineers while contributing to architecture reviews, technical blogs, and external discussions. This is a remote role.

Qualifications

• Bachelor's degree in Computer Science, Electrical Engineering, or equivalent; 12+ years building scale production software.
• Proven leadership in AI SOC, SOAR, or post-detection automation at scale.
• Experience with AI systems: LLM orchestration, embeddings, graph/context graphs.

Responsibilities

• Architect post-detection workflows including autonomous triage and containment orchestration.
• Build production-grade reasoning systems using LLMs and context graphs.
• Lead investigations with Cribl Detect to drive automated responses.
• Provide architectural reviews and mentor engineers.

Skills

AI SOC

SOAR automation

LLM orchestration

Agent frameworks

Distributed systems

Security workflows

JavaScript/TypeScript

Go

Python

Graph databases

Open-source contributions

Education

Bachelor's degree in CS/EE or equivalent

Master's degree preferred

Tools

NodeJS

Go

Python

LLM tooling

Embeddings

Vector databases

RAG architectures

Job description

Cribl is seeking a Senior Staff Software Engineer for the Security Products team to build AI SOC capabilities. You will architect autonomous reasoning, multi‑agent investigation frameworks, and context enrichment layers for post‑detection workflows.

You'll work with Cribl Detect integration, design scalable, low‑latency distributed systems, and guide engineers while contributing to architecture reviews, technical blogs, and external discussions. This is a remote role.