Senior Staff AI SOC Architect (Remote)

Cribl; Concord (NH); Remote; USD 230,000 - 280,000; Full time

Benefits offered by this job

Equity

Health insurance

401(k) plan

Paid holidays & PTO

Job summary

Cribl is seeking a Senior Staff Software Engineer for its Security Products team, focusing on post‑detection AI SOC capabilities. You will architect autonomous reasoning, multi‑agent investigations, and contextual enrichment layers to enable machine‑speed security operations.

This fully remote role requires 12+ years in scale production software, hands-on experience with LLM orchestration, and leadership in AI/SOAR. Join Cribl to shape next‑gen telemetry security infrastructure.

Qualifications

• Bachelor's degree in CS/EE; Master’s preferred.
• 12+ years building scale production software.
• Experience leading AI SOC or post-detection automation at scale.
• Hands-on with LLM orchestration, embeddings, and RAG architectures.

Responsibilities

• Architect post‑detection workflows, including autonomous triage, agentic investigation, evidence synthesis, and containment orchestration.
• Build production‑grade reasoning systems using LLMs, embeddings, and context graphs.
• Ingest high‑fidelity detection signals and trigger automated investigations and responses.
• Explore agentic paradigms and multi‑agent frameworks with prototypes.
• Write core abstractions, design agent communication protocols, and set benchmarks.
• Build safe execution frameworks with transparent reasoning trails and human oversight.
• Collaborate with PMs, security researchers, and stakeholders to translate ideas into plans.
• Guide engineering talent and represent Cribl's AI SOC vision via reviews and blogs.
• Stand‑by, on‑call, or off‑hours duties as needed.

Skills

AI SOC

Post-detection automation

LLM orchestration

Go/Python

Education

Bachelor's degree

Master's preferred

Tools

Node.js

Python

Neo4j

Job description

Cribl is seeking a Senior Staff Software Engineer for its Security Products team, focusing on post‑detection AI SOC capabilities. You will architect autonomous reasoning, multi‑agent investigations, and contextual enrichment layers to enable machine‑speed security operations.

This fully remote role requires 12+ years in scale production software, hands-on experience with LLM orchestration, and leadership in AI/SOAR. Join Cribl to shape next‑gen telemetry security infrastructure.