Senior Staff AI SOC Engineer — Post-Detection & Automation

Cribl; Denver (CO); Remote; USD 230,000 - 280,000; Full time

Benefits offered by this job

Health, dental, vision

Equity

401(k)

Paid holidays & time off

Job summary

Cribl is hiring a Senior Staff Software Engineer for the Security Products team, focused on building next‑generation AI SOC capabilities. You will architect autonomous reasoning, multi‑agent investigation, and contextual enrichment to enable SOCs to operate at machine speed.

The role is fully remote in a remote‑first company with global teams; requires leadership of AI‑SOC initiatives and deep expertise in LLM orchestration, distributed systems, and security workflows.

Qualifications

• 12+ years of experience building scale production software.
• Experience leading AI SOC, SOAR, or post‑detection automation initiatives at scale.
• Deep experience with LLM orchestration, embeddings, and RAG architectures.
• Understanding of MITRE ATT&CK and security analyst workflows.

Responsibilities

• Architect post‑detection workflows including autonomous triage and containment.
• Build production‑grade reasoning systems using LLMs and context graphs.
• Collaborate with Cribl Detect to ingest signals and trigger investigations and responses.
• Explore agentic paradigms and multi‑agent frameworks with prototypes.
• Write core abstractions, API designs, and benchmarks for latency and reliability.
• Ensure safe execution with transparent reasoning trails and human‑in‑the‑loop controls.
• Mentor engineers and represent AI SOC vision in reviews and blogs.

Skills

AI SOC

SOAR

LLM orchestration

Distributed systems

Graph databases

Security context

APIs design

Communication

Education

Bachelor's degree in CS/EE or related field

Tools

JavaScript/TypeScript

NodeJS

Go/Python

Graph databases

Embeddings / Vector DB

Job description

Cribl is hiring a Senior Staff Software Engineer for the Security Products team, focused on building next‑generation AI SOC capabilities. You will architect autonomous reasoning, multi‑agent investigation, and contextual enrichment to enable SOCs to operate at machine speed.

The role is fully remote in a remote‑first company with global teams; requires leadership of AI‑SOC initiatives and deep expertise in LLM orchestration, distributed systems, and security workflows.