Senior Staff AI SOC Engineer — Post-Detection Autonomy, Remote

Cribl; Nashville (TN); Remote; USD 230,000 - 280,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Short‑term disability

Life insurance

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl is seeking a Senior Staff Software Engineer for the Security Products team to build AI SOC capabilities. You will architect autonomous reasoning, multi‑agent investigations, and contextual enrichment that drive machine‑speed SOC operations.

You will work with Cribl Detect and partner with product managers and researchers to translate ideas into scalable, secure solutions. Remote‑first role with global impact.

Qualifications

• Bachelor's degree in CS or related field and 12+ years building production software.
• Experience leading AI SOC, SOAR, or post‑detection automation at scale.
• Practical experience with LLM orchestration, vector embeddings, and RAG in enterprise apps.
• Strong understanding of MITRE ATT&CK and security analyst workflows.
• Proven ability to drive ambiguous, autonomous initiatives to production.

Responsibilities

• Architect post‑detection workflows: autonomous triage, investigation, containment.
• Build reasoning systems with LLMs, embeddings, and context graphs.
• Ingest detection signals and trigger investigations and responses.
• Explore agentic paradigms and multi‑agent frameworks with prototypes.
• Define APIs and protocols; ensure model accuracy, latency, and reliability.
• Develop safe execution and human‑in‑the‑loop controls.
• Collaborate with product, security researchers, and stakeholders.
• Provide technical leadership and represent Cribl's AI SOC vision.

Skills

JavaScript/TypeScript

NodeJS

Go/Python

Education

Bachelor's degree in Computer Science or related

Master's degree preferred

Tools

Graph databases

Job description

Cribl is seeking a Senior Staff Software Engineer for the Security Products team to build AI SOC capabilities. You will architect autonomous reasoning, multi‑agent investigations, and contextual enrichment that drive machine‑speed SOC operations.

You will work with Cribl Detect and partner with product managers and researchers to translate ideas into scalable, secure solutions. Remote‑first role with global impact.