Senior Staff AI SOC Engineer - Post-Detection Orchestration

Cribl; Saint Paul (MN); Remote; USD 230,000 - 280,000; Full time

Benefits offered by this job

Health, dental, vision

401(k) and equity

Fertility treatment benefit

Paid holidays & PTO

Job summary

Cribl is hiring a Senior Staff Software Engineer for the Security Products team, focused on building next‑generation AI SOC capabilities. You will own post‑detection autonomous reasoning, multi‑agent investigation, contextual enrichment, and intelligent response orchestration in a fast‑moving, remote‑first environment.

You will architect scalable, low‑latency distributed systems, design agent communication protocols, and ensure transparent reasoning trails.

Qualifications

• 12+ years of experience building scale production software.
• Experience leading AI SOC, SOAR, or post‑detection automation at scale.
• Experience with production AI systems using LLMs, context graphs and dynamic tool calling.

Responsibilities

• Architect post-detection workflows including autonomous triage and containment.
• Build production-grade reasoning systems using LLMs, embeddings, and context graphs.
• Collaborate with Cribl Detect to ingest signals and trigger investigations and responses.
• Explore multi-agent paradigms and agentic interfaces for SOC workflows.
• Write core abstractions and establish benchmarks for accuracy, latency, and reliability.

Skills

Architectural leadership

Distributed systems

AI/ML systems

Communication

Security domain knowledge

Education

Bachelor's degree in CS/EE or equivalent

Master's degree preferred

Tools

JavaScript/TypeScript

NodeJS

Go/Python

LLM orchestration frameworks

Embeddings / vector DBs

Graph databases

Job description

Cribl is hiring a Senior Staff Software Engineer for the Security Products team, focused on building next‑generation AI SOC capabilities. You will own post‑detection autonomous reasoning, multi‑agent investigation, contextual enrichment, and intelligent response orchestration in a fast‑moving, remote‑first environment.

You will architect scalable, low‑latency distributed systems, design agent communication protocols, and ensure transparent reasoning trails.