Sr. Staff Engineer, Security AI-SOC
About The Position
Cribl is seeking a Senior Staff Engineer for its Security Products team to build next-generation AI SOC capabilities. The role focuses on post-detection systems: autonomous reasoning, multi-agent investigation frameworks, contextual enrichment, and intelligent response orchestration. The engineer will turn high-fidelity detection signals from Cribl Detect into automated investigations and responses, helping SOCs operate at machine speed. This fully remote role involves designing and building production-grade AI systems using LLMs, embeddings, and context graphs; exploring agentic paradigms and natural-language SOC interfaces; and validating ideas through functional prototypes. The engineer will establish core abstractions, agent communication protocols, and benchmarks for accuracy, latency, and reliability, while creating safe execution frameworks with transparent reasoning trails, clear chains of custody, and human-on-the-loop controls. The role partners with product managers, security researchers, and other stakeholders to turn ambiguous ideas into technical strategies and executable plans. It also includes guiding engineering talent and representing Cribl’s AI SOC vision through architecture reviews, technical blogs, and discussions. Stand-by, on-call, or off-hours duties are required.
Requirements
- Bachelor’s degree in Computer Science, Electrical Engineering, or equivalent experience; a Master’s degree is preferred.
- 12+ years of experience building production software at scale.
- Demonstrated experience leading engineering initiatives and directly building AI SOC, SOAR, or post-detection automation capabilities at scale.
- Practical experience building and deploying production-grade AI systems using LLM orchestration frameworks, agent swarms, vector databases or embeddings, dynamic tool calling, and RAG architectures in enterprise software.
- Experience designing and operating scalable, low-latency distributed systems for asynchronous event processing and complex, multi-system workflow state machines.
- Deep understanding of security analyst workflows and frameworks such as MITRE ATT&CK.
- Strong experience designing robust, extensible API frameworks for third-party security platforms, including EDR, identity providers, cloud infrastructure, and SIEM/SOAR.
- Ability to lead ambiguous, highly autonomous initiatives from concept through production rollout.
- High ownership mindset and a focus on quality, performance, and simplicity.
- Clear, effective communication skills for explaining complex technical ideas to engineers, partners, and customers in remote, distributed teams.
- Direct experience building autonomous agent frameworks for security context.
- Experience with JavaScript/TypeScript, NodeJS, or Go/Python in enterprise systems.
Nice To Haves
- Background in graph databases or contextual graph models used to represent identities, endpoints, and threat histories.
- Active open-source contributions in AI, agentic automation, or security.
- Master’s degree.
Responsibilities
- Architect post-detection workflows, including autonomous triage, agentic investigation, evidence synthesis, and containment orchestration.
- Build production-grade reasoning systems using LLMs, embeddings, and context graphs to formulate hypotheses, gather evidence, and deliver explainable verdicts.
- Work with Cribl Detect to ingest detection signals and trigger automated investigations and responses.
- Explore agentic paradigms, multi-agent frameworks, and natural-language SOC interfaces, validating concepts through functional prototypes.
- Write core abstractions, design agent communication protocols, review critical code, and establish benchmarks for model accuracy, latency, and system reliability.
- Build safe execution frameworks with transparent reasoning trails, clear chains of custody, and human-on-the-loop controls.
- Partner with product managers, security researchers, and stakeholders to translate ambiguous ideas into technical strategies and executable plans.
- Guide engineering talent and represent Cribl’s AI SOC vision through architecture reviews, technical blogs, and discussions.
Benefits
- Health insurance
- Dental insurance
- Vision insurance
- Short-term disability insurance
- Life insurance
- Paid holidays
- Paid time off
- Fertility treatment benefit
- 401(k)
- Equity
- Cribl Corporate Bonus Program (for roles other than sales and some sales-adjacent roles)
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
