Sr. Staff Engineer, Security AI-SOC
Cribl · Remote - United States
About this role
**Join Cribl — Sr. Staff Engineer, Security AI-SOC** Cribl is building the telemetry infrastructure for the AI era. We partner with IT and Security teams across the world’s biggest enterprises to bridge the gap between AI ambition and infrastructure reality. As the AI Platform for Telemetry, we help customers manage and analyze telemetry for both humans and agents. --- ## Why You’ll Love This Role Cribl’s Engineering org moves fast—experimenting, prototyping, and turning rough ideas into real products. This role is on the **Security Products** team, focused on building **next-generation AI SOC capabilities**. While upstream detection and streaming data ingestion are powered by **Cribl Detect**, this role owns everything that happens **post-detection**—architecting and building autonomous reasoning, multi-agent investigation frameworks, contextual enrichment layers, and intelligent response orchestration so modern SOCs can operate at machine speed. This is a **fully remote** role (remote-first culture). --- ## What You’ll Do - Architect **post-detection workflows**, including autonomous triage, agentic investigation, evidence synthesis, and containment orchestration. - Build **production-grade reasoning systems** using LLMs, embeddings, and context graphs to formulate hypotheses, gather evidence, and deliver explainable verdicts. - Work closely with **Cribl Detect** to ingest high-fidelity detection signals and trigger automated investigations and responses. - Explore **agentic paradigms**, multi-agent frameworks, and natural language SOC interfaces—rapidly validating concepts via functional prototypes. - Write core abstractions, design agent communication protocols, review critical code, and establish strict benchmarks for **model accuracy, latency, and system reliability**. - Build safe execution frameworks with transparent reasoning trails, clear chains of custody, and human-on-the-loop controls. - Partner with product managers, security researchers, and stakeholders to translate ambiguous ideas into clear technical strategies and executable plans. - Guide engineering talent and represent Cribl’s AI SOC vision via architecture reviews, technical blogs, and technical discussions. - Participate in **stand-by, on-call, or off-hours duties**. --- ## If You’ve Got It — We Want It - **12+ years** building scale production software (Master’s preferred) and a BS in CS/EE or equivalent experience. - Experience leading engineering initiatives and directly building **AI SOC, SOAR, or post-detection automation** at scale (e.g., automated triage, multi-agent investigation systems, response platforms). - Deep, practical experience deploying **production-grade AI systems** (LLM orchestration, agent swarms, vector databases/embeddings, dynamic tool calling, RAG) in enterprise software. - Track record designing and operating **scalable, low-latency distributed systems** for asynchronous event processing and complex workflow state machines. - Deep understanding of security analyst workflows and frameworks like **MITRE ATT&CK**. - Strong experience designing robust, extensible **API frameworks** to integrate with third-party security platforms (EDR, Identity Providers, Cloud Infrastructure, SIEM/SOAR). - Ability to lead ambiguous, highly autonomous initiatives from concept to production rollout. - High ownership mindset with a bias toward **quality, performance, and simplicity**. - Clear, effective communicator—able to explain complex technical
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.