230K–280K USD / year
Sr. Staff Engineer, Security AI-SOC
AIRemote — worldwide
Published on 2026-10-21
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Architect and build AI-powered, post-detection capabilities that automate security operations center (SOC) investigations and responses. The role focuses on autonomous reasoning, multi-agent workflows, contextual enrichment, and safe, explainable response orchestration.
About the company
Cribl builds observability pipelines that route, reshape, and reduce telemetry data before it reaches downstream tools. It serves teams that need more control over log, metric, and trace costs.
The team
Security Products team, focused on next-generation AI SOC capabilities.
Stack
LLMsEmbeddingsVector databasesRAGJavaScriptTypeScriptNode.jsGo
What you'll do
- Architect autonomous triage, agentic investigation, evidence synthesis, and containment workflows.
- Build production-grade reasoning systems with explainable verdicts.
- Integrate detection signals with automated investigations and responses.
- Prototype multi-agent frameworks and natural-language SOC interfaces.
- Design agent communication protocols and benchmark model accuracy, latency, and reliability.
- Build safe execution frameworks with reasoning trails, chain of custody, and human oversight.
- Lead technical strategy, review critical code, and guide engineering talent.
What we're looking for
- 12+ years building production software at scale.
- Experience leading and building AI SOC, SOAR, or post-detection automation capabilities.
- Practical experience deploying enterprise AI systems using LLM orchestration, agents, embeddings, tool calling, and RAG.
- Experience with scalable, low-latency distributed systems, asynchronous events, and workflow state machines.
- Strong understanding of security analyst workflows and MITRE ATT&CK.
- Experience designing APIs for EDR, identity, cloud, SIEM, or SOAR integrations.
- Ability to lead ambiguous initiatives from concept through production.
- Clear communication and a strong ownership mindset.
Nice to have
- Master’s degree.
- Experience with contextual graphs or graph databases for security data.
- Open-source contributions in AI, agentic automation, or security.