Sr. Staff Engineer, Security AI-SOC

Why You’ll Love This Role

Cribl’s Engineering org is where new product ideas come to life. We move fast, try things out, and aren’t afraid to break a few things along the way if it means learning faster and building something better. This is where we experiment, prototype, and turn rough ideas into real products that deliver value to customers.

We’re looking for a Senior Staff Engineer to join the Security Products team, focusing specifically on building next-generation AI SOC capabilities.

While upstream detection and streaming data ingestion are powered by Cribl Detect, this role owns everything that happens post-detection. You will architect and build the autonomous reasoning, multi-agent investigation frameworks, contextual enrichment layers, and intelligent response orchestrations that allow modern SOCs to operate at machine speed.

This is a fully remote role, and Cribl is a remote-first company. Our culture embraces the diversity of team members spread across the globe.

• Architect post-detection workflows, including autonomous triage, agentic investigation, evidence synthesis, and containment orchestration.
• Build production-grade reasoning systems using LLMs, embeddings, and context graphs to formulate hypotheses, gather evidence, and deliver explainable verdicts.
• Work closely with Cribl Detect to ingest high-fidelity detection signals and trigger automated investigations and responses.
• Explore agentic paradigms, multi-agent frameworks, and natural language SOC interfaces, rapidly validating concepts through functional prototypes.
• Write core abstractions, design agent communication protocols, review critical code, and establish strict benchmarks for model accuracy, latency, and system reliability.
• Build safe execution frameworks offering transparent reasoning trails, clear chains of custody, and human-on-the-loop controls.
• Partner tightly with product managers, security researchers, and stakeholders to translate ambiguous ideas into clear technical strategies and executable plans.
• Guide engineering talent and represent Cribl’s AI SOC vision internally and externally via architecture reviews, technical blogs, and discussions.
• This position will require stand-by, on-call, or off-hours duties.

…