> Markdown version of [/jobs/ext/4151437-sr-staff-engineer-security-ai-soc](https://www.wearedevelopers.com/jobs/ext/4151437-sr-staff-engineer-security-ai-soc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr. Staff Engineer, Security AI-SOC

- **Company:** Cribl, Inc.
- **Location:** Washington, DC, United States (Remote available)
- **Experience:** Expert
- **Salary:** $230,000.0 - $280,000.0
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Application Programming Interfaces (APIs), Artificial Intelligence, Cloud Computing, Communications Protocols, Distributed Systems, Graph Database, Python (Programming Language), Node.Js, Security Information and Event Management, TypeScript, Enterprise Software Applications, Retrieval-Augmented Generation, Large Language Models, Multi-Agent Systems, Mitre Att&ck, State Machines, Reliability of Systems, Information Technology, Machine Learning Operations
- **Published:** October 22, 2026
- **Apply:** https://www.disabledperson.com/jobs/76174406-sr-staff-engineer-security-ai-soc

## About the Role

* Bachelor's degree in Computer Science, Electrical Engineering, or equivalent experience (Master's preferred) with 12+ years of experience building scale production software.
 * Demonstrated experience leading engineering initiatives and directly building AI SOC, SOAR, or post-detection automation capabilities at scale (e.g., automated triage, multi-agent investigation systems, or response platforms).
 * Deep, practical experience building and deploying production-grade AI systems-utilizing LLM orchestration frameworks, agent swarms, vector databases/embeddings, dynamic tool calling, and RAG architectures in enterprise software.
 * Track record of designing and operating scalable, low-latency distributed systems capable of handling asynchronous event processing and complex, multi-system workflow state machines.
 * Deep understanding of the security analyst workflow and frameworks like MITRE ATT&CK.
 * Strong experience designing robust, extensible API frameworks to interface with third-party security platforms (EDR, Identity Providers, Cloud Infrastructure, SIEM/SOAR).
 * Proven capability to lead ambiguous, highly autonomous initiatives from abstract concept to production rollout.
 * High ownership mindset with a bias toward quality, performance, and simplicity
 * Clear, effective communicator-able to explain complex technical ideas to engineers, partners, and customers in remote, distributed teams
 * Direct experience building autonomous agent frameworks for security context.
 * Experience with JavaScript/TypeScript, NodeJS, or Go/Python in enterprise systems.
 * Background in graph databases or contextual graph models used to represent identities, endpoints, and threat histories.
 * Active open-source contributions in the AI, agentic automation, or security space.
 * No fear! Speak your mind, foster open debate, and bring a low-ego mindset.
 * Good jokes-or better yet, bad jokes.
 * A healthy appreciation for goats

#LI-EL1
#LI-Remote

## Description

* Architect post-detection workflows, including autonomous triage, agentic investigation, evidence synthesis, and containment orchestration.
 * Build production-grade reasoning systems using LLMs, embeddings, and context graphs to formulate hypotheses, gather evidence, and deliver explainable verdicts.
 * Work closely with Cribl Detect to ingest high-fidelity detection signals and trigger automated investigations and responses.
 * Explore agentic paradigms, multi-agent frameworks, and natural language SOC interfaces, rapidly validating concepts through functional prototypes.
 * Write core abstractions, design agent communication protocols, review critical code, and establish strict benchmarks for model accuracy, latency, and system reliability.
 * Build safe execution frameworks offering transparent reasoning trails, clear chains of custody, and human-on-the-loop controls.
 * Partner tightly with product managers, security researchers, and stakeholders to translate ambiguous ideas into clear technical strategies and executable plans.
 * Guide engineering talent and represent Cribl's AI SOC vision internally and externally via architecture reviews, technical blogs, and discussions.
 * This position will require stand-by, on-call, or off-hours duties.