1 month ago
Base Salary
$165k - $190k/yr
Responsibilities
- Build and ship agentic investigation components, including telemetry-querying tools, investigation logic, and structured evidence-backed outputs.
- Translate SOC analyst investigation practices into agent behavior, including data gathering, reasoning, and explanations.
- Develop LLM-powered features that summarize, correlate, and prioritize analyst tool output.
- Build evaluation pipelines and measurements to assess whether the system improves or regresses.
- Design secure, tenant-isolated systems that handle attacker-influenced data and can take actions in customer environments.
- Write reliable, observable, cost-conscious production code and operate the systems after launch.
- Collaborate with technical leads, SOC analysts, product researchers, and product managers through code reviews, design reviews, and technical discussions.
Requirements
- 6+ years of professional software development experience, including building and operating production backend systems.
- Experience building LLM applications involving tool use, structured output, prompt and context design, and evaluation; production agent experience is preferred.
- Understanding of LLM failure modes and experience testing and debugging nondeterministic behavior.
- Strong backend fundamentals involving APIs, background jobs and queues, concurrency, relational databases such as Postgres, and data stores such as Redis.
- Strong skills in one or more backend languages and willingness to become fluent in Ruby on Rails.
- Awareness of untrusted input, access control, and customer data isolation.
- Experience with AWS, Azure, or other public cloud environments.
- Experience with AI coding tools such as Claude Code.
- BS or MS in Computer Science or Engineering, or equivalent experience.
- Experience with SOC operations, incident response, threat hunting, detection engineering, endpoint or identity telemetry, Microsoft 365 telemetry, attacker tradecraft, or evaluation datasets and pipelines is preferred.
- Ruby on Rails experience is preferred.
Benefits
- 100% remote work environment.
- Paid time off including vacation, sick time, and paid holidays.
- 12 weeks of paid parental leave.
- Medical, dental, and vision benefits.
- 401(k) with a 5% contribution regardless of employee contribution.
- Life and disability insurance.
- Stock options for all full-time employees.
- One-time $500 reimbursement for building or upgrading a home office.
- Annual education and professional development assistance.
- $75 USD/month digital reimbursement.
- Access to BetterUp for coaching and personal and professional growth.
Tech Stack
Categories
About Huntress
Huntress builds a managed security platform for mid-market businesses and the MSPs that support them, offering endpoint protection, identity defense, SIEM, and security awareness training backed by a 24/7 human-led SOC. Founded in 2015 by former NSA cyber operators and headquartered in Columbia, Maryland, the company is privately held. Its platform secures more than 5 million endpoints and 14 million identities worldwide.