4 hours ago
Base Salary
$230k - $280k/yr
Responsibilities
- Architect post-detection workflows for autonomous triage, agentic investigations, evidence synthesis, and containment orchestration.
- Build production-grade reasoning systems using LLMs, embeddings, context graphs, multi-agent frameworks, and RAG architectures.
- Design scalable asynchronous distributed systems, workflow state machines, API frameworks, and integrations with third-party security platforms.
- Create safe execution frameworks with reasoning trails, chains of custody, and human-on-the-loop controls.
- Prototype agentic paradigms and natural-language SOC interfaces while establishing benchmarks for model accuracy, latency, and reliability.
- Partner with product managers, security researchers, and stakeholders to translate ambiguous ideas into technical strategies and production plans.
- Guide engineering talent and represent Cribl’s AI SOC vision through architecture reviews, technical writing, and external discussions.
- Participate in standby, on-call, or off-hours duties.
Requirements
- Bachelor’s degree in Computer Science, Electrical Engineering, or equivalent experience; a master’s degree is preferred.
- 12+ years of experience building scale production software.
- Experience leading engineering initiatives and directly building AI SOC, SOAR, or post-detection automation capabilities at scale.
- Deep practical experience deploying production AI systems using LLM orchestration frameworks, agent swarms, vector databases, embeddings, dynamic tool calling, and RAG architectures.
- Experience designing and operating scalable, low-latency distributed systems with asynchronous event processing and complex workflow state machines.
- Strong understanding of security analyst workflows and frameworks such as MITRE ATT&CK.
- Experience designing extensible API frameworks for EDR, identity provider, cloud infrastructure, SIEM, and SOAR integrations.
- Experience leading autonomous initiatives from abstract concept through production rollout.
- Experience with JavaScript, TypeScript, NodeJS, Go, or Python in enterprise systems.
- Experience with graph databases or contextual graph models representing identities, endpoints, and threat histories.
- Direct experience building autonomous agent frameworks for security contexts.
- Active open-source contributions in AI, agentic automation, or security are requested.
Benefits
- Fully remote role at a remote-first company.
- Health, dental, vision, short-term disability, and life insurance.
- Paid holidays and paid time off.
- Fertility treatment benefit.
- 401(k) and equity.
- Eligibility for the Cribl Corporate Bonus Program for non-sales roles.
Tech Stack
Categories
About Cribl
Cribl builds a vendor‑agnostic telemetry data platform used by IT, security, and observability teams to collect, route, shape, store, and search machine data in real time. Its products (including Cribl Stream, Edge, and Search) are sold as enterprise subscriptions and can run in cloud or self‑managed environments. Founded in 2018 and headquartered in San Francisco, the company is privately held and serves large global enterprises.