Principal Software Engineer – Agentic SOC

🔥 1 hour ago

🇺🇸 United States – Remote

💵 $215k - $240k / year

⏰ Full Time

🔴 Lead

🧑‍💻 Full-stack Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Huntress

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

🏥 Healthcare

🏭 Manufacturing

Consulting • Healthcare • Manufacturing

Huntress is a cybersecurity firm that provides managed detection, investigation, and response solutions to protect endpoints, identities, and email environments. It offers a platform with managed EDR, security awareness training, ITDR for Microsoft 365, and SIEM solutions, all supported by a 24/7 Security Operations Center. Huntress is designed to secure small and medium-sized businesses against cyber threats. Their services help organizations across industries, ensuring robust protection and compliance, especially in environments like education, finance, healthcare, manufacturing, and government.

📋 Description

• Lead the development of Huntress’s Agentic SOC, where LLM-based agents investigate security signals end-to-end • Own the architecture and technical direction of agentic investigations • Define signal-to-investigation workflows, investigation state management, agent tools, and investigation outputs including verdicts, timelines, scope, and evidence • Build agents that replicate strong analyst investigation behavior • Develop LLM-powered preprocessing for analyst tools and data sources • Design trust boundaries, tenant isolation, and auditability for attacker-influenced data and customer environments • Define and maintain evaluations for investigation correctness, reasoning, and documentation • Decide which system actions are autonomous and which require human review based on measured performance • Design for production reliability, latency, cost, throughput, and correctness at scale • Ensure investigations and actions are traceable and explainable • Design effective handoffs between agents and SOC analysts • Prototype and de-risk uncertain technical approaches • Represent the Agentic SOC’s technical perspective to SOC leadership, engineering, product, and executives • Drive alignment on technical decisions and scope • Conduct code reviews, pair on difficult problems, mentor engineers, and improve team patterns and tooling • Partner with the engineering manager on team health and provide direct feedback • Use AI coding tools responsibly to accelerate development

🎯 Requirements

• 15+ years of experience developing complex software products, including significant time as the technical lead on production systems • Hands-on experience designing, shipping, and operating LLM-based agents in production, including tool use, context management, structured output, guardrails, and evaluation • Understanding of how LLM-based agents fail • Experience building evaluations for non-deterministic systems, including labeled datasets, offline evaluations, and regression gates • Experience measuring system quality over time • Experience building systems handling untrusted input, enforcing multi-tenant isolation, and producing auditable trails • Experience building systems making automated decisions with real consequences • Judgment about what to automate versus leave to people • Curiosity about how security analysts think and work and willingness to learn from them • Deep backend expertise in distributed systems, queues, durable workflows, and concurrency • Strong skills in one or more backend languages and ability to learn new languages quickly • Ability and expectation to become fluent in Ruby on Rails • Experience with AWS, Azure, or other public cloud environments • Experience with Postgres and Redis or similar data stores • Experience with AI coding tools such as Claude Code • BS or MS in Computer Science or Engineering, or equivalent experience • Remote work restricted to the United States • Bonus: experience in or building for a SOC, incident response, threat hunting, or detection engineering • Bonus: familiarity with endpoint and identity telemetry and attacker tradecraft • Bonus: experience attacking or adversarially testing ML or LLM systems • Bonus: experience with Ruby on Rails

🏖️ Benefits

• 100% remote work environment • Generous paid time off policy, including vacation, sick time, and paid holidays • 12 weeks of paid parental leave • Highly competitive and comprehensive medical, dental, and vision benefits plans • 401(k) with a 5% contribution regardless of employee contribution • Life and Disability insurance plans • Stock options for all full-time employees • One-time $500 reimbursement for building/upgrading home office • Annual allowance for education and professional development assistance • $75 USD/month digital reimbursement • Access to the BetterUp platform for coaching, personal, and professional growth • Bonus and equity included with base compensation

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume