Principal Software Engineer - Agentic SOC
Huntress· Platform Engineering
Remote$215k - $240kfull-timePosted 2w ago
About the role
Lead the architecture and development of Huntress' Agentic Security Operations Center (SOC), an LLM-powered agent system that investigates signals from detection pipelines, augments analysts, and evolves toward autonomous operation with verifiable evidence and auditability.
Responsibilities
- Own the architecture of agentic investigation. Define signal flow, investigation state management, tool design, and what a finished investigation contains (verdict, timeline, scope, evidence). Make decisive calls when options are unclear; foundations set here guide years of work.
- Build agents that investigate like a strong analyst by learning triage/investigation from SOC/product researchers and translating that into agent behavior.
- Take toil off analysts’ plates by building LLM-powered pre-processing for tools/data sources to summarize, correlate, and highlight important information.
- Bring a security mindset to the agent, ensuring trust boundaries, tenant isolation, and auditability from the start.
- Treat evaluation as a core product feature; define metrics to assess investigation quality and ensure changes improve outcomes.
- Decide autonomously, with data, where the system acts and when humans review, adjusting over time as needed.
- Build for production: reliability, latency, cost at scale, traceability of decisions and actions.
- Augment analysts by ensuring agent work speeds up and informs case handoffs with clear explainability.
- Prototype hard problems to derisk and prove approaches before handoff.
- Be the engineering face of the Agentic SOC, aligning with leadership, other teams, and executives, and communicating technical rationale clearly.
- Balance technical rigor with pragmatism; avoid over-engineering while maintaining momentum and stakeholder trust.
- Raise the floor and ceiling of team capability through code reviews, mentoring, and scalable patterns.
Qualifications
- 15+ years of experience developing complex software products, including significant time as the technical lead on production systems
- Hands-on experience designing, shipping, and operating LLM-based agents in production (tool use, context management, structured output, guardrails, evaluation)
- Experience building evaluation for non-deterministic systems (labeled datasets, offline evals, regression gates) and measuring quality over time
- Security mindset: systems handling untrusted input, multi-tenant isolation, audit trails
- Experience building systems that make automated decisions with real consequences
- Curiosity about how security analysts think and work
- Deep backend expertise in distributed systems, queues, durable workflows, concurrency
- Strong backend language skills; primary stack is Ruby on Rails and ability to become fluent
- Experience with AWS, Azure, or other public clouds; data stores like Postgres and Redis
- Experience with AI coding tools (e.g., Claude Code)
- BS or MS in Computer Science/Engineering or equivalent experience
Skills
Required:Architecture leadership for agent-based systemsLLM-based agent developmentEvaluation of non-deterministic systemsSecurity and multi-tenant designProduction-grade backend engineering
Benefits
- 100% remote work environment
- Generous paid time off (vacation, sick time, holidays)
- 12 weeks paid parental leave
- Competitive medical, dental, vision benefits
- 401(k) with 5% contribution
- Life and Disability insurance
- Stock options for all full-time employees
- One-time $500 home office stipend
- Annual education/professional development allowance
- $75 USD/month digital reimbursement
- Access to BetterUp coaching platform
Last updated Oct 22, 2026. Interested? Apply on the company site.
About Huntress
Enterprise-grade cybersecurity for ALL businesses.
Stop cyberattacks with the Huntress Managed Platform. Get 24/7 SOC-backed EDR, ITDR, SIEM, & Security Awareness Training for enterprise-grade protection across all your environments
cybersecurityendpoint protectionEDRITDRSIEMSecurity Awareness Training
More open roles at Huntress
- Senior IT Automation Engineer5d agoRemote · Information Technology Operations
- Manager, Security Operations Center5d agoRemote · Security Analysis
- Director, Revenue Readiness5d agoHybrid (Remote US) · Sales Acceleration
- Product Support Specialist- Eastern Time Zone5d agoHybrid (Eastern Time Zone) · Product Support
- Principal macOS Security Researcher1w agoRemote · Product Research