Principal Software Engineer - Agentic SOC

The technical lead for Huntress's Agentic SOC, reporting to the Director, Engineering. In this system, an LLM-based agent takes each detection signal, investigates it across Huntress products and documents whether the activity is malicious, handing complex cases to analysts with the evidence gathered. The principal engineer owns its architecture: how investigations are structured, where code ends and model reasoning begins, what the agent may touch, how tenants stay isolated against manipulation, how correctness is evaluated, and when autonomy is earned. The role also builds LLM pre-processing for analysts' everyday tools and mentors the team.

Huntress wants fifteen or more years building complex software, production experience with LLM agents and their evaluation, a strong security mindset, distributed systems depth and willingness to work in Ruby on Rails. Remote in the US only.