Senior Software Engineer- Agentic SOC

Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.

Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC).

As a Senior Software Engineer on the Agentic SOC team, you’ll build and ship core parts of this system. You’ll work closely with the team’s technical leads, SOC analysts, product researchers, and product managers. You’ll own significant pieces end-to-end, from an ambiguous problem to a production feature you can show is working.

Responsibilities:

• Build the investigation system. You design, build, and ship the components that make agentic investigation work: the tools agents use to query telemetry, the logic that drives an investigation, and the structured, evidence-backed output that analysts and customers see.
• Turn analyst expertise into agent behavior. You sit with SOC analysts and product researchers to understand how they triage and investigate a given kind of Signal, then encode that into what the agent looks for, what it gathers, and how it explains its conclusions.
• Take toil off analysts’ plates. You build LLM-powered features that pre-process the output of tools analysts use every day. They summarize, correlate, and highlight what matters, so analysts spend their time on judgment instead of assembly.
• Measure what you ship. You build and extend the evaluations that tell us whether the system is getting better or worse, and you back your changes with evidence rather than a handful of good-looking examples.
• Build with a security mindset. The agent reads attacker-influenced data, runs across thousands of customer tenants, and can take action in customer environments. You think about how what you build could be misused or manipulated, and you design for it.
• Build for production. You write reliable, observable, cost-conscious code that behaves well when models are slow, wrong, or unavailable. You operate what you build and help keep the system healthy as new detections and products come online.
• Collaborate and raise the bar. You give thoughtful code reviews, help teammates get unstuck, share what you learn about building with LLMs, and contribute to technical discussions and design reviews with clear reasoning about tradeoffs.
• Balance rigor with pragmatism. You know when to prototype quickly to learn something and when to slow down because the cost of being wrong is high.

What You Bring To The Team:

• 6+ years of professional software development experience, including building and operating production backend systems
• Experience building applications with LLMs, including tool use, structured output, prompt and context design, and evaluation. Experience shipping agents to production is a strong plus
• An understanding of how LLM-based systems fail, and good habits for testing and debugging non-deterministic behavior
• Solid backend fundamentals, including APIs, background jobs and queues, concurrency, relational databases such as Postgres, and data stores such as Redis
• Strong skills in one or more backend languages and the ability to pick up new ones quickly. Our primary stack is Ruby on Rails. Prior Rails experience isn’t required, and we expect you to become fluent in it
• Security awareness: you think about untrusted input, access control, and keeping one customer’s data separate from another’s
• Curiosity about how security analysts think and work, and a willingness to spend real time learning from them
• Experience with AWS, Azure, or other public cloud environments
• Experience with AI coding tools, such as Claude Code
• BS or MS in Computer Science or Engineering, or equivalent experience

What We Offer:

• 100% remote work environment
• Generous paid time off policy, including vacation, sick time, and paid holidays
• 12 weeks of paid parental leave
• Highly competitive and comprehensive medical, dental, and vision benefits plans
• 401(k) with a 5% contribution regardless of employee contribution
• Life and Disability insurance plans
• Stock options for all full-time employees
• One-time $500 reimbursement for building/upgrading home office
• Annual allowance for education and professional development assistance
• $75 USD/month digital reimbursement
• Access to the BetterUp platform for coaching, personal, and professional growth