Principal Software Engineer, AI SIEM

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop a comprehensive mental model of the entire system, encompassing data ingestion and storage, query and retrieval, analyst-facing workflows (alerts, findings, assets, incidents), and the various detection engines (rule-based and more), utilizing this model to pinpoint areas of architectural strength, fragility, and instances where teams may be duplicating efforts or leaving gaps in their responsibilities.

• Lead architectural decisions that impact multiple segments of the system simultaneously, such as determining the relationship between ingest-time enrichment and detection logic, or how detection outputs influence the analyst's visibility and actions.

• Collaborate with engineering leaders from each domain (data platform, analyst experience, detection engines) as an equal thought partner, providing influence through technical expertise and logical reasoning rather than through authoritative commands.

• Identify and prioritize critical architectural investments across the system, advocating for these initiatives to engineering leadership and product teams.

• Engage directly when necessary: prototype, review, and occasionally construct the connections between pillars when no single team is responsible for them.

• Establish and promote cross-cutting technical standards for APIs, data contracts, and service boundaries, ensuring that independently developed pillars remain interoperable as they progress.

• Mentor senior and staff engineers across various teams, elevating the overall architectural thought process throughout the organization, not limited to a single team.

• Advocate for the technical integrity of the overall system in planning and leadership discussions, translating "what's outstanding, what's lacking, what's superfluous" into a coherent roadmap.

⛳️ Requirements

• Extensive experience (15+ years) in building and managing large-scale distributed backend systems, with hands-on experience in at least two of the following areas: high-throughput data ingestion/storage, query engines, or detection/rules systems.

• Proven ability to reason about systems from an architectural perspective, not merely executing specifications, but also recognizing when system boundaries are incorrect, where responsibilities overlap, and where gaps exist.

• Experience in designing APIs and service contracts that must endure across teams and over time, rather than being confined to a single codebase.

• Ability to operate effectively without a single, clear chain of command, influencing peer teams and senior engineers through the power of your reasoning.

• A four-year degree in Computer Science or equivalent practical experience.

• Familiarity with security operations concepts (alerts, findings, assets, incidents, detection rules) is preferred; if lacking direct SIEM/XDR experience, the candidate should be someone capable of quickly becoming proficient in a new domain.

• Preferred experience with modern cloud infrastructure and data-intensive systems (distributed storage, high-cardinality querying, streaming pipelines); specific tools are less critical than demonstrated judgment regarding trade-offs at scale.

• Exposure to both rule-based and ML/AI-driven detection methodologies is advantageous, but the more significant quality is the ability to assess when each approach is the appropriate solution.

🏝️ Benefits

• Restricted Stock Units (RSUs)

• Employee Stock Purchase Plan (ESPP)

• Flexible time off

• Paid company holidays and paid sick time

• Gender-neutral parental leave

• Grandparent leave

• Medical, dental, and vision coverage

• 401(k) retirement plan with company match

• Life and disability insurance

• Health and dependent care FSA

• Voluntary benefits (hospital, accident, critical illness)

• Employee Assistance Program (EAP)

• ARAG pre-paid legal

• Nationwide pet insurance

• Cancer Care program

• Global business travel medical insurance

• Home office allowance

• Mobile phone reimbursement

• Wellness coach

• Wellness/gym reimbursement

• Fertility coverage

• Adoption & surrogacy reimbursement