[Hiring] Principal Software Engineer @Huntress

Role Description

Huntress is building an Agentic SOC. When our detection pipeline raises a signal, an LLM-based agent picks it up and investigates it end-to-end. It gathers telemetry across our products, reconstructs what happened, and makes a well-documented determination about whether the activity is malicious. Over time, it will take on more of the work itself, growing from resolving routine cases to acting fast when it finds an attack and handing analysts cases with the evidence already assembled. We’re hiring a Principal Software Engineer to head this effort.

This system is meant to augment our analysts, not replace them. It takes the high-volume, repetitive work off their plates so they can focus on complex cases and hands-on keyboard intrusions where human expertise matters most. It also reduces toil in the rest of their day by using LLMs to pre-process the output of the tools analysts use constantly, so they start from a clear picture instead of raw telemetry.

This isn’t a chatbot bolted onto a dashboard. The system investigates a large volume of signals a day across thousands of customer organizations. Many signals are benign, but some are live intrusions where minutes matter. The telemetry the system reads comes from environments in which attackers are actively operating. Because the system makes real decisions, like closing an investigation or isolating a host, it has to be right, it has to show its work, and it has to know when to hand off to a person.

As the technical lead, you’ll own the system’s architecture and direction. That means deciding how an investigation is structured, where deterministic code ends and model reasoning begins, what the agent can and can’t touch, how we know it’s working, and which decisions it makes on its own as it proves itself. You’ll work closely with SOC analysts, detection engineers, product, and other engineering teams. You’ll go deep in the code and help the engineers around you grow. Your work will directly shape how Huntress scales protection for the 99%.

We make full use of AI coding tools to enable you to accelerate your development. We don’t cap token usage. We expect you to use AI and all tools responsibly.

Responsibilities

• Own the architecture of agentic investigation.
• Build agents that investigate like a strong analyst.
• Take toil off analysts’ plates.
• Bring a security mindset to the agent itself.
• Treat evaluation as a core part of the product.
• Decide with data what the system does on its own.
• Build for production, not for demos.
• Augment analysts, don’t replace them.
• Prototype your way through hard problems.
• Be the engineering face of the Agentic SOC.
• Balance technical rigor with pragmatism.
• Raise the floor and the ceiling.

Qualifications

• 15+ years of experience developing complex software products, including significant time as the technical lead on production systems.
• Hands-on experience designing, shipping, and operating LLM-based agents in production.
• A track record of building evaluation for non-deterministic systems.
• A security mindset: experience building systems that handle untrusted input.
• Experience building systems that make automated decisions with real consequences.
• Curiosity about how security analysts think and work.
• Deep backend expertise in distributed systems, queues, and durable workflows.
• Strong skills in one or more backend languages.
• Experience with AWS, Azure, or other public cloud environments.
• Experience with AI coding tools, such as Claude Code.
• BS or MS in Computer Science or Engineering, or equivalent experience.

Bonus Points

• Experience working in or building for a SOC, incident response, threat hunting, or detection engineering.
• Familiarity with endpoint and identity telemetry and with attacker tradecraft.
• Experience attacking or adversarially testing ML or LLM systems.
• Experience with Ruby on Rails.

Benefits

• 100% remote work environment - since our founding in 2015.
• Generous paid time off policy, including vacation, sick time, and paid holidays.
• 12 weeks of paid parental leave.
• Highly competitive and comprehensive medical, dental, and vision benefits plans.
• 401(k) with a 5% contribution regardless of employee contribution.
• Life and Disability insurance plans.
• Stock options for all full-time employees.
• One-time $500 reimbursement for building/upgrading home office.
• Annual allowance for education and professional development assistance.
• $75 USD/month digital reimbursement.
• Access to the BetterUp platform for coaching, personal, and professional growth.