---
title: 'Senior Software Engineer- Agentic SOC at Huntress'
canonical: 'https://feeny.ai/job/senior-software-engineer-agentic-soc-huntress-united-states-of-9dxk5nne7qf2'
type: 'job'
last_seen: '2026-10-20'
---

# Senior Software Engineer- Agentic SOC at Huntress

- **Company:** Huntress
- **Location:** United States of, United States
- **Posted:** 2026-10-07
- **Last confirmed live:** 2026-10-20
- **Apply:** https://job-boards.greenhouse.io/huntress/jobs/8015561003

## Job description

What We Do:

Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.

Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.

Huntress now secures more than 5M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.

Reports to: Director, Engineering Location: Remote US, Only Compensation: $165,000 to $190,000 base plus bonus and equity

What You’ll Do:

Huntress is building an Agentic SOC. When our detection pipeline raises a signal, an LLM-based agent picks it up and investigates it end-to-end. It gathers telemetry across our products, reconstructs what happened, and makes a well-documented determination about whether the activity is malicious. Over time, it will take on more of the work itself, growing from resolving routine cases to acting fast when it finds an attack and handing analysts cases with the evidence already assembled.

This system is meant to augment our analysts, not replace them. It takes the high-volume, repetitive work off their plates so they can focus on complex cases and hands-on keyboard intrusions where human expertise matters most. It also reduces toil in the rest of their day by using LLMs to pre-process the output of the tools analysts use constantly, so they start from a clear picture instead of raw telemetry.

This isn’t a chatbot bolted onto a dashboard. The system investigates a large volume of signals a day across thousands of customer organizations. Many signals are benign, but some are live intrusions where minutes matter. The telemetry the system reads comes from environments where attackers are actively operating. Because the system makes real decisions, like closing an investigation or isolating a host, it has to be right, it has to show its work, and it has to know when to hand off to a person.

As a Senior Software Engineer on the Agentic SOC team, you’ll build and ship core parts of this system. You’ll work closely with the team’s technical leads, SOC analysts, product researchers, and product managers. You’ll own significant pieces end-to-end, from an ambiguous problem to a production feature you can show is working.

We make full use of AI coding tools to enable you to accelerate your development. We don’t cap token usage. We expect you to use AI and all tools responsibly.

Responsibilities:

- Build the investigation system. You design, build, and ship the components that make agentic investigation work: the tools agents use to query telemetry, the logic that drives an investigation, and the structured, evidence-backed output that analysts and customers see.
- Turn analyst expertise into agent behavior. You sit with SOC analysts and product researchers to understand how they triage and investigate a given kind of Signal, then encode that into what the agent looks for, what it gathers, and how it explains its conclusions.
- Take toil off analysts’ plates. You build LLM-powered features that pre-process the output of tools analysts use every day. They summarize, correlate, and highlight what matters, so analysts spend their time on judgment instead of assembly.
- Measure what you ship. You build and extend the evaluations that tell us whether the system is getting better or worse, and you back your changes with evidence rather than a handful of good-looking examples.
- Build with a security mindset. The agent reads attacker-influenced data, runs across thousands of customer tenants, and can take action in customer environments. You think about how what you build could be misused or manipulated, and you design for it.
- Build for production. You write reliable, observable, cost-conscious code that behaves well when models are slow, wrong, or unavailable. You operate what you build and help keep the system healthy as new detections and products come online.
- Collaborate and raise the bar. You give thoughtful code reviews, help teammates get unstuck, share what you learn about building with LLMs, and contribute to technical discussions and design reviews with clear reasoning about tradeoffs.
- Balance rigor with pragmatism. You know when to prototype quickly to learn something and when to slow down because the cost of being wrong is high.

What You Bring To The Team:

- 6+ years of professional software development experience, including building and operating production backend systems
- Experience building applications with LLMs, including tool use, structured output, prompt and context design, and evaluation. Experience shipping agents to production is a strong plus
- An understanding of how LLM-based systems fail, and good habits for testing and debugging non-deterministic behavior
- Solid backend fundamentals, including APIs, background jobs and queues, concurrency, relational databases such as Postgres, and data stores such as Redis
- Strong skills in one or more backend languages and the ability to pick up new ones quickly. Our primary stack is Ruby on Rails. Prior Rails experience isn’t required, and we expect you to become fluent in it
- Security awareness: you think about untrusted input, access control, and keeping one customer’s data separate from another’s
- Curiosity about how security analysts think and work, and a willingness to spend real time learning from them
- Experience with AWS, Azure, or other public cloud environments
- Experience with AI coding tools, such as Claude Code
- BS or MS in Computer Science or Engineering, or equivalent experience

Bonus Points:

- Experience working in or building for a SOC, incident response, threat hunting, or detection engineering. It isn’t required, but it helps a lot, because we build these workflows around how our analysts actually investigate
- Familiarity with endpoint, identity, and Microsoft 365 telemetry and with attacker tradecraft (e.g., MITRE ATT&CK)
- Experience building evaluation pipelines or datasets for ML or LLM systems
- Experience with Ruby on Rails

What We Offer:

- 100% remote work environment - since our founding in 2015
- Generous paid time off policy, including vacation, sick time, and paid holidays
- 12 weeks of paid parental leave
- Highly competitive and comprehensive medical, dental, and vision benefits plans
- 401(k) with a 5% contribution regardless of employee contribution
- Life and Disability insurance plans
- Stock options for all full-time employees
- One-time $500 reimbursement for building/upgrading home office
- Annual allowance for education and professional development assistance
- $75 USD/month digital reimbursement
- Access to the BetterUp platform for coaching, personal, and professional growth

## #BI-REMOTE

Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.

We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.

We do discriminate against hackers who try to exploit businesses of all sizes.

Accommodations:

If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com. Please note that non-accommodation requests to this inbox will not receive a response.

Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our [Candidate Privacy Notice](https://trust.huntress.com/?itemUid=47f0a941-b86f-4864-a0d0-a224a34cfd57&source=click) for more details on our practices and your data privacy rights.

#BI-Remote

## About Huntress

## Company Overview
- **One-liner**: Huntress provides a fully managed cybersecurity platform that protects small and medium-sized businesses from hackers via threat detection, endpoint security, and identity protection.
- **Entity Type**: Private (Series D)
- **Headquarters**: Fulton, Maryland, USA (fully remote company)
- **Founded**: 2015
- **Founders**: Kyle Hanslovan, John Ferrell, and Chris Bisnett (former NSA cyber operators)

## Core Business
- **Primary industry**: Cybersecurity (Managed Detection and Response, Endpoint Security, Identity Threat Detection)
- **Target customers**: B2B — primarily small and medium businesses (SMBs) and the managed service providers (MSPs) that support them. Also serves mid-market enterprises.
- **Mission**: To break down the barriers to enterprise-level security and empower the businesses that the big names overlook.

## Products & Services
- **Huntress Managed EDR**: Endpoint detection and response that monitors, hunts, and responds to threats across endpoints.
- **Huntress Managed ITDR** (Identity Threat Detection and Response): Monitors and protects Microsoft 365 identities and environments from account takeover and identity-based attacks.
- **Huntress Managed SIEM**: A fully managed security information and event management service that ingests and correlates log data for threat detection.
- **Huntress Security Awareness Training**: Phishing simulations and security training to reduce human risk.
- **Huntress Security Platform**: The unified platform that integrates all of the above, providing a single pane of glass for partners.

## Market Standing
- **Valuation**: Not publicly disclosed (latest round was $150M Series D in 2024).
- **Key Metric**: $100M+ ARR (achieved in 2024).
- **Total Funding**: Over $228M (Series A: $18M in 2022, Series C: $60M in 2023, Series D: $150M in 2024).
- **Notable Investors/Partners**: Not named directly in available data, but notable partnerships include Microsoft (Verified SMB Solution), Forte Racing, and the CISA Joint Cyber Defense Collaborative (JCDC).
- **Growth Signals**: 
  - Protects 4M+ endpoints and 8M+ identities worldwide.
  - Named to Inc. 5000 Fastest Growing Private Companies list.
  - Won Inc. Best Places to Work award (2024).
  - Named to Forbes America’s Best Startup Employers list (2025).
  - Achieved CMMC compliance and authorized as a CVE Numbering Authority.
  - Included in Verizon 2025 DBIR Report.
  - 630 total employees and growing.

## Competitive Advantages
- **One Team advantage**: Technology and SOC (Security Operations Center) are inseparable — the platform is built for and operated by the same team, ensuring detection and response are tightly coupled.
- **Founding team pedigree**: Founded by former NSA cyber operators, giving deep domain expertise in adversary tactics.
- **SMB focus**: Specifically targets the underserved SMB market with enterprise-grade security at an affordable SaaS price.
- **Fully managed**: Unlike many tools that require in-house security teams, Huntress provides a complete managed service, making it accessible to underresourced IT teams.
- **Adversary-informed defense**: Uses real-world threat intelligence and continuous hunting to stay ahead of attackers.

## Strategic Focus
- **Current priorities**: Scaling the platform to protect more SMBs, expanding the managed SIEM offering, deepening identity protection, and maintaining leadership in the MSP channel.
- **Growth direction**: International expansion (currently hiring in US, Canada, UK, Ireland, and Australia), continued product innovation, and strengthening partnerships with Microsoft and CISA.
- **Public commitment**: Signed the CISA Secure By Design pledge, indicating a focus on security-by-design and transparency.

## Why Work Here
- **100% Remote**: Huntress has been fully remote from day one, with a global team across US, Canada, UK, Ireland, and Australia. They provide tools, systems, and processes to succeed outside a corporate office.
- **Culture**: Values-driven with a focus on being a “force for good.” Core values are Own It, Elevate It, and Send It — emphasizing accountability, mutual support, and bold action.
- **Benefits**:
  - 5% 401k contribution (even if you don’t contribute).
  - Stock options for all full-time teammates.
  - 12 weeks paid parental leave.
  - Monthly digital reimbursement for internet/phone.
  - Starter home office reimbursement.
  - Medical, dental, vision, life, disability, and pet insurance.
  - Education assistance (LifeLabs, BetterUp coaching, hands-on training).
  - Generous PTO, sick time, bereavement leave, and floating holidays.
- **Growth opportunities**: Committed to teammate development with training, coaching, and education assistance programs.
- **Awards**: Inc. Best Places to Work, Built In Best Remote Places to Work, Forbes America’s Best Startup Employers.
- **Team size**: 630 employees and growing.

## Sources
1. [huntress.com](https://www.huntress.com/)
2. [huntress.com/company/careers](https://www.huntress.com/company/careers)
3. [huntress.com/company/our-story](https://www.huntress.com/company/our-story)
4. [job-boards.greenhouse.io/huntress](https://job-boards.greenhouse.io/huntress)
5. [builtin.com/company/huntress](https://builtin.com/company/huntress)

## Other roles at Huntress

- [Manager, Security Operations Center](https://feeny.ai/job/manager-security-operations-center-huntress-united-states-of-t40xxanr0ycr) — United States of, United States
- [Director, Revenue Readiness](https://feeny.ai/job/director-revenue-readiness-huntress-united-states-of-v4tczs5h8dp8) — United States of, United States
- [Senior IT Automation Engineer](https://feeny.ai/job/senior-it-automation-engineer-huntress-united-states-of-jw98en6f3bzg) — United States of, United States
- [Principal macOS Security Researcher](https://feeny.ai/job/principal-macos-security-researcher-huntress-united-states-of-kpypbbvpt2wm) — United States of, United States
- [Senior Phishing Tradecraft Researcher](https://feeny.ai/job/senior-phishing-tradecraft-researcher-huntress-united-states-of-ky2tfed2sxpf) — United States of, United States
- [Community Lead](https://feeny.ai/job/community-lead-huntress-australia-9t6y4fxtv4rn) — Australia
- [Staff Software Engineer - SOC Platform (Ruby/Rails)](https://feeny.ai/job/staff-software-engineer-soc-platform-ruby-rails-huntress-united-states-of-tkqfe4kg6a2f) — United States of, United States
- [Principal Software Engineer - Agentic SOC](https://feeny.ai/job/principal-software-engineer-agentic-soc-huntress-united-states-of-vnfdqpzwsrjk) — United States of, United States
- [Staff Product Manager, Core Platform & UX](https://feeny.ai/job/staff-product-manager-core-platform-ux-huntress-united-states-of-fdqht7pcbzj8) — United States of, United States
- [Equity Administrator](https://feeny.ai/job/equity-administrator-huntress-united-states-of-t02gd0ct8c3c) — United States of, United States