About your new role:
This role sets the technical direction for the AI-powered layer that sits on top of our alert engine and dramatically reduces mean time to triage. You'll define how LLM reasoning and graph context combine to group alerts into incidents, infer likely narratives, and brief analysts, and you'll make sure that architecture holds up as it's extended across the teams that feed it: alerting and detection, graph and topology, and the analyst-facing investigation experience.

Our edge is correlation: taking diverse sources such as security tooling, monitoring telemetry, syslog, OpenTelemetry, and L2-L4 network protocols, deriving usable network and system topologies and the dependencies between them, and giving that context to LLMs to reason over for correctness, troubleshooting, remediation, and investigation. You'll be the person other engineers come to when a correlation, reasoning, or workflow-durability problem doesn't have an obvious answer yet.

Key Responsibilities:
Facilitate the architecture decisions that shape how alert correlation, LLM reasoning,



and graph context combine across the investigation and triage pipeline, decisions that other teams (alerting, graph/topology, analyst UX) build on.
Own the design for how incidents get grouped, how confidence scores and priority tiers get assigned, and how the AI infers and presents likely incident narratives to SOC/NOC analysts, holding that design to a bar that measurably drives down mean time to triage.
Set the technical standard for the collaborative investigation experience: comments, side-bar conversations, shared troubleshooting, and AI-initiated ticketing as a post-triage action.
Define the durable workflow architecture, proto-first contracts, deterministic execution, and versioning discipline that this system and adjacent teams' workflows are built on.
Step into other teams or projects when a triage-latency, narrative-accuracy, or workflow-durability problem is stuck, contributing hands-on

📌 Staff Software Engineer, AI Investigation (Chile)
🏢 CommandLink
📍 Chile