Professional Services Engineer - TS/SCI

Do you want to help make the world safe from cyber attack?

At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats.

We are seeking a very talented, resourceful, and collaborative person to help us grow our Professional Services team.  This person will be assisting customers to deploy and use our cybersecurity products. This is a great opportunity for someone who is passionate and committed and wants to be able to look back a year from now and say with pride, “I helped build that from the ground up.”  The role covers quite varied ground depending on the engagement.

Opportunity:

• Help customers improve their cybersecurity posture, with a particular focus on process optimization
• Help investigate incidents
• Educate on Zeek Log use, including as it relates to Corelight Suricata alerts
• Design and implement technical solutions with ecosystem partners (packet brokers, asset managers, SOAR systems, etc.)
• Implement queries and dashboards in SIEMs - Splunk, Elastic, Humio, etc.
• Influence customers and Corelight teams and be seen as a technical expert
• Collaborate with product management on product features/integrations
• Work with back-end tools like Kafka and Logstash

Qualifications:

• 5+ years experience in a security professional services role
• MUST CARRY AN ACTIVE TS/SCI SECURITY CLEARANCE
• MUST BE LOCATED IN DMV AREA
• Bachelor’s degree in a technical field (or equivalent experience)
• Strong background in cybersecurity
• Solid verbal and written communication skills
• Enjoy designing novel solutions
• Understand how to scope and describe a services engagement
• Robust problem-solving skills, the ability to learn from doing, personal accountability, and a positive and professional attitude
• Zeek log experience and log analysis skills are required
• Network administration, firewall configuration, and strong knowledge of TCP/IP
• Windows/MacOS/Linux/Unix administration experience
• Scripting in (some of) Zeek, Bash, Python, Perl, Powershell, etc.
• SIEM experience (Splunk required, others a bonus)
• Travel up to 30% post-COVID; some travel now, depending on customer comfort levels
• Prior startup experience preferred 

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture.

Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world.  At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. 

We are looking forward to meeting you.  Check us out at www.corelight.com