Professional Services Engineer - Remote

Overview

Do you want to help make the world safe from cyber attack? At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats.

In Short

• Help customers improve their cybersecurity posture, with a particular focus on process optimization.
• Help investigate incidents.
• Educate on Zeek Log use, including as it relates to Corelight Suricata alerts.
• Design and implement technical solutions with ecosystem partners (packet brokers, asset managers, SOAR systems, etc.).
• Collaboratively work with adjacent Customer Success teams to drive predicable outcomes for projects and customers.
• Implement queries and dashboards in SIEMs - Splunk, Elastic, Humio, etc.
• Influence customers and Corelight teams and be seen as a technical expert.
• Collaborate with product management on product features/integrations.
• Work with back-end tools like Kafka and Logstash.

Requirements

• 5+ years experience in a Professional Services Engineer role.
• Bachelor's degree in a technical field (or equivalent experience).
• Strong background in cybersecurity.
• Solid verbal and written communication skills.
• Enjoy designing novel solutions.
• Understand how to scope and describe a services engagement.
• Robust problem-solving skills, the ability to learn from doing, personal accountability, and a positive and professional attitude.
• Zeek log experience and log analysis skills are required.
• Network administration, firewall configuration, and strong knowledge of TCP/IP.
• Windows/MacOS/Linux/Unix administration experience.
• Scripting in (some of) Zeek, Bash, Python, Perl, Powershell, etc.
• SIEM experience (Splunk required, others a bonus).
• Travel up to 50% post-COVID; some travel now, depending on customer comfort levels.
• Prior startup experience preferred.

Benefits

• Fastest growing network detection and response platform in the industry.
• Trust from leading enterprises, government, and research institutions worldwide.
• AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions.
• Collaborative, inclusive, and growth-oriented culture.
• Diversity of background and thought.
• Geographically distributed yet connected employee base.