Professional Services Engineer

We are currently seeking a Professional Services Engineer, reporting to the Sr. Manager of Professional Services. In this role, the main focus is to prepare and validate equipment configurations for new installations, develop content for anomaly and hunt detections, assess the overall health of the Corelight infrastructure at the client’s location. You’re the ideal candidate if you are a strategic thinker with a strong networking and security background, work well independently, and are results-driven.

Key Responsibilities:

Help customers improve their cybersecurity posture, with a particular focus on process

optimization

Help investigate incidents

Educate on Zeek Log use, including as it relates to Corelight Suricata alerts

Design and implement technical solutions with ecosystem partners (packet brokers,

asset managers, SOAR systems, etc.)

Implement queries and dashboards in SIEMs - Splunk, Elastic, Humio, etc.

Influence customers and Corelight teams and be seen as a technical expert

Conduct network-related testing to ensure Corelight products operate correctly

Perform validation testing of Corelight products

Provide ongoing, informal, knowledge transfer

Collaborate with product management on product features/integrations

Work with back-end tools like Kafka and Logstash

Documenting the process for importing of data (MISP, Intel, etc)

Developing custom content for threat hunting use cases as defined by the customer

Developing playbooks for SOC/IR workflow automation based on Corelight data

Ad-hoc (as requested) written summary reports on equipment and security problems

Technical input to major service outage root cause analysis and corrective action reports

Leading project status meetings and wrap-up/post-mortem meetings

Some on-site work required

Minimum Qualifications:

US Citizen

5+ years of experience in cybersecurity (Prior startup experience preferred)

Extensive experience with a SOC environment

Zeek/Corelight experience is a plus

Security and/or Networking related certification(s)

Demonstrated expertise in Windows/MacOS/Linux/Unix operating systems, IDS/IPS,

Network administration, firewall configuration, and strong knowledge of TCP/IP

SIEM experience (Splunk required, others a bonus)

Scripting in (some of) Zeek, Bash, Python, Perl, Powershell, etc.

Strong briefing skills; experience interacting with SES/general officer-level management

Notice of Pay Transparency:

The compensation for this position may vary depending on factors such as your location, skills and experience. Depending on the nature and seniority of the role, a percentage of compensation may come in the form of a commission-based or discretionary bonus. Equity and additional benefits will also be awarded.

Compensation Range

$124,000—$160,000 USD