Professional Services Engineer
Core
Prepare and validate equipment configurations, develop threat detection content, and assess Corelight infrastructure health for clients.
Role type
Professional Services Engineer (Cybersecurity)
Builds
Anomaly and hunt detection content, SIEM queries, dashboards, and SOC/IR automation playbooks.
Domain
Cybersecurity, Network Security, SIEM
Required skills
Cybersecurity, SOC environment operations, Zeek/Corelight, SIEM (Splunk), Network administration, Firewall configuration, TCP/IP, Scripting (Zeek, Bash, Python, Perl, Powershell), Linux/Windows/MacOS/Unix, Incident investigation, Process optimization.
Preferred skills
Startup experience, Security/Networking certifications, Additional SIEM experience (Elastic, Humio), Zeek/Corelight specific experience.
Technologies
Corelight, Zeek, Suricata, Splunk, Elastic, Humio, Kafka, Logstash, MISP, SOAR, Packet Brokers.
Responsibilities
Investigate security incidents, Design and implement technical solutions with ecosystem partners, Conduct network-related testing, Collaborate with product management on integrations, Lead project status and post-mortem meetings, Provide technical input to root cause analysis.
Seniority
Mid-Senior, hands-on IC