Professional Services Engineer
Core
Prepare and validate equipment configurations, develop anomaly detection content, and assess Corelight infrastructure health for clients.
Role type
Professional Services Engineer (Cybersecurity)
Builds
Corelight network detection and response platform
Domain
Cybersecurity / Network Defense
Deliverable
client delivery
Required skills
SOC environment experience, Zeek/Corelight experience, SIEM (Splunk), TCP/IP, firewall configuration, Windows/MacOS/Linux/Unix, scripting (Zeek/Bash/Python/Perl/Powershell), incident investigation, process optimization
Preferred skills
Startup experience, Security/Networking certifications, Kafka/Logstash, MISP/Intel data import
Technologies
Corelight, Zeek, Suricata, Splunk, Elastic, Humio, Kafka, Logstash, MISP, Intel
Responsibilities
Prepare and validate equipment configurations for new installations, develop content for anomaly and hunt detections, assess Corelight infrastructure health, help customers improve cybersecurity posture, investigate incidents, educate on Zeek Log use, design and implement technical solutions with ecosystem partners, implement queries and dashboards in SIEMs, conduct network-related testing, perform validation testing, develop playbooks for SOC/IR workflow automation, document data import processes, provide technical input to root cause analysis, lead project status meetings.
Seniority
Mid-Senior, hands-on IC
