Do you want to help make the world safe from cyber attack?
At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats.
Role
We are building a world class and uniquely targeted team to drive research through data science and security expertise. The ideal candidate will use their strong management skills and understanding of operational enterprise security to guide the work necessary to develop novel, durable, and effective threat detection. You will be able to look back a year from now and say two things with pride: first, “I helped to build that” and second, “We are generating insights that no one else in the world has achieved.”
Opportunity
-
Manage a team of security researchers and detection engineers responsible for investigating, creating, and maintaining detection capabilities, and developing associated software engineering tools
-
Collaborate closely with the rest of the Corelight Labs leadership team to devise, pursue & meet project goals and deadlines
-
Collaborate closely with the Corelight Products and Engineering teams to coordinate cross-team projects
Qualifications
-
BS in Computer Science or Engineering, or equivalent experience
-
2+ years of experience managing technical teams performing duties in the areas of security research, incident response, and/or DevOps concepts (e.g. sprint planning, delivery tracking)
-
5+ years of hands-on experience in at least one technical field of information security; security research, and detection engineering are preferred
-
Working knowledge of detection engineering, incident response, and threat hunting; experience with Zeek, Suricata, YARA, one or more SIEMs are strongly preferred
-
Working knowledge of software engineering practices; experience with Jira, git, and GitLab CICD are strongly preferred
-
Working knowledge of networking concepts and network protocols such as TCP/IP, HTTP, TLS, DNS, Kerberos, SMB
-
Working knowledge of programming in at least two languages
Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world. At Corelight, we are proud of our diversity of background and thought, and we’re united by our strong shared culture and values.
We are looking forward to meeting you. Check us out at www.corelight.com
Notice of Pay Transparency:
The compensation for this position may vary depending on factors such as your location, skills and experience. Depending on the nature and seniority of the role, a percentage of compensation may come in the form of a commission-based or discretionary bonus. Equity and additional benefits will also be awarded.
Compensation Range
$193,000—$248,000 USD
Similar Jobs
What We Do
From the Acropolis to the edge of space, defenders have sought the high ground in order to see farther and turn back attacks. Corelight delivers a commanding view of your network so you can outsmart and outlast adversaries. We capture, interpret, and connect the data that means everything to defenders.
