Apply on Employer Site

Corelight · 19 hours ago

Professional Services Engineer - TS/SCI - Full Poly

Washington, DC

Full-time

Onsite

Senior Level, Lead/Staff

5+ years exp

Corelight is a leading network detection and response platform focused on cybersecurity. The role of Staff Resident PSE involves preparing and validating equipment configurations, developing detection content, and assessing the health of Corelight infrastructure at client locations.

AnalyticsCyber SecurityNetwork SecuritySecuritySoftware

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Help customers improve their cybersecurity posture, with a particular focus on process optimization

Help investigate incidents

Educate on Zeek Log use, including as it relates to Corelight Suricata alerts

Design and implement technical solutions with ecosystem partners (packet brokers, asset managers, SOAR systems, etc.)

Implement queries and dashboards in SIEMs - Splunk, Elastic, Humio, etc

Influence customers and Corelight teams and be seen as a technical expert

Conduct network-related testing to ensure Corelight products operate correctly

Perform validation testing of Corelight products

Provide ongoing, informal, knowledge transfer

Collaborate with product management on product features/integrations

Work with back-end tools like Kafka and Logstash

Documenting the process for importing of data (MISP, Intel, etc)

Developing custom content for threat hunting use cases as defined by the customer

Developing playbooks for SOC/IR workflow automation based on Corelight data

Ad-hoc (as requested) written summary reports on equipment and security problems

Technical input to major service outage root cause analysis and corrective action reports

Leading project status meetings and wrap-up/post-mortem meetings

Some on-site work required

Qualification

Cybersecurity experienceSIEM experienceNetwork administrationZeek/Corelight experienceScripting languagesSecurity certificationsBriefing skillsSOCOperating systems expertise