Do you want to help make the world safe from cyber attack? 

At Corelight, we believe that the best approach to cybersecurity risk starts with the network.  Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse.  Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use,  Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights.   Our customers use these insights to speed incident response and proactively hunt for threats. 

We are seeking a Director of Sales to lead, coach, and develop a team of Account Executives in the Northeast territory. This is a critical leadership role responsible for driving revenue growth, ensuring sales excellence, and fostering a culture of accountability and high performance. 

Responsibilities

• Lead, mentor, and develop a high-performing team of Strategic & Enterprise Account Executives, fostering professional growth and career development.
• Own and drive revenue growth within the assigned region, ensuring targets are met or exceeded.
• Partner with RVPs and executive leadership to define and execute area sales strategy.
• Coach reps on effective pipeline development, deal strategy, forecasting accuracy, and execution against Corelight’s sales methodology.
• Ensure consistent adoption of sales processes, playbooks, and tools.
• Collaborate with cross-functional partners (SEs, Marketing, Channel, Product) to drive joint success in the region.
• Track performance metrics, provide regular reporting, and ensure data-driven decision-making.
• Represent Corelight externally with customers, partners, and industry events as a senior leader.
• Champion Corelight’s culture of low ego results, tireless service and applied curiosity.
• Travel required.

Qualifications

• 5+ years managing a sales team
• BA/BS technical degree or equivalent
• Proven ability to lead, coach, and develop sales teams that consistently achieve and exceed targets.
• Strong understanding of complex, multi-stakeholder enterprise sales cycles.
• Excellent communication and executive presence with the ability to influence internally and externally.
• Data-driven decision-making and experience implementing structured sales methodologies.
• Ability to thrive in a fast-paced, high-growth, distributed & remote environment.

Prior experience in cybersecurity is a big plus, it's not a prerequisite. We value diverse backgrounds and a passion for learning.

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry.  Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide.   We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks.    Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world.  At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. By embracing a wide range of experiences, backgrounds, neurodiversity, talents, and approaches to problem-solving, we aim to create a workplace where everyone can thrive and contribute their best.

We are looking forward to meeting you.  Check us out at www.corelight.com

 

Do you want to help make the world safe from cyber attack? 

At Corelight, we believe that the best approach to cybersecurity risk starts with the network.  Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse.  Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use,  Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights.   Our customers use these insights to speed incident response and proactively hunt for threats. 

We are seeking a Director of Sales (AVP) to lead, coach, and develop a team of Account Executives in the Southern California territory. This is a critical leadership role responsible for driving revenue growth, ensuring sales excellence, and fostering a culture of accountability and high performance. 

Responsibilities

• Lead, mentor, and develop a high-performing team of Strategic & Enterprise Account Executives, fostering professional growth and career development.
  
  
• Own and drive revenue growth within the assigned region, ensuring targets are met or exceeded.
  
  
• Partner with RVPs and executive leadership to define and execute area sales strategy.
  
  
• Coach reps on effective pipeline development, deal strategy, forecasting accuracy, and execution against Corelight’s sales methodology.
  
  
• Ensure consistent adoption of sales processes, playbooks, and tools.
  
  
• Collaborate with cross-functional partners (SEs, Marketing, Channel, Product) to drive joint success in the region.
  
  
• Track performance metrics, provide regular reporting, and ensure data-driven decision-making.
  
  
• Represent Corelight externally with customers, partners, and industry events as a senior leader.
  
  
• Champion Corelight’s culture of low ego results, tireless service and applied curiosity.
  
  
• Travel required.
  
  

Qualifications

• 5+ years managing a sales team
  
  
• BA/BS technical degree or equivalent
  
  
• Proven ability to lead, coach, and develop sales teams that consistently achieve and exceed targets.
  
  
• Strong understanding of complex, multi-stakeholder enterprise sales cycles.
  
  
• Excellent communication and executive presence with the ability to influence internally and externally.
  
  
• Data-driven decision-making and experience implementing structured sales methodologies.
  
  
• Ability to thrive in a fast-paced, high-growth, distributed & remote environment.
  
  
• At Corelight, we're dedicated to securing the digital landscape. While prior experience in cybersecurity is a big plus, it's not a prerequisite. We value diverse backgrounds and a passion for learning.

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry.  Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide.   We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks.    Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world.  At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. By embracing a wide range of experiences, backgrounds, neurodiversity, talents, and approaches to problem-solving, we aim to create a workplace where everyone can thrive and contribute their best.

We are looking forward to meeting you.  Check us out at www.corelight.com

Senior Salesforce Business Analyst

Do you want to help make the world safe from cyber attack?

At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats.

As a Senior Salesforce Business Analyst, you will be the architect of our Go-to-Market (GTM) technical engine, ensuring that our internal systems are as robust and insightful as our network security solutions. By bridging the gap between complex business needs and technical execution, you will empower our Sales Operations team with the tools, AI-driven workflows, and data integrity they need to focus on what they do best: protecting our customers from cyber threats. You will serve as the technical North Star for our Salesforce ecosystem, driving scalability and innovation in an AI-first future.

Specific Responsibilities:

• System Architecture & Strategy: Act as the primary technical partner for the GTM strategy, ensuring all Salesforce configurations and integrated applications are scalable, secure, and optimized.

• Revenue Operations Mastery: Own the technical lifecycle of Salesforce Revenue Cloud and CPQ, including the design and maintenance of complex Product/Pricing Rules and the Quote-to-Order process.

• AI Implementation: Lead the integration of Agentforce to automate business reasoning, enhancing user productivity through cutting-edge AI workflows.

• Agile Lifecycle Management: Manage the full Salesforce Sprint process, from gathering technical requirements and refining Jira user stories to final deployment.

• Security & Governance: Oversee the Salesforce security architecture, including the management of Roles, Profiles, Sharing Sets, and Permission Set Groups to ensure data integrity and compliance.

• Process Documentation: Standardize and maintain comprehensive documentation for all technical customizations and business processes to ensure organizational transparency.

• Cross-Functional Collaboration: Serve on the Tech Stack Steering Committee, aligning system functionality with long-term IT leadership project plans.

Knowledge/Skills/Abilities needed to be successful:

• An AI-First Mentality: You naturally look for ways to leverage Agentforce and automation to reduce friction and improve business reasoning.

• Analytical Rigor: You have a keen eye for auditing technical debt and identifying the system-wide implications of configuration changes.

• Technical Communication: You can translate complex logic into professional documentation that is accessible to both end-users and technical peers.

• High-Velocity Collaboration: You thrive in a supportive, fast-paced Sales Operations environment where continuous education and professional growth are prioritized.

Qualifications/Requirements:

• Experience: 3–5+ years of Salesforce business process design and configuration experience within a B2B software environment.

• CPQ Expertise: Advanced technical competency in Salesforce Revenue Cloud and Salesforce CPQ management.

• Automation Proficiency: Strong competency with Salesforce Flow Builder; a foundational understanding of Apex triggers is required.

• Certification: Mandatory Salesforce Administrator Certification.

• Education: 4-year college degree (Technical, Engineering, or Business disciplines preferred).

• Tooling: Experience managing technical requirements and sprints within Jira.

• Bonus Points: Advanced Administrator, CPQ Specialist, or Platform Developer I certifications; experience with Lightning Web Components (LWC), SOQL, and SQL.

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world. At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. By embracing a wide range of experiences, backgrounds, neurodiversity, talents, and approaches to problem-solving, we aim to create a workplace where everyone can thrive and contribute their best.

We are looking forward to meeting you. Check us out at www.corelight.com

Do you want to help make the world safe from cyber attack?

At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats.

As a Senior IT Engineer at Corelight, you are more than a system administrator; you are an architect of the secure environment that allows our engineers and threat hunters to disrupt cyber attacks. Reporting to the Director of Business Technology and Strategy, you will play a pivotal role in scaling our internal infrastructure by securing critical enclaves, pioneering the deployment of Generative AI solutions, and ensuring our global, distributed team has the high-performance tools they need to stay ahead of the adversary.

Specific Responsibilities:

• Orchestrate Compliance Enclaves: Take full ownership of IT-provided enclaves, ensuring rigorous alignment with strict compliance programs and data privacy standards.
• Enhance Security Controls: Engineer and deploy advanced detective controls to fortify security monitoring across all Corelight systems and services.
• Pioneer GenAI Strategy: Lead the implementation, administration, and protection of Generative AI solutions (e.g., OpenAI, Anthropic, Google) to drive internal innovation.
• Optimize SaaS Ecosystems: Strategically manage and support Corelight’s core SaaS services, ensuring seamless integration and high availability for all business functions.
• Tiered Technical Support: Provide expert-level support across the full spectrum of IT-managed technologies, enabling employees to work efficiently and effectively.
• Data Stewardship: Administer and audit access to critical data stores, maintaining the integrity and security of Corelight’s most sensitive information.

Being successful on this team requires:

• A Security-First Mindset: The ability to balance robust security and compliance requirements with a seamless user experience.
• Technical Agility: A proactive drive to explore and master emerging technologies, particularly in the realms of AI and data lakehouse architectures.
• Collaborative Problem Solving: Strong communication skills to partner with various business functions and translate complex needs into technical solutions.
• Precision and Accountability: High attention to detail when auditing data access and managing mission-critical infrastructure.

Qualifications/Requirements:

• Years of Experience: 5-8+ years of progressive experience in IT service management, system administration, or infrastructure engineering.
• Education: Bachelor’s Degree in Computer Science, Information Technology, or a related field (or equivalent practical experience).
• Enclave Management: Proven track record managing secure access enclaves through endpoint management and/or Virtual Desktop Infrastructure (VDI).
• Compliance Literacy: Demonstrated experience supporting certifications or attestations under frameworks such as SOC2, ISO27001, and GDPR.
• Tooling Expertise: Expert-level administration skills in common SaaS stacks, including Google Workspace, Microsoft 365, Atlassian, and Slack.
• Framework Knowledge: Clear familiarity with IT service management frameworks like ITIL.
• Preferred Background: Recent experience administering GenAI deployments and/or a background in managing data lakehouse implementations.

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks.

Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world. At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. By embracing a wide range of experiences, backgrounds, neurodiversity, talents, and approaches to problem-solving, we aim to create a workplace where everyone can thrive and contribute their best.

We are looking forward to meeting you. Check us out at www.corelight.com

Do you want to help make the world safe from cyber attacks?

At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to accelerate incident response and proactively hunt for threats.

As a Senior UI Engineer for the Fleet Manager product, you will play a crucial role in leading the development and architecture of the frontend systems that enable clients to manage a fleet of sensors at scale and act on complex security data. This is a role for a high-agency engineer who doesn't just build components, but owns the user experience from end-to-end. You will bridge the gap between sophisticated data-heavy APIs and intuitive user interfaces, ensuring our customers can secure their enterprise with speed and precision.

Specific Responsibilities:

• Architect & Develop Modern UI: Design, develop, and maintain modern, scalable web applications using React + Typescript and related frontend technologies to drive the Investigator product forward.
• Contribute to the Frontend Lifecycle: Help with the implementation of complex user flows by translating wireframes and UX designs into high-quality, accessible, and performant UI components.
• Data-Intensive Integration: Work with the integration and consumption of GraphQL and REST APIs to power interactive, data-heavy visual interfaces capable of handling massive network datasets.
• Uphold Technical Excellence: Maintain and elevate code quality through rigorous testing, detailed documentation, and sophisticated code reviews.
• Autonomous Agile Delivery: Navigate agile development workflows—including sprint planning, retrospectives, and daily standups—with high independence and a focus on delivery.

Being successful on this team requires the ability to:

• Engineering Craft: Take pride in writing clear, well-structured, and maintainable code, and care deeply about long-term quality over short-term fixes.

• Systems Thinking: Think beyond individual components, understanding how state, data, and UI architecture work together across a large application.

• Product & User Empathy: Care about building interfaces that help users understand complex data quickly, and they make thoughtful tradeoffs in service of usability.

• Ownership & Accountability: Take responsibility for outcomes, follow work through from design to production, and continuously improve what they ship.

• Collaboration & Communication: Communicate clearly, welcome feedback, and work effectively across engineering, design, and product to solve hard problems together.

Qualifications/Requirements:

• Professional Experience: 3 to 7 years of professional software development experience, with a proven track record in Senior level roles.
• Frontend Mastery: Advanced in working with JavaScript/Typescript, Design LIbrary Components,  and React.
• Data & API Proficiency: Experience building and consuming GraphQL and REST APIs to support rich, data-heavy visual user interfaces.
• Architectural Knowledge: Solid understanding of Relational databases to better partner with backend teams.
• UX Partnership: Significant experience working directly with UX Design Teams to refine and implement complex user flows.
• Agile Fluency: Experience adopting and using Agile development methodologies within high-performing engineering teams.
• Communication: Excellent communication skills with the ability to collaborate across multiple teams and influence technical outcomes.
• Education: Bachelor's degree in Computer Science or related fields, or equivalent professional experience.

Why Join Us?

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world. At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. By embracing a wide range of experiences, backgrounds, neurodiversity, talents, and approaches to problem-solving, we aim to create a workplace where everyone can thrive and contribute their best.

We are looking forward to meeting you. Check us out at www.corelight.com

Do you want to help make the world safe from cyber attacks? 

At Corelight, we believe that the best approach to cybersecurity risk starts with the network.  Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse.  Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use,  Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights.   Our customers use these insights to speed incident response and proactively hunt for threats.  

As an Inside Sales Representative at Corelight, you’ll be at the front lines of our revenue engine. You’ll partner closely with field sales and marketing to qualify leads, generate pipeline, and work closely with their AEs. These tasks will include heavy outbound calls and emails, and social connections to deliver Corelight's Value Propositions — all while sharpening your skills to grow into a field role or other customer-facing position. We’re looking for hungry, coachable, and competitive professionals who thrive in fast-paced, goal-oriented environments.

What you will do after proper onboarding from a world-class Enablement team:

• Within Corelight’s Ideal Customer Profile (ICP) of large enterprise accounts, proactively engage prospects via cold calling, email outreach, and social channels. 
• Qualify inbound MQL leads and convert them into high-quality meetings by leveraging a compelling conversational talk track that effectively communicates Corelight’s value proposition, while demonstrating genuine curiosity and strong discovery skills.
• Drive pipeline progression by setting strategic meetings and partnering with Account Executives, leveraging the Pain-Power-Fit-Timeline Sales Methodology to qualify and prioritize opportunities.  
• Maintain accurate and up-to-date records in selling tools such as Salesforce, Outreach, LinkedIn SalesNav etc.

Attributes we look for:

Hungry

• You are motivated by goals, growth, and grit. You don’t wait for leads — you create them.
• You want to break into tech sales or accelerate your career at a company where effort is noticed and rewarded.
• You are resilient & persistent.

Coachable

• You welcome feedback and actively seek ways to improve.
• Genuinely curious, have great listening skills, and are a problem solver.
• You’re agile and embrace change as part of growth.

Competitive

• You love to win — whether it’s hitting quota, leading the leaderboard, or challenging yourself daily.
• Detailed & analytical as well as confident & creative.
• Possess a growth mindset and look for continuous improvement.

Preferred Qualifications 

• 1–2 years of SDR or Inside Sales experience in a B2B SaaS or cybersecurity company (but we’ll train the right rookie if they have basic sales methodology training).
• Large account prospecting (Fortune 1000 accounts)
• Strong written and verbal communication skills.
• High emotional intelligence and professional persistence.
• Experience with Digital Tools (SalesForce, Sales Navigator, Outreach, etc.)
• Four-year degree from an accredited university, or equivalent relevant experience

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry.  Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide.   We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks.    Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world.   At Corelight, we are proud of our diversity of background and thought, and we’re united by our strong shared culture and values.

We are looking forward to meeting you.  Check us out at www.corelight.com

Notice of Pay Transparency:
The compensation for this position may vary depending on factors such as your location, skills and experience. Depending on the nature and seniority of the role, a percentage of compensation may come in the form of a commission-based or discretionary bonus. Equity and additional benefits will also be awarded.

Towards the end of our interview process is an in-person interview.

Do you want to help make the world safe from cyber attack? 

At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats. 

Job Summary:
We are seeking a Platform Architect to contribute to the strategic development of Corelight’s hardware & software platforms and enhance our Network Detection and Response (NDR) operational capabilities both on-premise and in the cloud. If you are a passionate, curious self-starter interested in network security and are looking to have a strategic impact on core technologies used to defend networks and inform critical responders, then this role is for you! 

Key Responsibilities:

• Provide technical expertise in planning, development, and execution of edge-level network monitoring hardware and appliances.
• Produce design documentation and guide implement functionality by engaging in code-review and architectural analysis exercises.
• Coordinate with Product, Engineering, Labs,  Operations and other stakeholders to understand customer and technical requirements and formulate technical strategies to expand the Corelight products to meet those needs.
• Collaborate with other architects to develop comprehensive product, data, networking and application architectures for integrated solutions across the Corelight portfolio.
• This role will report to the Chief Architect

Minimum Qualifications:

• Experience with successful product delivery
• Effective communicator and ability to collaborate across stakeholders
• Possess strong organizational and problem solving skills
• Hands-on experience with SmartNICs and FPGA-based network accelerators.
• Expertise with Intel DPDK, DPUs, GPUs acceleration on network switches/routers
• Experience with P4 processors, compilers, programming languages and operations
• Hands-on experience with developing, running, orchestrating application containers on network switches
• In-depth understanding of the Linux IP stack and routing protocols.  Experience with Linux driver development, kernel module configuration, performance tuning, and debugging.
• Hands-on experience with designing large-scale data processing solutions using containerized applications; specific experience with Kubernetes environments is a plus.
• 10+ years of enterprise software design, development, and release experience
• 10+ years of development experience with two or more of the following languages: Go, Python, Rust, JVM languages (Java, Kotlin, Scala)
• Familiarity with zero-copy data transfer techniques to achieve line-rate performance. 
• Able to work up the stack into Kubernetes and microservices, seamlessly integrating into service-oriented architectures and scaling efficiently in cloud environments

Preferred Qualifications:

• 5+ years of experience designing and implementing scalable solutions in at least one of the three major public clouds: AWS, GCP, Azure
• Developing/Integrating NDR solutions on the Network Switches/Routers
• Experience with network service chaining architectures
• Experience with Kubernetes and Helm deployments
• Experience working in an Agile scrum team is a plus
• Practical experience in multiple public clouds is a plus
• Experience with Prometheus and Grafana is a plus
• Experience with Git for version control. Experience with Gitlab CI is a plus
• Experience with Zeek or Suricata is a plus

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture.

Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world.  At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. 

We are looking forward to meeting you.  Check us out at www.corelight.com

Escalation Engineer

Do you want to help make the world safe from cyber attack?

At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats.

As an Escalation Engineer, you are the critical bridge between our customers' most complex technical challenges and our innovative engineering solutions. You aren't just resolving support cases; you are ensuring that the world's most sensitive organizations have the visibility they need to disrupt attacks. By mastering everything from Linux internals to cloud networking, you serve as a technical champion who ensures Corelight's "evidence" remains the gold standard for defenders worldwide.

Specific Responsibilities:

• Drive Technical Resolution: Serve as the primary point of contact for complex customer escalations and Proof of Concepts (POCs), ensuring successful outcomes for mission-critical issues.
• Deep-Dive Troubleshooting: Conduct advanced root cause analysis (RCA) involving Linux internals, hardware performance, and intricate network topologies.
• Manage High-Stakes Cases: Orchestrate and drive multiple high-priority cases simultaneously, maintaining focus and urgency under pressure.
• Internal Advocacy: Act as a liaison between the field and HQ, translating customer requirements into structured, actionable feedback for Engineering and Product Management.
• Deliver Excellence: Provide regular, transparent status updates to stakeholders and customers, adhering strictly to defined SLAs while offering best-practice guidance for Corelight solutions.
• Network Optimization: Identify underlying issues and recommend architectural or configuration changes to customer networks to improve product reliability and performance.

Knowledge/Skills/Abilities needed to be successful:

• A Customer-First Mindset: A relentless drive to advocate for the customer and see problems through to a successful conclusion.
• Clear Communication: The ability to articulate complex technical concepts—both verbally and in writing—to audiences ranging from SOC analysts to executive leadership.
• Collaborative Resourcefulness: A proven ability to work cross-functionally and thrive in a fluid, high-growth environment.
• Operational Readiness: Flexibility to participate in a rotational on-call schedule (including nights/weekends) to support global, high-priority customer needs.

Qualifications/Requirements:

• Experience: 5+ years in a hands-on technical role focusing on post-sales support (troubleshooting, sysadmin, or network security).
• Technical Depth: Strong proficiency in UNIX/Linux administration, including performance monitoring, kernel-level tracing, and debugging system calls.
• Networking Expertise: Deep understanding of TCP/IP fundamentals, routing/switching, and common protocols (VLANs, NAT, VPNs).
• Cloud & Virtualization: Proven experience troubleshooting cloud networking (AWS, Azure, GCP) and virtualization platforms (ESXi, Hyper-V).
• Education: BS/BA or equivalent in a relevant field (CS, EE, MIS).
• Preferred Skills: Familiarity with Zeek scripting, Python, packet capture utilities (Wireshark/tcpdump), and expert-level protocol knowledge (SMB, HTTP, TLS/SSL). Security certifications (CISSP, GIAC) are a plus.

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world. At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. By embracing a wide range of experiences, backgrounds, neurodiversity, talents, and approaches to problem-solving, we aim to create a workplace where everyone can thrive and contribute their best.

We are looking forward to meeting you. Check us out at www.corelight.com

Do you want to help make the world safe from cyber attack?

At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats.

As a Lead Backend Engineer for our Fleet team, you will be a technical architect behind the systems that power our Open NDR Platform. You will bridge the gap between complex network data and seamless user experiences by overseeing the development of our centralized management platform. By leading high-impact projects and collaborating across functions, you will ensure that our platform provides defenders with the intuitive tools they need to disrupt attacks in real-time.

Specific Responsibilities:

• Drive End-to-End Architecture: Lead the technical design, implementation, and operation of a centralized Sensor management platform known as Fleet. Responsible for Sensor lifecycle management, configuration, and real-time communication. 
• Build High-Performance APIs: Design and develop REST and GraphQL APIs to power service to service communication, enable top-notch user experience, and manage configurations through various supported authentication models.
• Technical Leadership & Mentorship: Provide mentorship to other engineers through design guidance, rigorous code reviews, and the promotion of performant, maintainable coding standards.
• Security-First Engineering: Evaluate new projects and architectural changes for security implications, working closely with cross-functional teams to mitigate risks while balancing value and effort.
• Operational Excellence: Own the lifecycle of your features from design to production, implementing automated test suites, CI/CD pipelines, and proactive monitoring/alerting mechanisms.
• UX & Product Collaboration: Partner with UX design teams and Product Managers to refine epics and translate wireframes into backend requirements for complex user flows.
• Threat Intelligence Orchestration: Manage and distribute threat intelligence feeds (Zeek Intel, Suricata, Yara, etc.,)

Knowledge/Skills/Abilities needed to be successful:

• Core Values Alignment: You embody "low ego results," "tireless service," and "applied curiosity" in every interaction.
• Product & User Empathy: You care deeply about building backend systems that help users understand complex data quickly and make thoughtful tradeoffs in service of usability.
• Systems Thinking: You think beyond individual components, understanding how backend state, data, and API architecture work together across a large application.
• Decisive Problem Solver: You can weigh conflicting constraints and make rapid, high-impact decisions in a fast-paced, dynamic environment.
• Strategic & Technical Communication: You thrive in a collaborative environment, using your communication skills to influence product direction, align distributed teams, and influence technical outcomes.
• Engineering Craft: You take pride in writing clear, well-structured, and maintainable code, prioritizing long-term quality and code health.

Qualifications/Requirements:

• Professional Experience: 8+ years of professional software development experience, primarily on Linux or Unix-style platforms, with a track record in senior or lead roles.
• Technical Proficiency: Deep expertise in Golang including experience with multi-threaded applications in production.
• API Standards: Proven experience with formal API specifications such as OpenAPI.
• Database & Data Mastery: Proficiency with both Relational (SQL) and NoSQL.
• Education: Bachelor’s degree in Computer Science, Software Engineering, or a related field (or equivalent professional experience).
• Preferred Experience: Prior experience leading software teams, background in Enterprise Security/Network products, and familiarity with search/analytics tools like Elasticsearch or Splunk.

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world. At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. By embracing a wide range of experiences, backgrounds, neurodiversity, talents, and approaches to problem-solving, we aim to create a workplace where everyone can thrive and contribute their best.

We are looking forward to meeting you. Check us out at www.corelight.com

Do you want to help make the world safe from cyber attack?

At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats.

As a  Lead Cloud Infrastructure Engineer / Site Reliability Engineer (SRE), you will ensure the stability, performance, and security of our Federal region’s cloud platform. You’ll manage infrastructure and operations with a focus on availability, latency, performance optimization, monitoring, incident response, and capacity planning. This role requires maintaining a FedRAMP-compliant environment and working closely with teams to meet the highest standards of security and compliance.

We adopt an "everything as code" approach, leveraging automation and best practices to create an efficient, reliable, and scalable infrastructure. You will be instrumental in maintaining core infrastructure services that are robust, secure, and capable of processing high volumes of data seamlessly.

The successful candidate must be a U.S. citizen and may need to perform work that the U.S. government has specified can only be carried out by a U.S. citizen on U.S. soil.

Responsibilities

• Collaborate with software engineering teams to ensure the reliability, performance, and security of the Federal region’s infrastructure.
• Design, deploy, and scale AI/ML/LLM infrastructure across cloud platforms (AWS, Azure, or GCP) ensuring high reliability and performance.
• Manage and optimize Kubernetes environments (EKS, AKS, GKE) for AI services, data pipelines, and model operations.
• Build and automate end-to-end data and model pipelines for fine-tuning, inference, and RAG workloads using Terraform, Python, and CI/CD tooling.
• Utilize automation tools such as GitOps, CI/CD pipelines, and containerization technologies (Docker, Kubernetes) to streamline ML/LLM tasks across the Large Language Model lifecycle.
• Implement monitoring, observability, and reliability best practices using Prometheus, Grafana, ELK/EFK, Langfuse, and SLI/SLO/SLA frameworks.
• Participate in 24x7 on-call rotations, leading incident response, performance tuning, and cost optimization across SaaS Platform and production workloads
• Own infrastructure end to end, leading scaling initiatives, deployments, and automation, and providing technical leadership across the team

Qualifications/Requirements:

• Bachelor’s or Master’s degree in Computer Science, Engineering, or related field, or equivalent experience.
• 8+ years in SRE, DevOps, Platform Engineering, MLOps, or Cloud Infrastructure roles.
• 4+ years of production experience with Kubernetes (EKS, GKE, AKS) and containerization tools like Docker.
• Strong programming skills in Python and proficiency in Zyphyrscript, Bash, Go, or PowerShell.
• Proficiency with Infrastructure-as-Code tools (Terraform, CloudFormation).
• Experience with Kubernetes Operators, Helm, GitOps (ArgoCD, Flux), or Service Mesh (Istio, Linkerd).
• Exposure to serverless compute (AWS Lambda, Azure Functions).
• Experience building or automating data and model pipelines for AI/ML/LLM workloads (e.g., RAG, fine-tuning, inference).
• Strong understanding of observability and monitoring using Prometheus, Grafana, ELK/EFK, Langfuse, or similar platforms.
• Familiarity with SLI/SLO/SLA practices, incident response, and reliability engineering in production environments.

Preferred Qualifications (Nice to Have):

• Cloud certifications (AWS, Azure, or GCP – e.g., Solutions Architect, DevOps Engineer).
• Experience with agentic AI frameworks (CrewAI, LangGraph, AutoGen).
• Background in hybrid or on-prem AI deployments, including OpenShift or Rancher.
• Familiarity with configuration management (Ansible, Chef, Puppet).
• Contributions to open-source AI/ML, DevOps, or platform tooling.
• Experience with multimodal AI or model observability platforms (RAGAS, AgentOps, Langtrace), Distributed Tracing, OpenTelemetry.
• Knowledge of performance tuning, cost efficiency, or capacity planning for AI/LLM infrastructure.
• Understanding of security controls and FedRAMP compliance for cloud and various workloads.

Additional Requirements

Due to the criteria and security levels required for Corelight’s FedRAMP program, this position requires:

• U.S. citizenship at the time of hire.
• Residence within the contiguous United States.
• Willingness to undergo a Single Scope Background Investigation, if required.

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world. At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. By embracing a wide range of experiences, backgrounds, neurodiversity, talents, and approaches to problem-solving, we aim to create a workplace where everyone can thrive and contribute their best.

We are looking forward to meeting you. Check us out at www.corelight.com

Do you want to help make the world safe from cyber attacks?

At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats.

As a Technical Account Manager, you are the primary bridge between Corelight’s cutting-edge technology and our most strategic global customers. You don’t just resolve technical hurdles; you serve as a high-level consultant, empowering organizations to harness the full power of Zeek and Suricata to defend their mission-critical infrastructure. By translating complex network data into tangible security outcomes and advocating for customer needs directly with our Engineering and Product teams, you play a pivotal role in ensuring our partners stay ahead of evolving threats while directly influencing the future of our platform.

Specific Responsibilities:

• Strategic Partnership: Establish and cultivate deep technical and executive relationships within strategic accounts to ensure long-term product alignment and satisfaction.
• Value Realization: Partner with Sales teams to provide ongoing confirmation of the value Corelight products deliver, ensuring customers achieve their specific security objectives.
• Custom Implementation: Work hands-on with customers to operationalize new features, utilize existing Zeek packages, and develop custom scripts to solve unique security challenges.
• Cross-Functional Advocacy: Serve as the "Voice of the Customer" by coordinating with Engineering and Product Management to prioritize feature requests and communicate real-world impact.
• Lifecycle Management: Guide customers through critical post-sales milestones, driving the successful adoption and operationalization of Corelight’s suite of services.
• Technical Troubleshooting: Perform expert-level configuration, hands-on troubleshooting, and technical demonstrations to resolve complex environment issues.
• Operational Excellence: Maintain rigorous documentation of customer health and communication strategies within the ClientSuccess platform.

Being successful on this team requires:

• Strategic Communication: The ability to translate granular technical details into clear, high-level business value for diverse audiences, from SOC analysts to C-suite executives.
• Technical Agility: A "lead-from-the-front" mentality that balances high-level account strategy with the ability to dive deep into packet captures and scripts.
• Proactive Problem Solving: A dedication to anticipating customer roadblocks before they occur and guiding them toward best-practice security architectures.
• Collaborative Influence: The skill to navigate internal teams (Sales, Engineering, Product) to maintain customer momentum and drive product improvements.
• Adaptability & Availability: A commitment to supporting strategic customers during critical windows 

Qualifications/Requirements:

• Experience: 7+ years in a hands-on technical role such as security engineering, system administration, or network operations.
• Domain Expertise: Subject matter expertise in network security, incident response, and threat hunting, including familiarity with Zeek, Suricata, and adjacent markets (EDR, SIEM, Splunk, ELK, etc.).
• Networking Depth: Advanced understanding of network protocols (SMB, HTTP, DNS, TLS/SSL, X.509) and expert-level experience with packet analysis tools (Wireshark, tcpdump, PCAP).
• Education: BS/BA or equivalent in a relevant field (Computer Science, Electrical Engineering, MIS).
• Communication: Exceptional business writing and presentation skills; must be comfortable presenting to technical and executive stakeholders.
• Mobility: Willingness and ability to travel, including international assignments.
• Preferred: Professional or expert-level security certifications (CISSP, CISM, GIAC, etc.) are highly desirable.

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world. At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. By embracing a wide range of experiences, backgrounds, neurodiversity, talents, and approaches to problem-solving, we aim to create a workplace where everyone can thrive and contribute their best.

We are looking forward to meeting you. Check us out at www.corelight.com

By making evidence the heart of security, we help customers stay ahead of ever-changing cyber-attacks. 

Corelight is the cybersecurity company that transforms network and cloud activity into evidence.  Evidence that elite defenders use to proactively hunt for threats, accelerate response to cyber incidents, gain complete network visibility and create powerful analytics using machine-learning and behavioral analysis tools.  Easily deployed, and available in traditional and SaaS-based formats, Corelight is the fastest-growing Network Detection and Response (NDR) platform in the industry.  And we are the only NDR platform that leverages the power of Open Source projects in addition to our own technology to deliver Intrusion Detection (IDS), Network Security Monitoring (NSM), and Smart PCAP solutions.  We sell to some of the most sensitive, mission critical large enterprises and government agencies in the world.

We are seeking a very talented, resourceful, and collaborative person to help us grow our Professional Services team.  This person will be assisting customers to deploy and use our cybersecurity products. This is a great opportunity for someone who is passionate and committed and wants to be able to look back a year from now and say with pride, “I helped build that from the ground up.”  The role covers quite varied ground depending on the engagement.

Opportunity:

• Help customers improve their cybersecurity posture, with a particular focus on process optimization
• Help investigate incidents
• Educate on Zeek Log use, including as it relates to Corelight Suricata alerts
• Design and implement technical solutions with ecosystem partners (packet brokers, asset managers, SOAR systems, etc.)
• Implement queries and dashboards in SIEMs - Splunk, Elastic, Humio, etc.
• Influence customers and Corelight teams and be seen as a technical expert
• Collaborate with product management on product features/integrations
• Work with back-end tools like Kafka and Logstash

Qualifications:

• 5+ years experience in a security professional services role
• Bachelor’s degree in a technical field (or equivalent experience)
• Strong background in cybersecurity
• Solid verbal and written communication skills
• Enjoy designing novel solutions
• Understand how to scope and describe a services engagement
• Robust problem-solving skills, the ability to learn from doing, personal accountability, and a positive and professional attitude
• Zeek log experience and log analysis skills are required
• Network administration, firewall configuration, and strong knowledge of TCP/IP
• Windows/MacOS/Linux/Unix administration experience
• Scripting in (some of) Zeek, Bash, Python, Perl, Powershell, etc.
• SIEM experience (Splunk required, others a bonus)
• Travel up to 50% post-COVID; some travel now, depending on customer comfort levels
• Prior startup experience preferred 

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture.

Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world.  At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. 

We look forward to meeting you. Check us out at www.corelight.com

Towards the end of our interview process is an in-person interview. 

By making evidence the heart of security, we help customers stay ahead of ever-changing cyber-attacks.

Corelight is a cybersecurity company that transforms network and cloud activity into evidence. Evidence that elite defenders use to proactively hunt for threats, accelerate response to cyber incidents, gain complete network visibility, and create powerful analytics using machine-learning and behavioral analysis tools. Easily deployed and available in traditional and SaaS-based formats, Corelight is the fastest-growing Network Detection and Response (NDR) platform in the industry. We are the only NDR platform that leverages the power of Open Source projects in addition to our own technology to deliver Intrusion Detection (IDS), Network Security Monitoring (NSM), and Smart PCAP solutions. We sell to some of the most sensitive, mission-critical large enterprises and government agencies in the world.

We are seeking a practitioner ready to make the move from the SOC to the classroom. Someone with genuine operational experience who has started finding ways to share what they know, and wants to build a career around it. You'll work alongside senior instructors to develop curriculum and run live training events, taking on increasing ownership as you grow in the role.

Responsibilities:

• Contribute to curriculum development, keeping material current with real-world network-based attack patterns you've encountered operationally
• Help build hands-on lab environments and CTF challenges that reflect realistic adversary behavior, not textbook scenarios
• Co-facilitate and independently lead training sessions (virtual and in-person) for technically experienced audiences
• Develop recorded, on-demand curriculum
• Administer and optimize Learning Management Systems (Skilljar experience is a plus)
• Educate students on the use and application of Corelight for threat hunting,incident response, and detection engineering
• Use AWS and scripting to help maintain and improve lab infrastructure and provisioning workflows
• Up to 50% travel expected

Qualifications:

• 3 to 5 years of hands-on experience in a SOC Tier II role, Incident Response, or threat hunting
• 1 to 2 years in mentorship, internal training, content creation, or knowledge-sharing in a security context
• Familiarity with the MITRE ATT&CK framework applied to real investigations, not just as a reference
• Meaningful experience with Zeek logs; you can follow an attack through the data and explain what you're seeing
• Working knowledge of Suricata or Snort, including rules creation
• Experience with at least one SIEM platform (Splunk, Elastic, or Sentinel)
• Solid TCP/IP fundamentals and comfort reading packet captures
• Windows/MacOS/Linux/Unix administration experience
• Scripting ability in Python, Bash, Zeek-script, or PowerShell
• Excellent verbal and written communication skills
• Bachelor's degree in a technical field or equivalent experience
• Prior startup experience preferred

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry.  Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide.   We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks.    Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world.   At Corelight, we are proud of our diversity of background and thought, and we’re united by our strong shared culture and values.

We are looking forward to meeting you.  Check us out at www.corelight.com

Lead Technical Program Manager (Labs)

Do you want to help make the world safe from cyber attack? At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats.

Corelight Labs is the heartbeat of our innovation, where open-source research meets cutting-edge detection. As a Technical Program Manager for Labs, you are the architect of predictability in a world of research uncertainty. By bridging the gap between brilliant research and production-ready engineering, you ensure that our AI/ML models and detection engines move seamlessly from the lab to the front lines—arming our customers with the evidence they need to outpace global adversaries. You will turn complex research outcomes into actionable roadmaps, ensuring that our detection portfolio is as reliable as it is revolutionary.

Specific Responsibilities:

• Drive End-to-End Delivery: Own the lifecycle of Labs initiatives, including AI/ML detection models, behavioral network detections, and core engines like Zeek, Suricata, and YARA.
• Orchestrate Cross-Functional Alignment: Serve as the central hub between Labs, Engineering, QA, Product Management, and Field teams to ensure deliverables are production-ready and customer-aligned.
• Manage Program Execution: Define comprehensive plans, milestones, and success criteria while proactively identifying and mitigating risks across parallel workstreams.
• Translate Research to Reality: Work closely with researchers and engineers to break down highly technical efforts into executable plans, aligning on handoffs and integration points.
• Optimize R&D Processes: Establish and maintain lightweight program management practices that foster innovation without adding unnecessary "red tape" to the research environment.
• Ensure Operational Visibility: Provide clear, regular status reporting to Labs leadership and stakeholders, surfacing trade-offs and progress with data-driven clarity.

Knowledge/Skills/Abilities needed to be successful:

• Navigating Ambiguity: You thrive in fast-moving R&D environments and can balance the inherent uncertainty of research with the need for predictable delivery.
• Technical Discernment: You have the "applied curiosity" to ask the right technical questions, surfacing risks in detection pipelines or model lifecycles before they become bottlenecks.
• Low-Ego Collaboration: You are a master of "servant leadership," focusing on results and helping researchers and engineers spend more time building and less time coordinating.
• Strategic Communication: You can translate complex technical outcomes into clear, consumable timelines for non-technical stakeholders and customer-facing teams.

Qualifications/Requirements:

• Professional Experience: 5+ years of experience as a Technical Program Manager, Engineering Program Manager, or a similar role in a high-tech environment.
• R&D Background: Proven track record working with highly technical teams (R&D, ML, Platform Engineering, or Infrastructure).
• Tooling Mastery: Hands-on proficiency with Jira, Confluence, and modern program management tools to manage complex schedules and dependencies.
• Process Expertise: Strong understanding of software development lifecycles (SDLC) and research-to-production workflows.
• Education: Bachelor’s degree in a technical field or equivalent practical experience.
• Preferred Differentiators: Deep experience in Cybersecurity (NDR, Threat Research), familiarity with Zeek/Suricata/YARA, or exposure to AI/ML model deployment workflows.

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world. At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. By embracing a wide range of experiences, backgrounds, neurodiversity, talents, and approaches to problem-solving, we aim to create a workplace where everyone can thrive and contribute their best.

We are looking forward to meeting you. Check us out at www.corelight.com

Senior Software Development Engineer in Test (SDET) - Network Security

Do you want to help make the world safe from cyber attack? At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats.

As a Senior SDET at Corelight, you will be the architect of the trust we build with our customers. In this role, you aren’t just "checking code"—you are building the sophisticated automation and infrastructure that validates our cutting-edge network security applications. By simulating complex network traffic and stress-testing our Zeek, Suricata, and YARA integrations, you ensure that our defenders have the most reliable tools in the industry to disrupt global cyber attacks.

Specific Responsibilities:

• Architect Automation Frameworks: Design, develop, and maintain scalable automated test frameworks and scripts using high-proficiency Python and Bash.
• Build Infrastructure as Code: Implement and manage dynamic test environments across major cloud platforms (AWS, Azure, and GCP) using Ansible and Terraform.
• Validate Security Logic: Develop security-focused integration tests to ensure the peak functionality of core tools including Zeek, Suricata, and YARA.
• Automate Artifact Deployment: Streamline the deployment and configuration of critical test artifacts, including Snort and Sigma rule sets.
• Network Traffic Analysis: Perform deep-dive analysis of network protocols (TCP/IP, HTTP, DNS, SSL/TLS) to design robust, realistic test scenarios that mirror real-world production constraints.
• Integrate CI/CD: Manage test code and environments within Git, ensuring seamless integration into our continuous delivery pipelines.

Knowledge, Skills, and Abilities needed to be successful:

• Action-Oriented Problem Solving: You thrive in fast-paced environments and can drive testing efforts across multiple projects, even when timelines are ambiguous.
• Global Collaboration: You are a proactive communicator who enjoys working with geographically distributed teams across the USA and India.
• Cross-Functional Partnership: You can effectively partner with Engineering, Product Management, and QE teams to ensure total test coverage.
• Technical Leadership: You take ownership of the "User Experience" from a quality perspective, ensuring our products scale as our customers' codebases grow.

Qualifications/Requirements:

• Industry Experience: 5–10 years of experience in an SDET or heavy automation role.
• Automation Mastery: High proficiency in Python and Bash for framework development and utility scripting.
• Cloud & IaC Expertise: Hands-on experience with at least one major cloud provider (AWS, Azure, GCP) and Infrastructure as Code tools (Ansible/Terraform).
• Linux Administration: Solid experience with RHEL/Ubuntu environments for setting up complex test beds.
• Network Protocol Depth: Strong working knowledge of TCP/IP, HTTP, DNS, SSL/TLS, Kerberos, and SMB.
• Differentiators: Experience with Docker/Kubernetes, Zeek scripting, CI/CD optimization, or prior exposure to Corelight Fleet Manager.
• Education:  Bachelor of Science or equivalent experience

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks.

Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world. At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. By embracing a wide range of experiences, backgrounds, neurodiversity, talents, and approaches to problem-solving, we aim to create a workplace where everyone can thrive and contribute their best.

We are looking forward to meeting you. Check us out at www.corelight.com

By making evidence the heart of security, we help customers stay ahead of ever-changing cyber-attacks.

Corelight is the cybersecurity company that transforms network and cloud activity into evidence—evidence that elite defenders use to proactively hunt for threats, accelerate response to cyber incidents, gain complete network visibility, and create powerful analytics using machine-learning and behavioral analysis tools. Easily deployed and available in traditional and SaaS-based formats, Corelight is the fastest-growing Network Detection and Response (NDR) platform in the industry. We are the only NDR platform that leverages the power of Open Source projects in addition to our own technology to deliver Intrusion Detection (IDS), Network Security Monitoring (NSM), and Smart PCAP solutions. We sell to some of the most sensitive, mission-critical large enterprises and government agencies in the world.

Role

We are looking for an experienced operations leader with a strong quantitative and data analytics background to join and enable our Product Management Team. This Director of Product Operations will be a critical force multiplier, responsible for the operational excellence and analytical rigor of the entire product lifecycle from idea to adoption. This person will focus on systematizing product processes, aggregating product and customer data, generating actionable insights, and building the necessary operational infrastructure to free up Product Managers to focus on deep customer understanding, prototyping, and feature development.

This role requires a high bias toward quantitative analysis and an ability to leverage AI and automation to streamline product research and reporting. The successful candidate will report into the Product organization and is expected to work closely with the leadership team, attending key staff and executive reviews to provide strategic data and insights.

Responsibilities

• Product Planning & Lifecycle Ownership: Take over and own the entire product planning process, managing the idea-to-adoption lifecycle to ensure efficient execution and successful feature launches.
• Data, Metrics, and Reporting: Collect, analyze, and interpret product engagement and performance data. Specifically focus on tracking and reporting key performance indicators (KPIs) across releases and quarterly goals, and building and maintaining comprehensive product health dashboards.
• Voice of Customer (VoC) Aggregation: Systematize the collection and aggregation of all customer feedback and research notes, leveraging AI and automation (e.g., a "notes scraper") to generate prioritized, streamlined insights for the Product Management team.
• Product Tech Stack Ownership: Own, optimize, and manage the product technology stack, including core tools like JIRA, Pendo, and internal AI/automation tools, ensuring they are effectively used across the product organization for tracking and data capture.
• Program Management Reporting: Work with Program Management (PgM) team on reporting on the health and progress of product initiatives, including populating, tagging, and tracking work in JIRA.
• Go-to-Market (GTM) Readiness: Own creating and driving the GTM readiness process for every product launch, release, and feature, ensuring alignment across Product, Engineering, Sales, and Marketing.
• Enablement: Drive execution of scalable solutions that enable Product Managers to spend more time on strategic customer engagement, problem validation, and working closely with engineering.

Required Qualifications

• 5+ years of experience in Product Operations, Program Management, or a similar data-intensive operational role within an enterprise software or cybersecurity company.
• Implemented AI tools to automate repetitive product tasks
• Quantitative approach, proven history of bringing data to PM processes including implementing systems to help collect, interpret, and report on customer and field data
• Deep experience with and ownership of the core Product Tech Stack, including JIRA and product analytics platforms like Pendo (or equivalent).
• Strong understanding of product planning processes (idea to adoption) and Go-to-Market readiness best practices.
• Experience with security operations (SOC), including detection tuning, policy frameworks, and compliance needs is a plus.
• Ability to work cross-functionally with Product, Engineering, UX, and customer-facing teams to deliver scalable solutions.

Preferred Qualifications

• 3+ years in a leadership or senior role, driving process implementation and operational excellence at scale.
• Experience as a Product Owner/Product Manager in an Agile/Scrum environment.
• Familiarity with data analytics, AI-assisted security decision-making, and automation, specifically in leveraging these for market and customer research.
• Excellent communication skills with experience collaborating across UX, engineering, and security teams.
• Experience with building and shipping SaaS-based security services.
• Education: Degrees in Computer Science, Data Science, or related technical disciplines (or equivalent experience).

We are proud of our culture and values—driving diversity of background and thought, low-ego results, applied curiosity, and tireless service to our customers and community. Corelight is committed to a geographically dispersed yet connected employee base with employees working remotely and from office locations worldwide.

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture.

Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world.  At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. 

We look forward to meeting you. Check us out at www.corelight.com

Channel Account Manager - Northeast US and Eastern Canada

Towards the end of our interview process is an in-person interview.

Do you want to help make the world safe from cyber attacks?

At Corelight, we believe that the best approach to cybersecurity risk starts with the network.  Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse.  Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats.  

We are currently seeking a Channel Account Manager to support our Northeast US and Eastern Canadian Region with the mission of growing our Enterprise and Strategic partner sales. In this position, you will drive partner recruitment, enablement, account mapping, business development, pipeline generation, and sales execution by leveraging an ecosystem of partners including resellers, technical alliances, distributors, systems integrators, and service providers. This Channel Account Manager will work closely with the Global VP of Channel & Alliance Sales, the NAM Director of Channel Sales, the East VP of Sales, and the East Channel SE. 

Corelight is 100% committed to growth through partners. This is a fantastic opportunity to work at a company that fully supports channel engagement in the field. 

The Channel Manager's responsibilities are to:

• Build and maintain mindshare by generating enthusiasm and passion for Corelight's solutions throughout the partner ecosystem.
• Create, maintain, and execute a regional partner strategy and go-to-market plans, in close coordination with regional sales, marketing, and technical resources.
• Focus and report on leading indicators like deal registration, pipeline creation, and closed sales within assigned coverage area.
• Collaborate with regional Channel SE to customize sales and technical enablement plans with key partners, as well as drive on-demand training and certification.
• Educate partner executives and LOB owners on Corelight, and deeply understand their business to identify new routes to market through differentiated services and programs.
• Work with regional sales teams to identify top prospects and connect them with the right partners to build a measurable channel-sourced pipeline and accelerate sales cycles.
• Align Corelight Field Leadership with key partner regional leaders.
• Proactively engage with current resellers, alliance partners, and service providers to increase market share and drive incremental revenue through up-selling, cross-selling, influence, and account penetration.
• Meet with partners regularly, participate in joint sales calls, and assist the partners in closing opportunities.
• Increase brand awareness and demand within the partner community through targeted GTM initiatives, co-sell campaigns, and industry events.
• Collaborate with Corelight channel and sales leadership to identify, target and recruit strategic partners who will fill gaps in market coverage.
• Coordinate Market Development Funds (MDF) to execute channel marketing activities.
• Present during Quarterly Business Reviews and demonstrate a comprehensive understanding of performance in assigned territory.

Minimum Qualifications: 

• BA/BS technical degree or equivalent.
• 7+ years experience working in a Channel Account Manager Role. 
• Prior experience working as a Channel Account Manager for a security or network infrastructure vendor (i.e. Vendors who might have offered: SIEM, EDR, IPS, IDS, Firewalls, SSL/IPSec VPNs, Security Proxies and Caches, route, switch, and telco infrastructure)
• Ability to travel in region 50-70% of the time

Preferred qualifications:

• Channel methodology: Ability to apply a channel methodology that you have successfully implemented in the past
• Network: Know the right partners for Corelight and be able to leverage existing relationships to accelerate access and meaningful engagement 
• Presentation skills: Ability to tell the Corelight story in a confident and engaging way when presenting both in-person and virtually
• Follow-through: Strong follow-through with partners to turn account mapping calls, meetings, marketing programs, and enablement sessions into pipeline.
• Conflict resolution: Successfully manage conflict resolution between partners, reps, and customers when needed
• Organization skills: Being quick to respond to inquiries in a timely manner, not letting tasks fall through the cracks, prioritizing internal and external demands
• Grit: Ability to find success in an early-stage environment without all the resources/teams available to much larger organizations
• Interdepartmental Collaboration: Understanding of how to leverage and work productively with other departments including Engineering, Marketing, Inside Sales, Legal, and Customer Success.
• Tools: Proficiency with Salesforce, Clari, G suite, Zoom
• Partner ecosystem: Experience working with a spectrum of partners such as  Resellers, Distribution, Technical Alliances, Systems Integrators, and Service Providers
• Location: Preferably based in New York Metro or Boston Metro

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry.  Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide.   We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks.    Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world.  At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. By embracing a wide range of experiences, backgrounds, neurodiversity, talents, and approaches to problem-solving, we aim to create a workplace where everyone can thrive and contribute their best.

Senior Threat Researcher

Do you want to help make the world safe from cyber attack? At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats.

At Corelight, we don't just find threats; we decode the language of the network to stay steps ahead of the adversary. As a Senior Threat Researcher, you sit at the strategic intersection of our Detection Engineering and Machine Learning (ML) teams. You are the "expert bridge"—translating complex attacker behaviors into the high-fidelity data signals that power our advanced AI models. By leveraging your deep understanding of network traffic and threat actor psychology, you will guide our data scientists to solve concrete security challenges, ensuring our detections are not just innovative, but devastatingly effective against real-world attacks.

Specific Responsibilities:

• Architect AI-Driven Detections: Lead the independent delivery of high-quality research and code for complex network detections, authoring clear design documents that articulate technical trade-offs to stakeholders.
• Bridge Detection & Data Science: Act as the network security subject matter expert for ML/AI teams, pinpointing critical signals within telemetry (Zeek, NetFlow, PCAPs) to drive feature engineering and model training.
• Simulate Adversary Behavior: Utilize offensive frameworks like Caldera and Cobalt Strike to generate the synthetic lab data necessary to train and validate robust, real-world ML models.
• Roadmap Alignment: Align individual research and prototyping tasks with quarterly milestones and the overarching 12-month roadmap to ensure maximum product impact.
• Optimize Research Workflows: Identify gaps in current processes and actively propose improvements to team-level tools, testing frameworks, and documentation to increase overall velocity.
• Mentor and Uplevel: Guide newer team members and interns through technical workflows and conduct constructive research reviews to maintain a high standard of collective output.

Knowledge/Skills/Abilities needed to be successful:

• Network Protocol Mastery: Deep competence in the OSI model and TCP/IP, with the ability to map emerging adversary tactics to quantitative detection strategies across protocols like HTTP/S, DNS, SMB, and TLS.
• Data Science Translation: A strong understanding of the practical application of ML for behavioral data, including the ability to navigate challenges like model drift, false positives, and latency.
• Network Telemetry Expertise: Proficiency in extracting and transforming network logs (Zeek, Suricata) using Python and SQL to identify subtle indicators of C2 beaconing or lateral movement.
• Offensive Security Insight: Familiarity with Red Team operations and the ability to reverse-engineer attacker behaviors into programmatic detection logic.
• Product-Centered Thinking: The ability to navigate ambiguity and ensure technical research projects directly support long-term product objectives and milestones.
• Effective Technical Liaison: A proactive communicator who can simplify complex AI concepts for security stakeholders while providing deep domain context to data science peers.
• Collaborative Mentorship: A low-ego approach to peer review and a commitment to elevating team capability through shared knowledge and constructive feedback.

Qualifications/Requirements:

• Professional Experience: 5+ years of experience in Threat Research, Detection Engineering, or Network Threat Hunting.
• Technical Proficiency: Extensive experience analyzing network traffic with Zeek/Bro, Suricata, and Wireshark.
• Scripting & Data: Strong working knowledge of Python and SQL for manipulating and analyzing massive datasets.
• Security Domain Knowledge: Proficiency in mapping detections to the MITRE ATT&CK framework and simulating threats with offensive security tools.
• Autonomy: Demonstrated ability to act independently on moderate-to-complex projects, exercising strong judgment in selecting technical methods.
• Education: Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Data Science, or equivalent practical experience.

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world. At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. By embracing a wide range of experiences, backgrounds, neurodiversity, talents, and approaches to problem-solving, we aim to create a workplace where everyone can thrive and contribute their best.

We are looking forward to meeting you. Check us out at www.corelight.com

Do you want to help make the world safe from cyber attack?

At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats.

Job Summary:
We are currently seeking a Staff Resident PSE to join our Federal Professional Services team, reporting to the manager of Professional Services. In this role, the main focus is to prepare and validate equipment configurations for new installations, develop content for anomaly and hunt detections, assess the overall health of the Corelight infrastructure at the client’s location. You’re the ideal candidate if you are a strategic thinker with a strong networking and security background, work well independently, and are results-driven.

Key Responsibilities:

• Help customers improve their cybersecurity posture, with a particular focus on process
  optimization
• Help investigate incidents
• Educate on Zeek Log use, including as it relates to Corelight Suricata alerts
• Design and implement technical solutions with ecosystem partners (packet brokers,
  asset managers, SOAR systems, etc.)
• Implement queries and dashboards in SIEMs - Splunk, Elastic, Humio, etc.
• Influence customers and Corelight teams and be seen as a technical expert
• Conduct network-related testing to ensure Corelight products operate correctly
• Perform validation testing of Corelight products
• Provide ongoing, informal, knowledge transfer
• Collaborate with product management on product features/integrations
• Work with back-end tools like Kafka and Logstash
• Documenting the process for importing of data (MISP, Intel, etc)
• Developing custom content for threat hunting use cases as defined by the customer
• Developing playbooks for SOC/IR workflow automation based on Corelight data
• Ad-hoc (as requested) written summary reports on equipment and security problems
• Technical input to major service outage root cause analysis and corrective action reports
• Leading project status meetings and wrap-up/post-mortem meetings
• Some on-site work required

Minimum Qualifications:

• US Citizen
• 5+ years of experience in cybersecurity (Prior startup experience preferred)
• Extensive experience with a SOC environment
• Zeek/Corelight experience is a plus
• Security and/or Networking related certification(s)
• Demonstrated expertise in Windows/MacOS/Linux/Unix operating systems, IDS/IPS,
• Network administration, firewall configuration, and strong knowledge of TCP/IP
• SIEM experience (Splunk required, others a bonus)
• Scripting in (some of) Zeek, Bash, Python, Perl, Powershell, etc.
• Strong briefing skills; experience interacting with SES/general officer-level management

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture.

Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world.  At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. 

We look forward to meeting you. Check us out at www.corelight.com

Do you want to help make the world safe from cyber attacks? 

At Corelight, we believe that the best approach to cybersecurity risk starts with the network.  Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse.  Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use,  Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights.   Our customers use these insights to speed incident response and proactively hunt for threats.  

As an Inside Sales Representative at Corelight, you’ll be at the front lines of our revenue engine. You’ll partner closely with field sales and marketing to qualify leads, generate pipeline, and work closely with their AEs. These tasks will include heavy outbound calls and emails, and social connections to deliver Corelight's Value Propositions — all while sharpening your skills to grow into a field role or other customer-facing position. We’re looking for hungry, coachable, and competitive professionals who thrive in fast-paced, goal-oriented environments.

What you will do after proper onboarding from a world-class Enablement team:

• Within Corelight’s Ideal Customer Profile (ICP) of large enterprise accounts, proactively engage prospects via cold calling, email outreach, and social channels. 
• Qualify inbound MQL leads and convert them into high-quality meetings by leveraging a compelling conversational talk track that effectively communicates Corelight’s value proposition, while demonstrating genuine curiosity and strong discovery skills.
• Drive pipeline progression by setting strategic meetings and partnering with Account Executives, leveraging the Pain-Power-Fit-Timeline Sales Methodology to qualify and prioritize opportunities.  
• Maintain accurate and up-to-date records in selling tools such as Salesforce, Outreach, LinkedIn SalesNav etc.

Attributes we look for:

Hungry

• You are motivated by goals, growth, and grit. You don’t wait for leads — you create them.
• You want to break into tech sales or accelerate your career at a company where effort is noticed and rewarded.
• You are resilient & persistent.

Coachable

• You welcome feedback and actively seek ways to improve.
• Genuinely curious, have great listening skills, and are a problem solver.
• You’re agile and embrace change as part of growth.

Competitive

• You love to win — whether it’s hitting quota, leading the leaderboard, or challenging yourself daily.
• Detailed & analytical as well as confident & creative.
• Possess a growth mindset and look for continuous improvement.

Preferred Qualifications 

• 1–2 years of SDR or Inside Sales experience in a B2B SaaS or cybersecurity company (but we’ll train the right rookie if they have basic sales methodology training).
• Large account prospecting (Fortune 1000 accounts)
• Strong written and verbal communication skills.
• High emotional intelligence and professional persistence.
• Experience with Digital Tools (SalesForce, Sales Navigator, Outreach, etc.)
• Four-year degree from an accredited university, or equivalent relevant experience

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry.  Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide.   We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks.    Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world.   At Corelight, we are proud of our diversity of background and thought, and we’re united by our strong shared culture and values.

We are looking forward to meeting you.  Check us out at www.corelight.com

Notice of Pay Transparency:
The compensation for this position may vary depending on factors such as your location, skills and experience. Depending on the nature and seniority of the role, a percentage of compensation may come in the form of a commission-based or discretionary bonus. Equity and additional benefits will also be awarded.

Do you want to help make the world safe from cyber attacks? 

At Corelight, we believe that the best approach to cybersecurity risk starts with the network.  Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse.  Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use,  Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights.   Our customers use these insights to speed incident response and proactively hunt for threats.  

As an Inside Sales Representative at Corelight, you’ll be at the front lines of our revenue engine. You’ll partner closely with field sales and marketing to qualify leads, generate pipeline, and work closely with their AEs. These tasks will include heavy outbound calls and emails, and social connections to deliver Corelight's Value Propositions — all while sharpening your skills to grow into a field role or other customer-facing position. We’re looking for hungry, coachable, and competitive professionals who thrive in fast-paced, goal-oriented environments.

What you will do after proper onboarding from a world-class Enablement team:

• Within Corelight’s Ideal Customer Profile (ICP) of large enterprise accounts, proactively engage prospects via cold calling, email outreach, and social channels. 
• Qualify inbound MQL leads and convert them into high-quality meetings by leveraging a compelling conversational talk track that effectively communicates Corelight’s value proposition, while demonstrating genuine curiosity and strong discovery skills.
• Drive pipeline progression by setting strategic meetings and partnering with Account Executives, leveraging the Pain-Power-Fit-Timeline Sales Methodology to qualify and prioritize opportunities.  
• Maintain accurate and up-to-date records in selling tools such as Salesforce, Outreach, LinkedIn SalesNav etc.

Attributes we look for:

Hungry

• You are motivated by goals, growth, and grit. You don’t wait for leads — you create them.
• You want to break into tech sales or accelerate your career at a company where effort is noticed and rewarded.
• You are resilient & persistent.

Coachable

• You welcome feedback and actively seek ways to improve.
• Genuinely curious, have great listening skills, and are a problem solver.
• You’re agile and embrace change as part of growth.

Competitive

• You love to win — whether it’s hitting quota, leading the leaderboard, or challenging yourself daily.
• Detailed & analytical as well as confident & creative.
• Possess a growth mindset and look for continuous improvement.

Preferred Qualifications 

• 1–2 years of SDR or Inside Sales experience in a B2B SaaS or cybersecurity company (but we’ll train the right rookie if they have basic sales methodology training).
• Large account prospecting (Fortune 1000 accounts)
• Strong written and verbal communication skills.
• High emotional intelligence and professional persistence.
• Experience with Digital Tools (SalesForce, Sales Navigator, Outreach, etc.)
• Four-year degree from an accredited university, or equivalent relevant experience

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry.  Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide.   We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks.    Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world.   At Corelight, we are proud of our diversity of background and thought, and we’re united by our strong shared culture and values.

We are looking forward to meeting you.  Check us out at www.corelight.com

Notice of Pay Transparency:
The compensation for this position may vary depending on factors such as your location, skills and experience. Depending on the nature and seniority of the role, a percentage of compensation may come in the form of a commission-based or discretionary bonus. Equity and additional benefits will also be awarded.

Do you want to help make the world safe from cyber attacks? 

At Corelight, we believe that the best approach to cybersecurity risk starts with the network.  Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse.  Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use,  Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights.   Our customers use these insights to speed incident response and proactively hunt for threats.  

As an Inside Sales Representative at Corelight, you’ll be at the front lines of our revenue engine. You’ll partner closely with field sales and marketing to qualify leads, generate pipeline, and work closely with their AEs. These tasks will include heavy outbound calls and emails, and social connections to deliver Corelight's Value Propositions — all while sharpening your skills to grow into a field role or other customer-facing position. We’re looking for hungry, coachable, and competitive professionals who thrive in fast-paced, goal-oriented environments.

What you will do after proper onboarding from a world-class Enablement team:

• Within Corelight’s Ideal Customer Profile (ICP) of large enterprise accounts, proactively engage prospects via cold calling, email outreach, and social channels. 
• Qualify inbound MQL leads and convert them into high-quality meetings by leveraging a compelling conversational talk track that effectively communicates Corelight’s value proposition, while demonstrating genuine curiosity and strong discovery skills.
• Drive pipeline progression by setting strategic meetings and partnering with Account Executives, leveraging the Pain-Power-Fit-Timeline Sales Methodology to qualify and prioritize opportunities.  
• Maintain accurate and up-to-date records in selling tools such as Salesforce, Outreach, LinkedIn SalesNav etc.

Attributes we look for:

Hungry

• You are motivated by goals, growth, and grit. You don’t wait for leads — you create them.
• You want to break into tech sales or accelerate your career at a company where effort is noticed and rewarded.
• You are resilient & persistent.

Coachable

• You welcome feedback and actively seek ways to improve.
• Genuinely curious, have great listening skills, and are a problem solver.
• You’re agile and embrace change as part of growth.

Competitive

• You love to win — whether it’s hitting quota, leading the leaderboard, or challenging yourself daily.
• Detailed & analytical as well as confident & creative.
• Possess a growth mindset and look for continuous improvement.

Preferred Qualifications 

• 1–2 years of SDR or Inside Sales experience in a B2B SaaS or cybersecurity company (but we’ll train the right rookie if they have basic sales methodology training).
• Large account prospecting (Fortune 1000 accounts)
• Strong written and verbal communication skills.
• High emotional intelligence and professional persistence.
• Experience with Digital Tools (SalesForce, Sales Navigator, Outreach, etc.)
• Four-year degree from an accredited university, or equivalent relevant experience

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry.  Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide.   We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks.    Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world.   At Corelight, we are proud of our diversity of background and thought, and we’re united by our strong shared culture and values.

We are looking forward to meeting you.  Check us out at www.corelight.com

Notice of Pay Transparency:
The compensation for this position may vary depending on factors such as your location, skills and experience. Depending on the nature and seniority of the role, a percentage of compensation may come in the form of a commission-based or discretionary bonus. Equity and additional benefits will also be awarded.