Corelight

Define and execute product strategy for threat detection capabilities, lead research and engineering teams, and act as a technical liaison. | 7+ years in cybersecurity, 3+ years in a technical product management or detection leadership role, deep knowledge of network security, detection frameworks, and NDR data sources. | Job Description: • Define, prioritize, and execute the product strategy for Corelight’s threat detection capabilities, with a primary focus on Machine Learning (ML), Artificial Intelligence (AI), and agentic solutions. • Clarify and lead the data requirements necessary to support ML/AI detection capabilities, providing direct input into the Corelight Detection Schema. • Research adversary tactics and techniques to identify and prioritize detection opportunities, specifically focusing on how ML/AI can be applied across all monitoring sources. • Lead the Threat R&D, Data Science, and Engineering to operationalize research and champion model fidelity, performance, and explainability to drive customer adoption and trust. • Act as the primary technical liaison between customers, internal research teams, and engineering, while monitoring the industry and competitors for market indicators and key differentiators. Requirements: • 7+ years in cybersecurity, with at least 3+ years in a technical product management, security research, or detection engineering leadership role. • Proven experience defining product strategy and managing a backlog for a technical security product. • Expert-level understanding of network protocols, network security principles, and intrusion detection methodologies. • Strong, practical experience with detection frameworks and a proven ability to build a detection strategy around it. • Deep experience with NDR data sources, especially Zeek, Suricata, and/or Snort. • Experience with network forensics, packet analysis, and identifying anomalous or malicious network behavior. • Excellent analytical skills, with the ability to translate complex technical challenges and threat intelligence into clear, prioritized product requirements. • Bachelor's degree in Computer Science, Cybersecurity, or equivalent practical experience. Benefits: • Equity and additional benefits will also be awarded.

Manage and grow sales within the SLED space by developing relationships with key stakeholders and closing business to meet sales quotas. | Minimum 6+ years in enterprise SaaS sales, 2+ years in SLED space, experience managing multiple stakeholders, and proficiency in solution selling. | Do you want to help make the world safe from cyber attack? At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats. Job Summary: We are currently seeking a Account Executive to manage and drive sales within the SLED Space in our Southwest Territory. The Account Executive will be responsible for developing and managing relationships with internal and customer partners, including c-suite decision makers. Key Responsibilities: • Demonstrate an intimate understanding of Corelight solutions and their value to customers. • Demonstrate ability to position and advise C-suite executives with industry point of view business insights; continue to listen, build, and grow executive relationships with customers. • Develop and close business to consistently meet or exceed quarterly sales quotas in a way that reflects Corelight values. • Align with Corelight partner ecosystem to optimize market opportunity. • Maintain accurate pipeline management with expert level forecasting. • Build effective relationships cross-functionally to ensure strategy alignment and achieve company objectives. • Be a trusted advisor, understanding client businesses and aligning Corelight solutions with their goals. • Regional travel required. Minimum Qualifications: • Minimum 6+ years selling enterprise SaaS solutions in the cloud/security space to enterprise customers. • 2 Years of experience selling into the SLED Space • Experience managing multiple stakeholders during a sales process. • Proficient in value-based solution selling, with a keen focus on delivering tangible business outcomes, ensuring alignment with end business value. • Proven track record of effectively selling within a geographic-based territory. • Good standing relationships with previous sales operation teams. • A consultative and professional approach to engaging with customers. • Ability to pivot in a meeting vs. sticking to a script. • Must demonstrate proficiency in executing a formal sales process and possess familiarity with qualification frameworks. • A proven track record managing accounts in cloud or cybersecurity ecosystem to elevate the business. • Experience working in a fast-paced, dynamic environment with the ability to adapt quickly to changing circumstances. Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world. At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. We are looking forward to meeting you. Check us out at www.corelight.com

Manage and grow customer relationships, develop and close sales, and align solutions with client goals in the cybersecurity SaaS space. | Minimum 6+ years in enterprise SaaS sales, experience with cybersecurity solutions, managing multiple stakeholders, and a consultative sales approach. | Do you want to help make the world safe from cyber attack? At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats. Job Summary: We are currently seeking a Account Executive to manage and drive sales within the Intel Community. The Account Executive will be responsible for developing and managing relationships with internal and customer partners, including c-suite decision makers. Key Responsibilities: • Demonstrate an intimate understanding of Corelight solutions and their value to customers. • Demonstrate ability to position and advise C-suite executives with industry point of view business insights; continue to listen, build, and grow executive relationships with customers. • Develop and close business to consistently meet or exceed quarterly sales quotas in a way that reflects Corelight values. • Align with Corelight partner ecosystem to optimize market opportunity. • Maintain accurate pipeline management with expert level forecasting. • Build effective relationships cross-functionally to ensure strategy alignment and achieve company objectives. • Be a trusted advisor, understanding client businesses and aligning Corelight solutions with their goals. • Regional travel required. Minimum Qualifications: • Minimum 6+ years selling enterprise SaaS solutions in the cloud/security space to enterprise customers. • Experience managing multiple stakeholders during a sales process. • Proficient in value-based solution selling, with a keen focus on delivering tangible business outcomes, ensuring alignment with end business value. • Proven track record of effectively selling within a geographic-based territory. • Good standing relationships with previous sales operation teams. • A consultative and professional approach to engaging with customers. • Ability to pivot in a meeting vs. sticking to a script. • Must demonstrate proficiency in executing a formal sales process and possess familiarity with qualification frameworks. • A proven track record managing accounts in cloud or cybersecurity ecosystem to elevate the business. • Experience working in a fast-paced, dynamic environment with the ability to adapt quickly to changing circumstances. Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world. At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. We are looking forward to meeting you. Check us out at www.corelight.com

Prepare and validate equipment configurations, develop threat detection content, assess Corelight infrastructure health, and collaborate on cybersecurity solutions for federal clients. | 5+ years cybersecurity experience, TS/SCI clearance with polygraph, SOC experience, security/network certifications, scripting skills, and strong communication with senior management. | Do you want to help make the world safe from cyber attack? At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats. Job Summary: We are currently seeking a Staff Resident PSE to join our Federal Professional Services team, reporting to the manager of Professional Services. This role would be based in DC, Maryland, Virginia (DMV) area and requires a TS/SCI Clearance with Full Scope Polygraph. In this role, the main focus is to prepare and validate equipment configurations for new installations, develop content for anomaly and hunt detections, assess the overall health of the Corelight infrastructure at the client’s location. You’re the ideal candidate if you are a strategic thinker with a strong networking and security background, work well independently, and are results-driven. Key Responsibilities: • Help customers improve their cybersecurity posture, with a particular focus on process optimization • Help investigate incidents • Educate on Zeek Log use, including as it relates to Corelight Suricata alerts • Design and implement technical solutions with ecosystem partners (packet brokers, asset managers, SOAR systems, etc.) • Implement queries and dashboards in SIEMs - Splunk, Elastic, Humio, etc. • Influence customers and Corelight teams and be seen as a technical expert • Conduct network-related testing to ensure Corelight products operate correctly • Perform validation testing of Corelight products • Provide ongoing, informal, knowledge transfer • Collaborate with product management on product features/integrations • Work with back-end tools like Kafka and Logstash • Documenting the process for importing of data (MISP, Intel, etc) • Developing custom content for threat hunting use cases as defined by the customer • Developing playbooks for SOC/IR workflow automation based on Corelight data • Ad-hoc (as requested) written summary reports on equipment and security problems • Technical input to major service outage root cause analysis and corrective action reports • Leading project status meetings and wrap-up/post-mortem meetings • Some on-site work required Minimum Qualifications: • US Citizen • TS/SCI Full Scope Poly Required • 5+ years of experience in cybersecurity (Prior startup experience preferred) • Extensive experience with a SOC environment • Zeek/Corelight experience is a plus • Security and/or Networking related certification(s) • Demonstrated expertise in Windows/MacOS/Linux/Unix operating systems, IDS/IPS, • Network administration, firewall configuration, and strong knowledge of TCP/IP • SIEM experience (Splunk required, others a bonus) • Scripting in (some of) Zeek, Bash, Python, Perl, Powershell, etc. • Strong briefing skills; experience interacting with SES/general officer-level management Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world. At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. We look forward to meeting you. Check us out at www.corelight.com Notice of Pay Transparency: The compensation for this position may vary depending on factors such as your location, skills and experience. Depending on the nature and seniority of the role, a percentage of compensation may come in the form of a commission-based or discretionary bonus. Equity and additional benefits will also be awarded. Compensation Range $200,000—$325,000 USD

Lead strategic development of hardware and software platforms for network detection and response, including design, architecture, and collaboration across teams. | 10+ years of enterprise software design and development experience with deep expertise in network hardware acceleration, Linux kernel, container orchestration, and multiple programming languages. | Towards the end of our interview process is an in-person interview. Do you want to help make the world safe from cyber attack? At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats. Job Summary: We are seeking a Platform Architect to contribute to the strategic development of Corelight’s hardware & software platforms and enhance our Network Detection and Response (NDR) operational capabilities both on-premise and in the cloud. If you are a passionate, curious self-starter interested in network security and are looking to have a strategic impact on core technologies used to defend networks and inform critical responders, then this role is for you! Key Responsibilities: • Provide technical expertise in planning, development, and execution of edge-level network monitoring hardware and appliances. • Produce design documentation and guide implement functionality by engaging in code-review and architectural analysis exercises. • Coordinate with Product, Engineering, Labs, Operations and other stakeholders to understand customer and technical requirements and formulate technical strategies to expand the Corelight products to meet those needs. • Collaborate with other architects to develop comprehensive product, data, networking and application architectures for integrated solutions across the Corelight portfolio. • This role will report to the Chief Architect Minimum Qualifications: • Experience with successful product delivery • Effective communicator and ability to collaborate across stakeholders • Possess strong organizational and problem solving skills • Hands-on experience with SmartNICs and FPGA-based network accelerators. • Expertise with Intel DPDK, DPUs, GPUs acceleration on network switches/routers • Experience with P4 processors, compilers, programming languages and operations • Hands-on experience with developing, running, orchestrating application containers on network switches • In-depth understanding of the Linux IP stack and routing protocols. Experience with Linux driver development, kernel module configuration, performance tuning, and debugging. • Hands-on experience with designing large-scale data processing solutions using containerized applications; specific experience with Kubernetes environments is a plus. • 10+ years of enterprise software design, development, and release experience • 10+ years of development experience with two or more of the following languages: Go, Python, Rust, JVM languages (Java, Kotlin, Scala) • Familiarity with zero-copy data transfer techniques to achieve line-rate performance. • Able to work up the stack into Kubernetes and microservices, seamlessly integrating into service-oriented architectures and scaling efficiently in cloud environments Preferred Qualifications: • 5+ years of experience designing and implementing scalable solutions in at least one of the three major public clouds: AWS, GCP, Azure • Developing/Integrating NDR solutions on the Network Switches/Routers • Experience with network service chaining architectures • Experience with Kubernetes and Helm deployments • Experience working in an Agile scrum team is a plus • Practical experience in multiple public clouds is a plus • Experience with Prometheus and Grafana is a plus • Experience with Git for version control. Experience with Gitlab CI is a plus • Experience with Zeek or Suricata is a plus Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world. At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. We are looking forward to meeting you. Check us out at www.corelight.com