Security Data Integration Engineer, Corelight
+ Equity. Listed salary range is benchmarked with US rates and will vary in further locations.
Network & cloud security
Be an early applicant
Network & cloud security
201-500 employees
Be an early applicant
+ Equity. Listed salary range is benchmarked with US rates and will vary in further locations.
201-500 employees
Company mission
To help defend the world's most sensitive, mission-critical organisations.
Role
Who you are
- Bachelor's degree in Computer Science or a related technical field, or equivalent practical experience
- Proven experience in SIEM integration, preferably with Splunk
- Strong development skills, with experience in languages and tools supported by Splunk (e.g., Java, Python, Splunk Query Language)
- Solid understanding of data visualization and the creation of interactive dashboards
- Familiarity with networking and security concepts, including IDS, NSM, and cybersecurity attack techniques
- Experience with common security workflows and processes (IR, threat hunting), especially related to network traffic + detection
- Knowledge of the security application and technology integration landscape across a variety of technologies including SIEM, XDR, and SOAR
- Excellent problem-solving abilities and a strong customer focus
- Strong communication skills and the ability to work effectively in a team environment
- Advanced knowledge of SIEM systems and their deployment in large-scale environments
- Experience with other SIEM platforms like Elasticsearch, LogRhythm, or QRadar
- Familiarity with cloud technologies and services, particularly those related to data processing and analytics
- Prior experience in a cybersecurity company or a similar high-tech environment
- Experience with Agile development methodologies and working with distributed teams
What the job involves
- At Corelight, we are at the forefront of network security, helping organizations protect their environments with an open NDR platform that delivers unparalleled network visibility
- We are looking for a passionate and driven Presales Engineer to join our team, contributing to our mission of helping customers stay ahead of evolving threats
- As an Alliance Integration Engineer at Corelight, you will be instrumental in enhancing the integration capabilities of our NDR sensors for data export into Security Information and Event Management (SIEM) systems like Splunk
- You will be working on the forefront of SIEM technology, focusing on the development of dashboards, workflows, and applications that provide our users with unparalleled insights and control over their security data
- Develop and improve integration solutions for sensor data export into SIEM platforms, with a focus on Splunk
- Design and build custom dashboards and workflows that enable users to visualize and manage security data effectively
- Engage in application development for SIEM systems, ensuring seamless operation and enhanced user experience
- Collaborate with cross-functional teams to gather requirements and translate them into effective technical solutions
- Manage a team of external contractors to expand to other SIEM platforms; prioritize and delegate effectively
- Maintain up-to-date knowledge of SIEM technologies and industry best practices to ensure the delivery of cutting-edge solutions
- Provide technical guidance and support to partners and customers for integration-related issues
- Work closely with product management and engineering teams to influence the roadmap and development of Corelight's integration capabilities
Our take
Corelight is a software company that integrates machine learning into cyber and cloud security. It develops NDRs (Network Detection and Response systems) alongside virtual, software and cloud sensors to better protect enterprises and institutions.
The company's most popular product is the Zeek Network Security Monitor, which is used by the likes of Amazon and Mozilla. It is also continually developing new products (such as a Cloud Sensor for Amazon Web Services) as the nature and complexity of cyber threats continue to grow.
Launched back in 2013, the company has been around for a while now, but it continues to keep up to date with the changing market. In 2024, Corelight secured immense Series E funding as it capitalises on the booming AI and cyber defense markets.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 5 rounds)
Apr 2024
$150m
SERIES E
Sep 2021
$75m
SERIES D
Total funding: $309.2m
Company values
- Low-ego results: With humility, Corelight turns expertise into execution. Corelight takes thoughtful risks and builds on each others’ work to uncover the best ideas
- Applied curiosity: Corelight questions constantly but not aimlessly. They incorporate data, ideas, and evidence from anywhere and use them to drive success..
- Tireless service: Helping is a high-calling. Corelight serves customers, their open source communities, and each other
Company HQ
Financial District, San Francisco, CA
Articles
Leadership
Brian Dye
(CEO)Former CPO of the company. Prior to this, they were EVP of Corporate Products at McAfee, Group VP and GM of the Mobile Platforms Group at Citrix, and SVP of Information Security at Symantec.
Seth Hall
(Co-Founder & Chief Evangelist)Currently an Affiliated Researcher at Lawrence Berkeley National Laboratory. Previously Research Engineer at ICSI and Team Member at Dragon Research Group.
Vern Paxson
(Co-Founder & Chief Scientist)Previously Director of the Networking Security Group at ICSI.
Robin Sommer
(Co-Founder)Currently Affiliated Researcher at ICSI and Lawrence Berkeley National Laboratory. Previously General Chair at the IEEE International Symposium on Security and Privacy.
Share this job
View 27 more jobs at Corelight