Senior Software Engineer, ExtraHop

• We are seeking a highly skilled and motivated Senior Software Engineer | Security with a strong software and detection engineering background to join our Detection Engineering (DE) team and help expand ExtraHop’s industry leading detection coverage
• An ideal candidate will have strong software engineering, networking, and cybersecurity fundamentals as well as knowledge of modern Identity and Access Management (IAM)
• We are seeking highly talented software engineers from all backgrounds, who bring in their own perspectives, influences, and experiences
• 5+ years of experience in software and/or detection engineering in a team environment
• Experience developing and deploying code for enterprise software applications with emphasis on code quality and maintainability
• In-depth knowledge of networking fundamentals, including the OSI model and excellent working knowledge of the key protocols from Layer 2 through Layer 7
• Experience working with modern Identity and Access Management (IAM) using SAML and OIDC
• Experience with network-oriented security tools such as Wireshark, Tshark, tcpdump, Suricata, Snort, or other packet capture/analysis tools

Desirable

• We are ExtraHop
• We're on a mission to provide security teams with the intelligence they need to confront and stop advanced threats like supply chain attacks, zero day exploits, and ransomware attacks
• Cyber attackers still have the advantage
• We’re taking it back with creativity, intellectual curiosity, and a sense of humor
• This position works closely with security researchers and data scientists to develop cutting edge network threat detections that leverage rule-based network observations as well as ML-powered anomaly detections
• As a Senior Software Engineer | Security, you will be working as part of a team dedicated to delivering industry leading detection capabilities
• You will be expected to work with a high level of autonomy, to mentor other team members, and to demonstrate a high level of ownership of your areas of responsibility
• We offer an engaging and innovative environment in which people are encouraged and supported to collaborate on industry-leading technology and create a world-class engineering team, while they develop and enrich their individual growth
• We believe in actively investing in a diverse engineering organization
• ExtraHop R&D supports fully-flexible work options that includes full time onsite, hybrid, and fully remote working arrangements
• With the exception of a few roles that require physical access, we believe in supporting you in making the choice that works best for you and makes the team successful
• Develop network threat detectors by leveraging rule-based and ML-based detection strategies
• Reproduce attacks in a lab environment using live tools and recorded PCAP traffic, and perform threat hunts on aggregated log data, in order to identify malicious behaviors and develop techniques to detect them
• Collaborate with Threat Research and Data Science teams to gain insight on attacker techniques and take advantage of the latest machine learning models to detect attacker behavior
• Work with infrastructure teams to help develop and improve tools that Detection Engineering and Threat Research teams use in developing and testing detections
• Mentor and coach other Security Engineers regarding detector development and network threats
• Actively participate in code review to ensure quality and uplevel other engineers