Senior Security Engineer

San Francisco, California or Santa Clara, California

Corelight is an early-stage security startup based in downtown San Francisco and Columbus, OH. We secure some of the most sensitive and mission-critical networks in the world, and our rapidly-growing customer base includes eight of the Fortune 50. Based on the Zeek (formerly Bro) Network Security Monitor, a beloved and widely used open-source framework, Corelight Sensors transform high-volume network traffic into ‘rocket fuel’ for security analytics and operations. Following in the footsteps of successful open-source security companies such as Sourcefire and Tenable, Corelight’s unfair market advantages include its founders: the inventor of Zeek and its key open-source committers. Join Corelight, and help us make the world’s networks safer.

Role

Join a team of world-class cyber security experts as our Security Engineer. You will drive our security strategy and initially help build our security operations. You will collaborate with all aspects of the business, from product and engineering to people and finance, as well as our team of world renowned cyber experts. You’ll oversee a best in class security architecture for a best in class security company. Your broad experience across identity, access, endpoint management, e-discovery, data, and network security will allow you to balance hands-on engineering with strategic thinking and planning.

Responsibilities

  • Propose and design security improvements to reduce both internal and product security risks and work with teams to build and deploy those improvements

  • Manage and evolve our security infrastructure, monitoring and tool stack

  • Advise on configuration of SaaS software and tools

  • Research emerging threats and evolving best practices, and educate the rest of the team

  • Work with internal teams and third party vendors on pen tests, security assessments, code audits and design reviews

  • Consult on matters of physical security and related systems and be a thought partner for product security

  • Initially, supplement and/or oversee a third party vendor for day-to-day security operations and incident response

Experience

Minimum experience

  • Experience in security engineering in a cloud-centric environment, including identity, access, endpoint, architecture, data, and network security

  • Experience and expert knowledge in endpoint security engineering, including Linux/MAC and OS/platform level protection and common protocols

  • Expert in one or more scripting languages (for example: Python, Ruby, Golang and bash).

  • Experience in vulnerability testing and scanning

  • Experience in operational security and incident response

Preferred experience

  • Experience working with Zeek, the open source tool that is the foundation of our product

  • Experience building a security program, including experience with SOC2, NIST, ISO etc

  • Experience working with multiple sites and a remote workforce

  • Experience in product and application security and testing

  • Experience managing outsourced providers/services

  • Prior experience with leading and building InfoSec teams

Qualities

  • Transparent and efficient communicator and excellent translator of security issues

  • Comfort working with domain experts across the company to reach security decisions

  • Passionate about security

  • Humble

A note on experience

We understand that no candidate is perfectly qualified for any job. Experience comes in different forms; many skills are transferable; and passion goes a long way. Even more important than your resume is a clear demonstration of dedication, impact, and the ability to thrive in a fluid and collaborative environment. We want you to learn new things in this role, and we encourage you to apply if your experience is close to what we’re looking for.

We also know that diversity of background and thought makes for better problem solving and more creative thinking, which is why we're dedicated to adding new perspectives to the team.

Working at Corelight

In addition to helping to make networks safer around the world, Corelight is a great place to work. We provide competitive salaries, equity and benefits, but those are just table stakes. No matter where you're based, we aspire to make working here one the best experiences of your career.

Apply Here

San Francisco -> https://boards.greenhouse.io/corelight/jobs/1786692

Santa Clara -> https://boards.greenhouse.io/corelight/jobs/1794518