---
title: 'Professional Services Engineer at Corelight'
canonical: 'https://feeny.ai/job/professional-services-engineer-corelight-north-krv1snbtd0j0'
type: 'job'
last_seen: '2026-09-09'
---

# Professional Services Engineer at Corelight

- **Company:** Corelight
- **Location:** North, United States
- **Compensation:** $122k–$155k
- **Posted:** 2026-08-04
- **Last confirmed live:** 2026-09-09
- **Apply:** https://boards.greenhouse.io/corelight/jobs/8105618?gh_jid=8105618

## Job description

Be part of the team that defends the networks the world depends on

Corelight defends the world’s most sensitive networks—from global commerce to national defense—quietly, relentlessly, and with resolve. As cyber threats grow faster and smarter, we serve as the trusted force behind network resilience, putting elite defense within reach.

By transforming digital footprints from physical, virtual, and cloud networks into actionable insights, we empower defenders to illuminate blind spots and stay ahead of an evolving threat landscape. Built on open-source innovations and fueled by industry leading agentic AI technology, Corelight helps teams to detect advanced threats and close cases with unprecedented clarity and precision.

We are currently seeking a Professional Services Engineer, reporting to the Sr. Manager of Professional Services. In this role, the main focus is to prepare and validate equipment configurations for new installations, develop content for anomaly and hunt detections, assess the overall health of the Corelight infrastructure at the client’s location. You’re the ideal candidate if you are a strategic thinker with a strong networking and security background, work well independently, and are results-driven.

Key Responsibilities:

- Help customers improve their cybersecurity posture, with a particular focus on process optimization
- Help investigate incidents
- Educate on Zeek Log use, including as it relates to Corelight Suricata alerts
- Design and implement technical solutions with ecosystem partners (packet brokers, asset managers, SOAR systems, etc.)
- Implement queries and dashboards in SIEMs - Splunk, Elastic, Humio, etc.
- Influence customers and Corelight teams and be seen as a technical expert
- Conduct network-related testing to ensure Corelight products operate correctly
- Perform validation testing of Corelight products
- Provide ongoing, informal, knowledge transfer
- Collaborate with product management on product features/integrations
- Work with back-end tools like Kafka and Logstash
- Documenting the process for importing of data (MISP, Intel, etc)
- Developing custom content for threat hunting use cases as defined by the customer
- Developing playbooks for SOC/IR workflow automation based on Corelight data
- Ad-hoc (as requested) written summary reports on equipment and security problems
- Technical input to major service outage root cause analysis and corrective action reports
- Leading project status meetings and wrap-up/post-mortem meetings
- Some on-site work required

Minimum Qualifications:

- US Citizen
- 5+ years of experience in cybersecurity (Prior startup experience preferred)
- Extensive experience with a SOC environment
- Zeek/Corelight experience is a plus
- Security and/or Networking related certification(s)
- Demonstrated expertise in Windows/MacOS/Linux/Unix operating systems, IDS/IPS,
- Network administration, firewall configuration, and strong knowledge of TCP/IP
- SIEM experience (Splunk required, others a bonus)
- Scripting in (some of) Zeek, Bash, Python, Perl, Powershell, etc.
- Strong briefing skills; experience interacting with SES/general officer-level management

Notice of Pay Transparency: The compensation for this position may vary depending on factors such as your location, skills and experience. Depending on the nature and seniority of the role, a percentage of compensation may come in the form of a commission-based or discretionary bonus. Equity and additional benefits will also be awarded.

## Compensation Range

$122,000—$155,000 USD

Why Join Us?

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is one of the fastest growing network detection and response platforms in the industry.  Our passionate team thrives in a collaborative, inclusive, and geographically distributed culture. We embrace diverse perspectives, neurodiversity, curiosity and low ego results - fostering an environment where every innovator can solve the toughest challenges in cybersecurity and contribute their best work.

We are looking forward to meeting you. Check us out at[www.corelight.com](https://www.corelight.com)

## About Corelight

## Company Overview
- **One-liner**: Corelight provides an evidence-based Open Network Detection and Response (NDR) platform that helps enterprises and government agencies uncover hidden threats by transforming network data into actionable evidence.
- **Entity Type**: Private (Series E – raised $150M in April 2024)
- **Headquarters**: San Francisco, California, United States
- **Founded**: 2016
- **Founders**: Dr. Vern Paxson, Dr. Robin Sommer, Seth Hall, and Dr. Greg Bell

## Core Business
- **Primary industry**: Cybersecurity – Network Detection & Response (NDR), threat hunting, cloud security.
- **Target customers**: Large enterprises, government agencies, and research universities (B2B, mission-critical environments).
- **Mission or purpose**: To put evidence at the heart of security, helping defenders gain visibility, accelerate investigations, and stay ahead of ever-changing cyber attacks.

## Products & Services
- **Corelight Open NDR Platform**: An AI-powered platform that ingests network telemetry (from Zeek and Suricata) to provide real-time detection, agentic triage, and threat hunting. Deployed as physical, virtual, or cloud sensors.
- **Cloud Sensor for AWS**: Delivers visibility and threat detection specifically for Amazon Web Services environments.
- **Encrypted Traffic Analysis**: Proprietary technology for inspecting encrypted network flows without decryption.
- **Integrations & Ecosystem**: Native integrations with Splunk, Microsoft Sentinel/Defender, CrowdStrike, Elastic, and Google Chronicle to enrich existing security stacks.
- **Professional Services & Training**: Expert-led deployment, tuning, and threat hunting services, plus formal training programs.

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed (private company).
- **Key Metrics**: Annual Revenue ~$76.7M (estimated); Total Funding $309.2M (as of Series E).
- **Notable Investors/Partners**: Accel, Insight Partners, General Catalyst, and the U.S. National Science Foundation.
- **Growth Signals**: 351 employees (+30.4% YoY); recognized as a Leader in the 2025 Gartner® Magic Quadrant™ for Network Detection & Response and in the 2025 Forrester Wave™ for NDR; operates in 16 countries; 28 active job postings.

## Competitive Advantages
- **Open source foundation**: Steward of the Zeek project (the de-facto open standard for network security monitoring), which provides deep, extensible network visibility not available from closed-source vendors.
- **AI-powered agentic triage**: Combines machine learning, behavioral analytics, and expert-authored playbooks to reduce alert fatigue by up to 10x.
- **Multi-layered detection**: Fuses threat intelligence, signatures, and behavioral models to deliver risk-prioritized, evidence-backed alerts.
- **Ecosystem neutrality**: Works with all major SIEM/SOAR platforms (Splunk, Sentinel, CrowdStrike, etc.), making it a “team player” rather than a lock-in product.

## Strategic Focus
- **AI SOC ecosystem expansion**: Building agentic workflows and AI-driven automation to further accelerate triage and investigation for security operations centers.
- **Cloud coverage**: Deepening cloud-native detection capabilities (especially for AWS, Azure, GCP) to match the hybrid reality of modern enterprises.
- **Extending encrypted traffic visibility**: Continued R&D in proprietary encrypted traffic analysis to address growing encryption demands.
- **Global scale**: Growing partner ecosystem and expanding into more government and financial services verticals.

## Why Work Here
- **Remote-first culture**: The Corelight team works remotely most of the time, with local meetups, quarterly team offsites, and an annual all-company offsite. WFH stipend provided.
- **Diversity & belonging**: Active Employee Resource Groups (ERGs). Emphasis on low ego, applied curiosity, and tireless service as core values.
- **Comprehensive benefits**: Medical/dental/vision for employees and dependents, FSA/HSA, 401(k) matching (US), pensions (international), generous parental leave, adoption/fertility benefits (Carrot), mental health support (Headspace/Calm, Talkspace), One Medical memberships, travel insurance, and financial planning resources.
- **Growth trajectory**: Rapidly scaling company (30%+ headcount growth YoY) with a collaborative, engineering-driven culture. Rated 3.9/5 on employee reviews (70 reviews) with strong compensation (4.4/5) and reasonable work-life balance (3.9/5).

## Sources
1. [corelight.com – Careers](https://corelight.com/company/careers/)
2. [corelight.com – About Corelight](https://corelight.com/company/about-corelight/)
3. [corelight.com – Homepage](https://corelight.com/)
4. [LinkedIn – Corelight Company Page](https://www.linkedin.com/company/corelight)

## Other roles at Corelight

- [DoD SkillBridge Opportunities at Corelight](https://feeny.ai/job/dod-skillbridge-opportunities-at-corelight-corelight-north-1pjzh8znvr1w) — North, United States
- [Military & Veteran Talent Opportunities](https://feeny.ai/job/military-veteran-talent-opportunities-corelight-north-t65ct7zxyxmw) — North, United States
- [Sr. Escalations Engineer](https://feeny.ai/job/sr-escalations-engineer-corelight-australia-vpksx4xcb8c7) — Australia
- [Director of Customer Operations & Enablement](https://feeny.ai/job/director-of-customer-operations-enablement-corelight-united-states-60p7hsp9edxx) — United States
- [Enterprise Account Executive - EMEA](https://feeny.ai/job/enterprise-account-executive-emea-corelight-emea-xc72v0k8vtpc) — EMEA
- [Senior Product Manager, AI Platform & Triage](https://feeny.ai/job/senior-product-manager-ai-platform-triage-corelight-united-states-vrpep59wh9jv) — United States
- [Sr. Director, Product Marketing](https://feeny.ai/job/sr-director-product-marketing-corelight-united-states-y1aq8qhmxxe4) — United States
- [Enterprise Account Executive - Southeast NA SLED](https://feeny.ai/job/enterprise-account-executive-southeast-na-sled-corelight-north-nh2w9x3caz7e) — North, United States
- [Sr. Sales Engineer - SLED Central](https://feeny.ai/job/sr-sales-engineer-sled-central-corelight-north-dzasw5t8bh6b) — North, United States
- [Lead Software Engineer (Frontend) Fleet](https://feeny.ai/job/lead-software-engineer-frontend-fleet-corelight-north-vft1trk883a1) — North, United States