Cybersecurity Field Engineer - SIEM & Threat Hunting

Corelight; Northern (KY); Hybrid; USD 124,000 - 160,000; Full time

Benefits offered by this job

Equity

Job summary

Corelight is seeking a Professional Services Engineer to prepare equipment configurations for new installations, develop anomaly hunt content, and assess the health of Corelight infrastructure at client sites. You will design technical solutions with ecosystem partners and implement dashboards in SIEMs to support customer security objectives.

As part of the team, you will lead technical engagements, provide knowledge transfer, and contribute to product enhancements with customer-driven threat

Qualifications

• 5+ years in cybersecurity, with SOC experience.
• Proficient in Zeek/Corelight ecosystems.
• Security and/or networking certifications.
• Strong knowledge of Windows/Linux/Unix operating systems.

Responsibilities

• Help customers improve cybersecurity posture, focusing on process optimization.
• Educate on Zeek Log usage related to Corelight alerts.
• Design and implement solutions with ecosystem partners (packet brokers, asset managers, SOAR systems, etc.).
• Implement queries and dashboards in SIEMs - Splunk, Elastic, Humio, etc.
• Lead project status meetings and post-mortems.
• Document data import processes (MISP, Intel, etc).
• Develop threat hunting content and SOC/IR playbooks.
• Perform validation testing of Corelight products.
• Provide ongoing knowledge transfer to customers.
• Collaborate with product management on product features/integrations.

Skills

Cyber security

SOC operations

Zeek/Corelight

Networking

Scripting

Windows/Linux/Unix

SIEM (Splunk)

Executive communication

Tools

Splunk

Elastic

Humio

Kafka

Logstash

Job description

Corelight is seeking a Professional Services Engineer to prepare equipment configurations for new installations, develop anomaly hunt content, and assess the health of Corelight infrastructure at client sites. You will design technical solutions with ecosystem partners and implement dashboards in SIEMs to support customer security objectives.

As part of the team, you will lead technical engagements, provide knowledge transfer, and contribute to product enhancements with customer-driven threat