Development Engineer in Test (SDET) - Network Security (Apps)

Corelight; San Francisco (CA); On-site; USD 145,000 - 180,000; Full time

Job summary

Corelight’s San Francisco team is seeking a Senior SDET to architect automated test frameworks and validate network security products. You will build scalable Python/Bash automation, manage cloud test environments with Ansible/Terraform, and create security‑focused tests for Zeek, Suricata, and YARA.

Lead automation efforts, ensure production‑level test coverage, and integrate tests into CI/CD pipelines while collaborating with cross‑functional teams in a fast-paced security‑focused environment.

Qualifications

• 5–10 years of experience in an SDET or heavy automation role.
• High proficiency in Python and Bash for framework development.
• Cloud & IaC: hands‑on with AWS, Azure or GCP and Ansible/Terraform.
• Linux administration in RHEL/Ubuntu environments.
• Strong knowledge of TCP/IP, HTTP, DNS, SSL/TLS, Kerberos, SMB.
• Differentiators: Docker/Kubernetes, CI/CD optimization, or exposure to Corelight Fleet Manager.
• Education: Bachelor of Science or equivalent experience.

Responsibilities

• Architect Automation Frameworks: design, develop, and maintain scalable automated test frameworks and scripts using Python and Bash.
• Build Infrastructure as Code: manage dynamic test environments across cloud platforms using Ansible and Terraform.
• Validate Security Logic: develop security‑focused integration tests for Zeek, Suricata, and YARA.
• Automate Artifact Deployment: streamline deployment and configuration of test artifacts including Snort and Sigma rule sets.
• Network Traffic Analysis: analyse network protocols to design robust test scenarios mirroring real production constraints.
• Integrate CI/CD: manage test code and environments within Git for CI/CD pipelines.

Skills

Python

Bash

CI/CD

Linux

Docker/Kubernetes

Education

Bachelor of Science or equivalent experience

Tools

AWS

Azure

GCP

Ansible

Terraform

Job description

Be part of the team that defends the networks the world depends on Corelight defends the world's most sensitive networks—from global commerce to national defense—quietly, relentlessly, and with resolve. As cyber threats grow faster and smarter, we serve as the trusted force behind network resilience, putting elite defense within reach. By transforming digital footprints from physical, virtual, and cloud networks into actionable insights, we empower defenders to illuminate blind spots and stay ahead of an evolving threat landscape. Built on open-source innovations and fueled by industry leading agentic AI technology, Corelight helps teams to detect advanced threats and close cases with unprecedented clarity and precision. As a Senior SDET at Corelight, you will be the architect of the trust we build with our customers. In this role, you aren't just "checking code"—you are building the sophisticated automation and infrastructure that validates our cutting‑edge network security applications. By simulating complex network traffic and stress‑testing our Zeek, Suricata, and YARA integrations, you ensure that our defenders have the most reliable tools in the industry to disrupt global cyber attacks.

Specific Responsibilities

• Architect Automation Frameworks: Design, develop, and maintain scalable automated test frameworks and scripts using high‑proficiency Python and Bash.
• Build Infrastructure as Code: Implement and manage dynamic test environments across major cloud platforms (AWS, Azure, and GCP) using Ansible and Terraform.
• Validate Security Logic: Develop security‑focused integration tests to ensure the peak functionality of core tools including Zeek, Suricata, and YARA.
• Automate Artifact Deployment: Streamline the deployment and configuration of critical test artifacts, including Snort and Sigma rule sets.
• Network Traffic Analysis: Perform deep‑dive analysis of network protocols (TCP/IP, HTTP, DNS, SSL/TLS) to design robust, realistic test scenarios that mirror real‑world production constraints.
• Integrate CI/CD: Manage test code and environments within Git, ensuring seamless integration into our continuous delivery pipelines.

Knowledge, Skills, and Abilities

• Action‑Oriented Problem Solving: Thrive in fast‑paced environments and drive testing efforts across multiple projects, even with ambiguous timelines.
• Global Collaboration: Communicate proactively with geographically distributed teams across the USA and India.
• Cross‑Functional Partnership: Effectively partner with Engineering, Product Management, and QE teams to ensure total test coverage.
• Technical Leadership: Own the "User Experience" from a quality perspective, ensuring our products scale as our customers' codebases grow.

Qualifications

• Industry Experience: 5–10 years of experience in an SDET or heavy automation role.
• Automation Mastery: High proficiency in Python and Bash for framework development and utility scripting.
• Cloud & IaC Expertise: Hands‑on experience with at least one major cloud provider (AWS, Azure, GCP) and Infrastructure as Code tools (Ansible/Terraform).
• Linux Administration: Solid experience with RHEL/Ubuntu environments for setting up complex test beds.
• Network Protocol Depth: Strong working knowledge of TCP/IP, HTTP, DNS, SSL/TLS, Kerberos, and SMB.
• Differentiators: Experience with Docker/Kubernetes, Zeek scripting, CI/CD optimization, or prior exposure to Corelight Fleet Manager.
• Education: Bachelor of Science or equivalent experience.

Notice of Pay Transparency

Compensation: $145,000—$180,000 USD. Base salary may vary by location, skills, and experience. Additional compensation may include commission‑based or discretionary bonuses, equity, and benefits.

Why Join Us

Fueled by investments from top‑tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is one of the fastest growing network detection and response platforms in the industry. Our passionate team thrives in a collaborative, inclusive, and geographically distributed culture. We embrace diverse perspectives, neurodiversity, curiosity, and low‑ego results—fostering an environment where every innovator can solve the toughest challenges in cybersecurity and contribute their best work.

We are looking forward to meeting you. Check us out at www.corelight.com