Professional Services Engineer
Be part of the team that defends the networks the world depends on
Corelight defends the world’s most sensitive networks—from global commerce to national defense—quietly, relentlessly, and with resolve. As cyber threats grow faster and smarter, we serve as the trusted force behind network resilience, putting elite defense within reach.
By transforming digital footprints from physical, virtual, and cloud networks into actionable insights, we empower defenders to illuminate blind spots and stay ahead of an evolving threat landscape. Built on open-source innovations and fueled by industry leading agentic AI technology, Corelight helps teams to detect advanced threats and close cases with unprecedented clarity and precision.
We are currently seeking a Professional Services Engineer, reporting to the Sr. Manager of Professional Services. In this role, the main focus is to prepare and validate equipment configurations for new installations, develop content for anomaly and hunt detections, assess the overall health of the Corelight infrastructure at the client’s location. You’re the ideal candidate if you are a strategic thinker with a strong networking and security background, work well independently, and are results-driven.
Key Responsibilities:
- Help customers improve their cybersecurity posture, with a particular focus on process
optimization - Help investigate incidents
- Educate on Zeek Log use, including as it relates to Corelight Suricata alerts
- Design and implement technical solutions with ecosystem partners (packet brokers,
asset managers, SOAR systems, etc.) - Implement queries and dashboards in SIEMs - Splunk, Elastic, Humio, etc.
- Influence customers and Corelight teams and be seen as a technical expert
- Conduct network-related testing to ensure Corelight products operate correctly
- Perform validation testing of Corelight products
- Provide ongoing, informal, knowledge transfer
- Collaborate with product management on product features/integrations
- Work with back-end tools like Kafka and Logstash
- Documenting the process for importing of data (MISP, Intel, etc)
- Developing custom content for threat hunting use cases as defined by the customer
- Developing playbooks for SOC/IR workflow automation based on Corelight data
- Ad-hoc (as requested) written summary reports on equipment and security problems
- Technical input to major service outage root cause analysis and corrective action reports
- Leading project status meetings and wrap-up/post-mortem meetings
- Some on-site work required
Minimum Qualifications:
- US Citizen
- 5+ years of experience in cybersecurity (Prior startup experience preferred)
- Extensive experience with a SOC environment
- Zeek/Corelight experience is a plus
- Security and/or Networking related certification(s)
- Demonstrated expertise in Windows/MacOS/Linux/Unix operating systems, IDS/IPS,
- Network administration, firewall configuration, and strong knowledge of TCP/IP
- SIEM experience (Splunk required, others a bonus)
- Scripting in (some of) Zeek, Bash, Python, Perl, Powershell, etc.
- Strong briefing skills; experience interacting with SES/general officer-level management
Notice of Pay Transparency:
The compensation for this position may vary depending on factors such as your location, skills and experience. Depending on the nature and seniority of the role, a percentage of compensation may come in the form of a commission-based or discretionary bonus. Equity and additional benefits will also be awarded.
Why Join Us?
Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is one of the fastest growing network detection and response platforms in the industry. Our passionate team thrives in a collaborative, inclusive, and geographically distributed culture. We embrace diverse perspectives, neurodiversity, curiosity and low ego results - fostering an environment where every innovator can solve the toughest challenges in cybersecurity and contribute their best work.
We are looking forward to meeting you. Check us out at www.corelight.com
Director of Business Intelligence
About the Company
The Public Interest Company provides a comprehensive solution for identifying and recovering third party liability for health plans, risk-bearing provider groups, and self-funded employers. We combine AI and a legal tech platform to identify and recover claims that should have been paid by third party payers. We handle the entire recovery process, all while protecting members and streamlining operations. We empower healthcare organizations to maximize their financial performance and recoup dollars towards care delivery, without adding administrative burden.
Role Overview
Our business runs on data — client reporting, recovery performance, operational throughput, and financial results all trace back to the same underlying tables. The Director of Business Intelligence is the person who owns that picture end to end: what the data means, where it lives, whether it's right, and how it gets turned into something a business owner can act on.
This is not a request-taking dashboard role. You'll build in Sigma, but the job starts before that — understanding the question behind the ask, knowing which source tables in Databricks and Postgres actually answer it, and making the call on what “correct” looks like before a single chart gets built. You'll work alongside data engineering and engineering, but you are the business owner of the data: the person who knows every table, every workflow, and every number well enough to catch it when something's off before anyone else does. Every data request in the business — from an internal ops question to client-facing reporting — should route through you, not because you gatekeep for its own sake, but because you're the only person positioned to know whether the answer is right and whether it's the right question in the first place.
This is an apex individual contributor role. We're looking for someone who pairs deep technical fluency with real commercial instinct — someone who can sit with a business leader, understand what outcome they're actually chasing, and come back with an insight (not just a dashboard) that changes a decision.
Responsibilities
Data Ownership & Architecture
Own the business's data graph — the map of what data exists, where it lives (Databricks, Postgres), how entities relate, and what each field actually means in practice
Serve as the single source of truth on data accuracy and data quality across the business; know the source data well enough to catch errors before they reach a dashboard or a client
Partner closely with the data engineering and engineering teams on data model design, pipeline issues, and structural changes — you don't build the pipelines, but you understand them well enough to hold the line on quality
Maintain documentation of data lineage, definitions, and known caveats so the business isn't relying on tribal knowledge
BI & Reporting Delivery
Design, build, and maintain dashboards and reporting in Sigma across all areas of the business
Own all client-facing reporting — every client data deliverable runs through you for scoping and accuracy sign-off
Act as the intake point for data and reporting requests across the business; triage, scope, and prioritize rather than simply executing what's asked
Before building anything, understand the underlying business question, the decision it will inform, and whether the requested output is actually the right one — push back and reshape the ask when it isn't
Commercial Insight & Business Partnership
Translate data into commercial insight — not just “what happened” but “what it means and what to do about it”
Work directly with business leaders across operations, litigation, and finance to help them develop and act on insights from the data
Proactively identify patterns, risks, and opportunities in the data rather than waiting to be asked
“Sell” insights internally — present findings in a way that drives decisions and gets adopted, not just circulated
Data Governance & Quality Control
Establish and enforce a standard for data quality and validation across all reporting and dashboards
Build a process (with data engineering) to catch and resolve data discrepancies before they surface downstream
Set the standard for what “production-ready” reporting looks like at TPIC and hold that line across the business
Qualifications
4+ years in business intelligence, analytics engineering, or a hybrid data/commercial role, with demonstrated ownership of a company's core reporting and data quality function
Strong SQL and hands-on experience with modern data warehouses (Databricks required; Postgres a strong plus)
Proven experience building and maintaining dashboards in Sigma or a comparable modern BI tool (Looker, Mode, Tableau)
Demonstrated ability to reverse-engineer and document complex, multi-source data models
Strong commercial instincts — a track record of turning data into decisions, not just reports
Experience operating as the last line of defense on data accuracy in a business with multiple workflows and complex source data
Comfortable operating as a single point of ownership across a business with no BI team beneath you — this is a builder-operator role, not a manager role (for now)
Excellent stakeholder communication; able to push back on a request and be trusted for it
Healthcare, insurance, or claims data experience a plus but not required
About the Company
The Public Interest Company provides a comprehensive solution for identifying and recovering third party liability for health plans, risk-bearing provider groups, and self-funded employers. We combine AI and a legal tech platform to identify and recover claims that should have been paid by third party payers. We handle the entire recovery process, all while protecting members and streamlining operations. We empower healthcare organizations to maximize their financial performance and recoup dollars towards care delivery, without adding administrative burden.
Network Intelligence Advisor - US West
Network Intelligence Advisor - US East
The full posting opens here — pay, setting and the full description, without leaving the list.