About the Role

Corelight is transforming how work gets done through AI, and we're looking for builders who want to help make that vision a reality.

Across the company, teams are identifying opportunities to automate work, streamline operations, and unlock new ways of working with AI. As an Enterprise AI Automation Engineer, you'll transform those opportunities into secure, scalable, production-ready solutions that create measurable business impact. Working across Sales, Marketing, Finance, HR, Legal, Engineering, and IT, you'll design, build, deploy, and continuously improve AI-powered workflows using platforms like n8n, Claude Code, and AWS Bedrock.

This is not a research role or an innovation lab. It's a hands-on engineering role for people who love building systems that solve real business problems. You'll partner closely with business stakeholders, AI Governance, Security, and IT to rapidly deliver high-value automation while continuously identifying opportunities to improve and scale what you've built. Success isn't measured by presentations or prototypes. It's measured by the production solutions you ship, the adoption you drive, and the business outcomes you help unlock.

What You'll Do

Build Enterprise AI Solutions

• Design, build, test, and deploy enterprise AI workflows using n8n and modern AI platforms.
• Rapidly transform approved automation opportunities into production-ready enterprise solutions.
• Build integrations using APIs, webhooks, and event-driven architectures.
• Develop AI-powered workflows that improve productivity across multiple business functions.

Engineer Reliable Systems

• Review, audit, and optimize AI-generated Python, JavaScript, JSON, regex, and workflow logic.
• Debug AI-generated implementations by identifying syntax errors, logical flaws, malformed data structures, and model-generated inaccuracies before deployment.
• Implement prompt engineering, structured output parsing, token optimization, rate limiting, and resilient error handling.
• Design Human-in-the-Loop approval paths for workflows involving sensitive information or business-critical decisions.
• Ensure every solution meets Corelight's standards for security, governance, reliability, and maintainability.

Partner with the Business

• Partner directly with business stakeholders to understand approved AI initiatives and translate them into technical solutions.
• Guide implementation by balancing business objectives, user experience, security, governance, and technical feasibility.
• Continuously improve existing workflows while identifying adjacent opportunities that create additional business value.
• Create clear technical documentation that supports long-term ownership and scalability.

What You'll Bring

• 5+ years of experience designing, building, and deploying enterprise automation, systems integration, or AI-powered software solutions
• Bachelor’s Degree in Computer Science, Information Systems, Engineering, or a related technical field, or equivalent practical experience
• Experience building enterprise automation solutions using n8n or similar orchestration platforms.
• Strong understanding of APIs, JSON, webhooks, authentication, and modern systems integration.
• Experience working with foundation models such as Claude, OpenAI, Gemini, or AWS Bedrock.
• Strong code literacy with the ability to critically evaluate, troubleshoot, debug, and improve AI-generated Python, JavaScript, JSON, and regex.
• Experience delivering production-ready technical solutions for business stakeholders.
• Experience implementing Human-in-the-Loop approval patterns.
• Demonstrated ability to balance speed, quality, security, and maintainability.
• Excellent written and verbal communication skills.

Nice to Have

• Experience with Jira, Confluence, GitLab, or similar development tools.
• Familiarity with AI governance, secure-by-design principles, and enterprise compliance frameworks.
• Exposure to cybersecurity environments or network telemetry concepts such as Zeek.

As a Lead Software Engineer at Corelight, you will be at the forefront of engineering excellence, bridging the gap between innovative open-source foundations and enterprise-grade performance. You will play a pivotal role in shaping the architecture of our detection platform, ensuring that our defenders have the most reliable, high-performance tools to outsmart global adversaries. Your leadership will not only define the technical roadmap of our products but also cultivate the next generation of engineering talent within our distributed-first culture.

Specific Responsibilities:

• Drive End-to-End Architecture: Lead software design and implementation from conception through to testing, monitoring, and robust CI/CD practices.
• Mentor and Cultivate Talent: Provide technical guidance to junior engineers through design reviews, architectural oversight, and the promotion of performant, maintainable code standards.
• Implement High-Availability Systems: Build and manage automated test suites, sophisticated monitoring tools, and proactive alerting mechanisms to ensure platform stability.
• Strategic Agile Collaboration: Partner closely with Product Managers and Scrum Masters to refine epics, provide accurate estimates, and ensure a predictable, high-quality release schedule.
• Continuous Innovation: Proactively research and propose emerging technologies and industry trends to improve software development practices and maintain Corelight’s competitive edge.

Knowledge/Skills/Abilities needed to be successful:

• Technical Vision: The ability to translate complex product requirements into scalable, multi-threaded architectural designs.
• Collaborative Leadership: A natural ability to facilitate technical meetings, align stakeholders, and foster a culture of transparent communication.
• Agile Mindset: Comfort working in a fast-paced, iterative environment where adaptability and quality go hand-in-hand.
• Mission-Driven Focus: A passion for cybersecurity and a commitment to following open-source workflows to secure global networks.

Qualifications/Requirements:

• Education: Bachelor’s degree in Computer Science, Software Engineering, or a related technical field.
• Professional Experience: 8+ years of software development experience specifically on Linux or Unix-style platforms.
• Core Languages: Expert-level proficiency in Golang and C++.
• System Mastery: Proven experience developing and maintaining multi-threaded applications in production environments.
• Cloud & Infrastructure: Hands-on experience with cloud platforms (AWS, GCP, or Azure) and containerization tools (Docker, Kubernetes).
• Modern DevOps: Expertise in CI/CD pipelines (e.g., Jenkins, GitLab CI/CD) and open-source development tools (Git, CMake, make).
• Data Architecture: Strong working knowledge of both SQL and NoSQL databases.
• Preferred (Bonus): Prior experience leading software teams, a background in Network Security, or familiarity with NDR tools like Zeek and Suricata.

Corelight is entering a new phase where AI scales network telemetry to support modern Security Operations Centers (SOCs). As the Senior Product Manager for the AI Product Team focusing on Knowledge, Context, and Ecosystem, you will own the data enrichment layer that supports both human analysts and automated AI tools. By integrating context from EDRs, CMDBs, and identity management systems, you will organize raw network telemetry into structured operational insights. Your work will help drive our Agentic Triage features, automating manual investigation paths and enabling security operations teams to respond to threats with greater speed and clarity.

Specific Responsibilities:

• Manage the Knowledge Layer Roadmap: Define and execute the product roadmap for our security context engine, ensuring contextual data supports human and automated workflows.
• Develop AI & Automated Workflows: Build out data-delivery capabilities that support LLM-powered security workflows, enabling automated tools to assist in reliable triage outcomes.
• Design Alert Prioritization Engines: Create customizable data-prioritization engines with robust defaults, giving enterprise teams granular control over their alert telemetry.
• Build Ecosystem & Partner Integrations: Lead integration strategies across external security tools to pull context from EDR, CMDB, and IAM infrastructure.
• Conduct Customer Discovery Loops: Work closely with SOC Managers, CISOs, and security teams to validate policy workflows and ensure the data layer maps to real operational needs.
• Author Functional Technical Requirements: Write clear Product Requirement Documents (PRDs) and user stories, collaborating with Engineering and UX teams to deliver scalable SaaS solutions.
• Deliver Operational & Executive Reporting: Design dashboards and tracking frameworks that help SOC leadership evaluate detection accuracy and regulatory compliance.

Knowledge/Skills/Abilities needed to be successful:

• AI & LLM Workflows: Solid understanding of automated AI assistants, LLM integration patterns, prompting workflows, and technical knowledge representation.
• SOC Domain Knowledge: Strong understanding of standard Security Operations Center processes, alert triage, threat hunting, and validation workflows.
• Network Security Foundations: Familiarity with network visibility metrics, network telemetry collections (like IDS/NSM), and baseline protocols.
• Integration & API Familiarity: Understanding of how data contracts and schemas integrate across security tooling environments (EDR, IAM, CMDB).
• Structured Product Discovery: Ability to perform continuous customer discovery and translate qualitative feedback into data-backed requirements.
• Policy & Compliance Mapping: Experience translating corporate security guidelines and user permissions into functional software controls.
• Agile Product Management: Competency managing feature lifecycles, sprint plans, and release cycles in an active Agile/Scrum framework.
• Cross-Functional Collaboration: Proven ability to build consensus and drive projects forward across Engineering, UX Design, Marketing, and Sales.
• Stakeholder Communication: Strong written and verbal skills to articulate product updates and technical tradeoffs clearly to enterprise customers and CISOs.
• User-Centric Focus: A practical commitment to reducing user friction and designing features that ease the day-to-day work of security analysts.

Qualifications/Requirements:

• Cybersecurity Experience: 5+ years of experience in cybersecurity, with a focus on asset intelligence, data enrichment, or SOC operations engineering.
• Product Management Track Record: 3+ years of direct experience as a Product Manager or Product Owner, with clear success using data-driven workflows and customer discovery.
• Enterprise Engagement Exposure: Proven background interacting directly with corporate IT and security leadership (CISOs, SOC managers, compliance teams).
• SaaS Tech Familiarity: Hands-on experience working with AI tool setups, data policy controls, or shipping multi-tenant cloud-based SaaS security products.
• Education: Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related technical field (or equivalent practical enterprise experience).
• Preferred Assets: Prior experience as a Product Owner in an Agile/Scrum setup; familiarity with data analytics infrastructure; comfort using OpenAPI specifications to understand backend endpoints.

As a Senior SDET at Corelight, you will be the architect of the trust we build with our customers. In this role, you aren’t just "checking code"—you are building the sophisticated automation and infrastructure that validates our cutting-edge network security applications. By simulating complex network traffic and stress-testing our Zeek, Suricata, and YARA integrations, you ensure that our defenders have the most reliable tools in the industry to disrupt global cyber attacks.

Specific Responsibilities:

• Architect Automation Frameworks: Design, develop, and maintain scalable automated test frameworks and scripts using high-proficiency Python and Bash.
• Build Infrastructure as Code: Implement and manage dynamic test environments across major cloud platforms (AWS, Azure, and GCP) using Ansible and Terraform.
• Validate Security Logic: Develop security-focused integration tests to ensure the peak functionality of core tools including Zeek, Suricata, and YARA.
• Automate Artifact Deployment: Streamline the deployment and configuration of critical test artifacts, including Snort and Sigma rule sets.
• Network Traffic Analysis: Perform deep-dive analysis of network protocols (TCP/IP, HTTP, DNS, SSL/TLS) to design robust, realistic test scenarios that mirror real-world production constraints.
• Integrate CI/CD: Manage test code and environments within Git, ensuring seamless integration into our continuous delivery pipelines.

Knowledge, Skills, and Abilities needed to be successful:

• Action-Oriented Problem Solving: You thrive in fast-paced environments and can drive testing efforts across multiple projects, even when timelines are ambiguous.
• Global Collaboration: You are a proactive communicator who enjoys working with geographically distributed teams across the USA and India.
• Cross-Functional Partnership: You can effectively partner with Engineering, Product Management, and QE teams to ensure total test coverage.
• Technical Leadership: You take ownership of the "User Experience" from a quality perspective, ensuring our products scale as our customers' codebases grow.

Qualifications/Requirements:

• Industry Experience: 5–10 years of experience in an SDET or heavy automation role.
• Automation Mastery: High proficiency in Python and Bash for framework development and utility scripting.
• Cloud & IaC Expertise: Hands-on experience with at least one major cloud provider (AWS, Azure, GCP) and Infrastructure as Code tools (Ansible/Terraform).
• Linux Administration: Solid experience with RHEL/Ubuntu environments for setting up complex test beds.
• Network Protocol Depth: Strong working knowledge of TCP/IP, HTTP, DNS, SSL/TLS, Kerberos, and SMB.
• Differentiators: Experience with Docker/Kubernetes, Zeek scripting, CI/CD optimization, or prior exposure to Corelight Fleet Manager.
• Education:  Bachelor of Science or equivalent experience

As an Enterprise Account Development Representative at Corelight, you play a critical role in our revenue engine within the SLED Space. Moving beyond traditional lead qualification, you will specialize in Enterprise Account Prospecting, conducting deep-dive research and persona mapping to penetrate the world’s most elite defenders.

You will partner with Field Account Executives and Marketing to build high-value pipelines. This role demands a sophisticated, consultative approach—engaging senior decision-makers with value-led insights. You will develop a deep understanding of their business challenges and articulate how Corelight’s Open NDR platform provides the solution. This is a high-impact position designed for sales professionals looking to master the enterprise sales motion and accelerate their career toward Field Sales or specialized customer-facing roles.

What You Will Do

Following a comprehensive onboarding program with our world-class Enablement team, you will:

• Execute Strategic Account Prospecting: Conduct rigorous research into Fortune 500 and Global 2000 accounts to identify business drivers, technical environments, and untapped opportunities within our Ideal Customer Profile (ICP).
• Master Persona Mapping & Nurturing: Navigate complex organizational hierarchies to identify and map key stakeholders—from SOC Analysts to CISOs. You will build and nurture long-term relationships through consistent, value-led touchpoints.
• Consultative Engagement: Engage decision-makers through a value-led approach to facilitate high-level conversations about network detection and response (NDR) and data-driven security.
• Drive Multi-Channel Engagement: Proactively engage executive prospects via hyper-personalized email, strategic social selling, and targeted outbound calls, delivering Corelight’s value proposition with precision and authority.
• Accelerate Pipeline Growth: Qualify inbound MQLs and convert them into strategic meetings. You will leverage the Pain-Power-Fit-Timeline methodology to prioritize high-intent opportunities and ensure a seamless handoff to your Account Executive partners.
• Maintain Sales Excellence: Demonstrate meticulous attention to detail by maintaining accurate, real-time records within our tech stack, including Salesforce, Outreach, and LinkedIn Sales Navigator.

Who You Are

We are looking for professionals who blend a competitive drive with a strategic, analytical mindset. You should be:

• Hungry: You are motivated by goals, growth, and grit. You don’t wait for leads — you create them.

• Consultative: Able to engage in credible, high-level business conversations with technical leaders and executives.
• Analytical & Creative: Passionate about the "detective work" involved in account research and persona mapping and bring engaging new ways to meet prospects where they are at in the buying process.
• Resilient: Thriving in a fast-paced, goal-oriented environment where persistence and creativity are rewarded.
• Coachable: Committed to continuous improvement and mastering the nuances of cybersecurity sales.
• Competitive: You love to win — whether it’s hitting quota, leading the leaderboard, or challenging yourself daily.

Preferred Qualifications 

• 1–3 years of SDR or Inside Sales experience in IT Infrastructure solutions or cybersecurity companies (but we’ll train the right rookie if they have basic sales methodology training).
• Large account prospecting (Fortune 1000 accounts)
• Strong written and verbal communication skills.
• High emotional intelligence and professional persistence.
• Experience with Sales Productivity Tools (SalesForce, Sales Navigator, Outreach, etc.)
• Four-year degree from an accredited university, or equivalent relevant experience

As the Senior Manager of Security Intelligence, you will provide strategic leadership, organizational design, and vision for the Security Intelligence function. You will design and champion an automation-first, LLM-driven intelligence strategy across the enterprise, own the global incident response and vulnerability management capabilities, and collaborate with executive leadership to define, measure, and scale Corelight's overall corporate security posture.

Specific Responsibilities:

• Strategic Automation & Modernization Strategy: Define and execute the long-term vision for an automation-first culture, driving the adoption of next-generation security orchestration and LLM-first frameworks to radically compress response times across all enterprise environments.
• Executive Collaboration & Alignment: Partner with the CISO and cross-functional VP-level stakeholders to align security intelligence initiatives with broader business objectives, ensuring seamless integration across Product, Engineering, and Information Security.
• Metrics, Governance & Risk Reporting: Synthesize complex incident, threat, and vulnerability telemetry into strategic, high-impact executive dashboards and board-ready metrics, providing clear visibility into systemic risks and mitigation progress.
• Enterprise Incident Lifecycle Ownership: Serve as the ultimate authority for global security incident response, ensuring the organization maintains world-class readiness, continuous post-mortem evolution, and regulatory/compliance alignment.
• Organizational Design & Talent Cultivation: Lead, scale, and mentor a multi-tiered organization of high-performing security engineers and leads. Drive workforce planning, headcount budgeting, performance cultures, and career paths that attract and retain top-tier technical talent.

Knowledge/Skills/Abilities needed to be successful:

• Transformational Leadership: You view talent management as a strategic differentiator. You excel at building inclusive, high-performance cultures, aligning diverse engineering teams, and developing the next generation of security leaders.
• Strategic and Adaptive Vision: You anticipate market and threat-landscape shifts, proactively pivoting functional strategies to leverage cutting-edge paradigms (like generative AI and automated defense) before they become industry standard.
• Technical Credibility & Governance: While you operate as a strategic executive, you possess the deep technical foundation necessary to evaluate architectural decisions, challenge technical status quos, and champion rigorous engineering standards.
• Enterprise Autonomy: You are adept at operating with ultimate functional autonomy, translating high-level executive goals into clear execution roadmaps, managing operational budgets, and optimizing vendor ecosystems.
• Executive Communication: You possess exceptional communication skills, with a proven ability to translate deeply technical, high-risk security crises into calm, actionable, and risk-mitigated strategies for executive leadership and board members.

Qualifications/Requirements:

• Experience: A Bachelor’s or Master’s degree in Computer Science, Cyber Security, or equivalent; a minimum of 8–10+ years of progressive experience in Security Intelligence, Threat Intel, or Security Operations.
• Leadership: Minimum of 5 years of formal people-management experience, with a proven track record of leading multi-tiered teams or expanding a specialized security function at scale.
• Framework & Compliance Governance: Expert-level understanding of major security frameworks (e.g., NIST, MITRE ATT&CK, SAIF) with demonstrable experience leveraging them to build enterprise risk and defense metrics.
• Program Oversight: Proven experience overseeing enterprise-wide offensive security programs, including comprehensive red-teaming, external penetration testing, and continuous vulnerability disclosure protocols.
• Automation Architecture: Demonstrated success in funding, designing, or implementing advanced automation (SOAR, custom LLM integrations) to optimize large-scale incident workflows.

Security Product Researcher

Do you want to help make the world safe from cyber attack? 

At Corelight, we believe that the best approach to cybersecurity risk starts with the network.  Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats.  

Role

As an Security Product Researcher at Corelight, you will collaborate closely with product management, engineering, and network security experts to investigate, design, test, and construct solutions for complex network security challenges. You will play a pivotal role in defining what is achievable for future Corelight products and setting the benchmark for network detection in the cybersecurity landscape.

Responsibilities

• Turn theory into code with rapid prototyping. You will lead early development initiatives by coding and scripting rapid prototypes (using tools like Zeek, Suricata, and AI/LLMs) to prove that a problem can be solved before we commit engineering scale.
• Demonstrate a proven ability to utilize AI, including Large Language Models (LLMs) and agentic systems, for both software development and cybersecurity applications.
• Work in close partnership with leaders in product, research, and engineering on the forthcoming generation of network security AI products.
• Manage and advance projects from their initial concept to customer deployment and testing, demonstrating an ability to iterate quickly and effectively.
• Harness existing capabilities to find innovative ways to enhance the usability, deployment, and consumption of Corelight products.
• Cultivate new product ideas and features, driven by a strong sense of curiosity and a passion for innovation.
• Champion innovation within Corelight and its customer base.

Qualifications

• A strong dedication to our core values: low-ego results, tireless service, and applied curiosity.
• 5+ years of experience in agile development within a full-stack environment with demonstrated experience in LLM and agentic AI ecosystems.
• A solid grasp of the cybersecurity landscape, with a particular emphasis on network detection and response.
• The ability to work autonomously, manage multiple tasks, and iterate on solutions with speed and efficiency while proactively communicating progress, sharing updates without prompting, and building solutions in a transparent, followable way that keeps stakeholders informed at every stage.
• Understanding of computer networking, including layers 2-7 of the OSI model and their contributions to network operations and security.
• A thorough understanding of network security concepts, including encryption, protocol abuse, and patterns of attack.
• Understanding of security operations, threat hunting, and incident response procedures.
• Customer-centric communication skills for effective interaction both internally and with external stakeholders.

Preferred Qualifications

• Hands-on experience with Security Information and Event Management (SIEM) systems such as Splunk or Elastic.
• A strong background in adopting and utilizing Agile development methodologies and tools, with experience working in a distributed team environment.
• Exceptional communication skills, with a history of successful collaboration across UX, engineering, and product teams.
• Familiarity with data analytics, AI-assisted security decision-making, and automation.
• Education: A degree in Computer Science, Cybersecurity, or a related technical field (or equivalent practical experience).