1

Corelight Jobs (NOW HIRING)

Corelight is a leading network detection and response platform dedicated to cybersecurity. As a Senior Backend Engineer for the Investigator team, you will architect scalable, cloud-native systems ...

Educate on Zeek Log use, including as it relates to Corelight Suricata alerts * Design and implement technical solutions with ecosystem partners (packet brokers, asset managers, SOAR systems, etc.

Senior Backend Engineer

$145K - $188K/yr

Be part of the team that defends the networks the world depends on Corelight defends the world's most sensitive networks-from global commerce to national defense-quietly, relentlessly, and with ...

next page

Showing results 1-20

Corelight information

See salary details

$8

$26

$61

How much do corelight jobs pay per hour?

As of Aug 29, 2026, the average hourly pay for corelight in the United States is $26.34, according to ZipRecruiter salary data. Most workers in this role earn between $15.14 and $30.77 per hour, depending on experience, location, and employer.

What is a Corelight engineer?

A Corelight Engineer is a professional who specializes in deploying, managing, and maintaining Corelight network security solutions. Corelight is a cybersecurity company known for its network detection and response (NDR) products, built on the open-source Zeek framework. Corelight Engineers typically work with enterprise security teams to monitor network traffic for threats, optimize detection capabilities, and integrate Corelight appliances with other security tools. Their responsibilities may also include troubleshooting issues, performing updates, and providing technical support.

What skills and qualifications are needed to thrive as a Corelight security engineer?

To thrive as a Corelight Security Engineer, you need a solid background in network security, intrusion detection, and experience with network traffic analysis, often supported by a degree in computer science or a related field. Familiarity with Corelight's network sensors, Zeek (formerly Bro), and common SIEM platforms, as well as relevant certifications like CISSP or GIAC, is typically required. Strong analytical thinking, problem-solving ability, and effective communication skills make someone stand out in this position. These skills are crucial for proactively identifying threats, optimizing security infrastructure, and clearly conveying findings to technical and non-technical stakeholders.

What are some typical challenges faced by security professionals working at Corelight, and how can these be managed effectively?

Security professionals at Corelight often deal with rapidly evolving threat landscapes and the need to analyze large volumes of network data in real time. Balancing proactive threat detection with minimizing false positives can be challenging, especially when customizing solutions for diverse client environments. Effective management involves staying updated on the latest threat intelligence, collaborating closely with engineering and product teams, and leveraging Corelight's robust open-source and commercial tools for continuous improvement. Open communication within the team and ongoing professional development are also key to overcoming these challenges.

What is the difference between Corelight vs Network Security Analyst?

AspectCorelightNetwork Security Analyst
Required CredentialsNetwork certifications (e.g., CompTIA Network+, CISSP), knowledge of network protocolsSecurity certifications (e.g., CISSP, CEH), network knowledge
Work EnvironmentSecurity operations centers, network monitoring environmentsCorporate IT departments, security teams, consulting firms
Employer & Industry UsageCybersecurity firms, large enterprises, government agenciesOrganizations with IT security needs across industries
Comparison IntentUnderstanding technical roles in network securityEvaluating security roles and responsibilities

Corelight specialists focus on deploying and managing network detection tools, analyzing network traffic, and enhancing security infrastructure. Network Security Analysts perform broader security monitoring, incident response, and vulnerability assessments. While both roles require network security knowledge and certifications, Corelight roles are more technical and tool-specific, whereas Network Security Analysts have a wider scope in security operations.

More about Corelight jobs

What states have the most Corelight jobs?

States with the most job openings for Corelight jobs include:

Infographic showing various Corelight job openings in the United States as of August 2026, with employment types broken down into 83% Full Time, 13% Part Time, and 4% Contract. Highlights an 87% Physical, and 13% Remote job distribution, with an average salary of $54,791 per year, or $26.3 per hour.

Full-time

This job post has expired 3 days ago. Applications are no longer accepted.


Job description

Job Summary:
Corelight is a leading network detection and response platform dedicated to cybersecurity. As a Senior Backend Engineer for the Investigator team, you will architect scalable, cloud-native systems and develop data pipelines that transform network data into actionable intelligence for elite defenders against cyber attacks.
Responsibilities:
• Architect Scalable Systems: Lead technical design discussions to build and operate elastic, secure microservices using AWS serverless architectures (Lambda, API Gateway).
• Engineer Data Pipelines: Design and maintain robust Machine Learning and Data Analytics pipelines, utilizing Apache Kafka or similar technologies for real-time data ingestion and transformation.
• Build High-Performance Interfaces: Develop REST and GraphQL services designed to interface with massive datasets, providing the backend power for a rich, data-heavy visual user interface.
• Drive End-to-End Ownership: Work within an Agile team to take features from initial design through to production deployment, monitoring, and iterative improvement.
• Champion Engineering Excellence: Evangelize and implement best practices for code health, testing stability, maintainability, and overall system quality.
• Collaborate Cross-Functionally: Partner with product and architecture teams to influence product direction and translate complex security requirements into reliable software solutions.
Qualifications:
Required:
• 7+ years of professional software development experience, ideally within a SaaS or cloud-focused environment.
• High proficiency in at least one core language (Python, Java, and/or Go) and experience with both Relational and NoSQL databases.
• Hands-on experience building and deploying services using AWS (Lambda, API Gateway, DynamoDB, S3) or equivalent cloud providers.
• Proven track record of building REST or GraphQL APIs that support complex, data-intensive user interfaces.
• Strong experience working in Agile development environments and a commitment to modern CI/CD practices.
• Bachelor's degree in Computer Science, a related field, or equivalent professional experience.
Preferred:
• Experience with Docker/Kubernetes.
• Familiarity with search tools like Elasticsearch/Splunk.
• Knowledge of network-based security detections and attack techniques.
Company:
Corelight is a cybersecurity company specializing in network traffic analysis (NTA) solutions. Founded in 2013, the company is headquartered in San Francisco, USA, with a team of 201-500 employees. The company is currently Growth Stage.