ZipRecruiter

Log In

1

Corelight Jobs in Virginia (NOW HIRING)

Phase2 Technology

Cyber Data Platform Architect

Mclean, VA · On-site

$86.80 - $198/hr

Experience with data lake and analytics platforms such as Databricks, Apache Iceberg, and Snowflake, and integrating EDR, NDR, and full-packet capture solutions, including CrowdStrike, Corelight, and ...

Phase2 Technology

Cyber Data Platform Architect

Reston, VA · On-site

$86.80 - $198/hr

Experience with data lake and analytics platforms such as Databricks, Apache Iceberg, and Snowflake, and integrating EDR, NDR, and full-packet capture solutions, including CrowdStrike, Corelight, and ...

All JobsCorelight JobsCorelight Jobs in Virginia

Corelight information

See Virginia salary details

$8

$25

$60

How much do corelight jobs pay per hour?

As of Aug 30, 2026, the average hourly pay for corelight in Virginia is $25.62, according to ZipRecruiter salary data. Most workers in this role earn between $14.73 and $29.92 per hour, depending on experience, location, and employer.

What is a Corelight engineer?

A Corelight Engineer is a professional who specializes in deploying, managing, and maintaining Corelight network security solutions. Corelight is a cybersecurity company known for its network detection and response (NDR) products, built on the open-source Zeek framework. Corelight Engineers typically work with enterprise security teams to monitor network traffic for threats, optimize detection capabilities, and integrate Corelight appliances with other security tools. Their responsibilities may also include troubleshooting issues, performing updates, and providing technical support.

What skills and qualifications are needed to thrive as a Corelight security engineer?

To thrive as a Corelight Security Engineer, you need a solid background in network security, intrusion detection, and experience with network traffic analysis, often supported by a degree in computer science or a related field. Familiarity with Corelight's network sensors, Zeek (formerly Bro), and common SIEM platforms, as well as relevant certifications like CISSP or GIAC, is typically required. Strong analytical thinking, problem-solving ability, and effective communication skills make someone stand out in this position. These skills are crucial for proactively identifying threats, optimizing security infrastructure, and clearly conveying findings to technical and non-technical stakeholders.

What are some typical challenges faced by security professionals working at Corelight, and how can these be managed effectively?

Security professionals at Corelight often deal with rapidly evolving threat landscapes and the need to analyze large volumes of network data in real time. Balancing proactive threat detection with minimizing false positives can be challenging, especially when customizing solutions for diverse client environments. Effective management involves staying updated on the latest threat intelligence, collaborating closely with engineering and product teams, and leveraging Corelight's robust open-source and commercial tools for continuous improvement. Open communication within the team and ongoing professional development are also key to overcoming these challenges.

What is the difference between Corelight vs Network Security Analyst?

AspectCorelightNetwork Security Analyst
Required CredentialsNetwork certifications (e.g., CompTIA Network+, CISSP), knowledge of network protocolsSecurity certifications (e.g., CISSP, CEH), network knowledge
Work EnvironmentSecurity operations centers, network monitoring environmentsCorporate IT departments, security teams, consulting firms
Employer & Industry UsageCybersecurity firms, large enterprises, government agenciesOrganizations with IT security needs across industries
Comparison IntentUnderstanding technical roles in network securityEvaluating security roles and responsibilities

Corelight specialists focus on deploying and managing network detection tools, analyzing network traffic, and enhancing security infrastructure. Network Security Analysts perform broader security monitoring, incident response, and vulnerability assessments. While both roles require network security knowledge and certifications, Corelight roles are more technical and tool-specific, whereas Network Security Analysts have a wider scope in security operations.

What are popular job titles related to Corelight jobs in Virginia?

For Corelight jobs in Virginia, the most frequently searched job titles are:

What job categories do people searching Corelight jobs in Virginia look for?

The top searched job categories for Corelight jobs in Virginia are:

Corelight jobs near you
Infographic showing various Corelight job openings in Virginia as of August 2026, with employment types broken down into 87% Full Time, and 13% Contract. Highlights an 94% In-person, and 6% Remote job distribution, with an average salary of $53,286 per year, or $25.6 per hour.

Network Based Systems Analyst III

Arlington, VA • On-site

DigiFlight, Inc.
IT Services • 51 - 200 employees
Learn more about DigiFlight, Inc.external

Full-time

Re-posted 11 days ago

Job description

Job Summary:
DigiFlight, Inc. is a company focused on providing exceptional support to its customers, and they are seeking a Network Based Systems Analyst III. The role involves assisting in incident response investigations, assessing network security concerns, and providing guidance on Computer Network Defense.
Responsibilities:
• Assists the Government lead in coordinating teams in preliminary incident response investigations
• Assists the Government lead with interfacing with the customer while on site
• Determines appropriate courses of actions in response to identified and analyses anomalous network activity
• Assesses network topology and device configurations identifying critical security concerns and providing security best practice recommendations
• Assists with the writing and publishing of Computer Network Defense guidance and reports on incident findings to appropriate constituencies
• Collects network intrusion artifacts (e.g., PCAP, domains, URI’s, certificates, etc.) and uses discovered data to enable mitigation of potential Computer Network Defense incidents
• Analyzes identified malicious network activity to determine weaknesses exploited, exploitation methods, effects on system and information
• Collects network device integrity data and analyze for signs of tampering or compromise
• Assists with real-time CND incident handling (i.e., forensic collections, intrusion correlation and tracking, threat analysis, and advising on system remediation) tasks to support onsite engagements
• Assist with developing analytic solutions for mapping network traffic back to Threat TTPs
• Provide input to the Government lead in developing processes, standards, WI’s, or SOPs
Qualifications:
Required:
• U.S. Citizenship
• Must have an active TS/SCI clearance
• Must be able to obtain DHS Suitability
• 5+ years of directly relevant experience in network investigations
• In depth knowledge of CND policies, procedures, and regulations
• In depth knowledge of TCP/IP protocols
• In depth knowledge of standard protocols – ICMP, HTTP/S, DNS, SSH, SMTP, SMB, NFS, etc.
• In depth knowledge and experience of Wifi networking
• In depth knowledge and experience of network topologies - DMZ’s, WAN’s, etc.
• Substantial knowledge of Splunk (or other SIEM’s)
• Understanding of MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&CK)
• Ability to characterize and analyze network traffic to identify anomalous activity and potential threats to network resources
• Ability to identify and analyze anomalies in network traffic using metadata
• Experience with reconstructing a malicious attack or activity based on network traffic
• Experience examining network topologies to understand data flows through the network
• Must be able to travel domestically on short notice
• Must be able to work collaboratively across physical locations
• BS Computer Science, Cyber Security, Computer Engineering, or related degree; or HS Diploma & 7-9 years of network investigations experience
Preferred:
• Substantial knowledge of network device integrity concepts and methodologies
• Proficiency with network analysis software (e.g., Wireshark)
• Proficiency with carving and extracting information from PCAP data
• Proficiency with non-traditional network traffic (e.g. Command and Control)
• Knowledge of ICS/OT protocols
• Substantial knowledge of Arkime
• Experience with network sensors (e.g., Corelight, Cisco FMC, Suricata)
Company:
DigiFlight, Inc. | 856 followers on LinkedIn. DigiFlight, Inc. Founded in 1999, the company is headquartered in Columbia, USA, with a team of 51-200 employees. The company is currently Growth Stage.

Apply