About the role
Be part of the team that defends the networks the world depends on
Corelight defends the world’s most sensitive networks—from global commerce to national defense—quietly, relentlessly, and with resolve. As cyber threats grow faster and smarter, we serve as the trusted force behind network resilience, putting elite defense within reach.
By transforming digital footprints from physical, virtual, and cloud networks into actionable insights, we empower defenders to illuminate blind spots and stay ahead of an evolving threat landscape. Built on open-source innovations and fueled by industry leading agentic AI technology, Corelight helps teams to detect advanced threats and close cases with unprecedented clarity and precision.
As an Escalation Engineer, you are the critical bridge between our customers' most complex technical challenges and our innovative engineering solutions. You aren't just resolving support cases; you are ensuring that the world's most sensitive organizations have the visibility they need to disrupt attacks. By mastering everything from Linux internals to cloud networking, you serve as a technical champion who ensures Corelight's "evidence" remains the gold standard for defenders worldwide.
Specific Responsibilities:
- Drive Technical Resolution: Serve as the primary point of contact for complex customer escalations and Proof of Concepts (POCs), ensuring successful outcomes for mission-critical issues.
- Deep-Dive Troubleshooting: Conduct advanced root cause analysis (RCA) involving Linux internals, hardware performance, and intricate network topologies.
- Manage High-Stakes Cases: Orchestrate and drive multiple high-priority cases simultaneously, maintaining focus and urgency under pressure.
- Internal Advocacy: Act as a liaison between the field and HQ, translating customer requirements into structured, actionable feedback for Engineering and Product Management.
- Deliver Excellence: Provide regular, transparent status updates to stakeholders and customers, adhering strictly to defined SLAs while offering best-practice guidance for Corelight solutions.
- Network Optimization: Identify underlying issues and recommend architectural or configuration changes to customer networks to improve product reliability and performance.
Knowledge/Skills/Abilities needed to be successful:
- A Customer-First Mindset: A relentless drive to advocate for the customer and see problems through to a successful conclusion.
- Clear Communication: The ability to articulate complex technical concepts—both verbally and in writing—to audiences ranging from SOC analysts to executive leadership.
- Collaborative Resourcefulness: A proven ability to work cross-functionally and thrive in a fluid, high-growth environment.
- Operational Readiness: Flexibility to participate in a rotational on-call schedule (including nights/weekends) to support global, high-priority customer needs.
Qualifications/Requirements:
- Experience: 5+ years in a hands-on technical role focusing on post-sales support (troubleshooting, sysadmin, or network security).
- Technical Depth: Strong proficiency in UNIX/Linux administration, including performance monitoring, kernel-level tracing, and debugging system calls.
- Networking Expertise: Deep understanding of TCP/IP fundamentals, routing/switching, and common protocols (VLANs, NAT, VPNs).
- Cloud & Virtualization: Proven experience troubleshooting cloud networking (AWS, Azure, GCP) and virtualization platforms (ESXi, Hyper-V).
- Education: BS/BA or equivalent in a relevant field (CS, EE, MIS).
- Preferred Skills: Familiarity with Zeek scripting, Python, packet capture utilities (Wireshark/tcpdump), and expert-level protocol knowledge (SMB, HTTP, TLS/SSL). Security certifications (CISSP, GIAC) are a plus.
Notice of Pay Transparency:
The compensation for this position may vary depending on factors such as your location, skills and experience. Depending on the nature and seniority of the role, a percentage of compensation may come in the form of a commission-based or discretionary bonus. Equity and additional benefits will also be awarded.
Why Join Us?
Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is one of the fastest growing network detection and response platforms in the industry. Our passionate team thrives in a collaborative, inclusive, and geographically distributed culture. We embrace diverse perspectives, neurodiversity, curiosity and low ego results - fostering an environment where every innovator can solve the toughest challenges in cybersecurity and contribute their best work.
We are looking forward to meeting you. Check us out at www.corelight.com
Aplyr's read
Corelight is a cybersecurity firm leveraging Zeek technology to enhance network visibility, attracting professionals passionate about cutting-edge threat detection and response solutions.
What's promising
- •Corelight's solutions are built on the robust, open-source Zeek platform.
- •The company is expanding globally, with roles in regions like UAE and DACH.
- •Recent hires across diverse roles indicate a commitment to growth and innovation.
What to watch
- •Competitive cybersecurity market may challenge Corelight's market share.
- •Dependence on Zeek technology could limit flexibility in product development.
- •Expansion into diverse regions may strain resources and operational focus.
Why Corelight
- •Corelight uniquely integrates open-source technology with commercial solutions.
- •Focus on network visibility offers a distinct niche in cybersecurity.
- •The company emphasizes a blend of technical and sales expertise in its workforce.
Aplyr’s read is generated by AI from public sources. Was it useful?
About Corelight
Corelight provides network visibility solutions powered by open-source Zeek technology, enabling organizations to detect and respond to cybersecurity threats effectively.
