Job Description

Senior Backend Engineer - Investigator

Do you want to help make the world safe from cyber attack?

At Corelight, we believe that the best approach to cybersecurity risk starts with the network. Attackers can evade endpoint detection, firewalls and many other technologies - but they can’t avoid leaving digital footprints on the networks they traverse. Built on open-source innovations from Zeek, Suricata and YARA and refined through years of real-world use, Corelight transforms network footprints from physical, virtual and cloud networks into actionable insights. Our customers use these insights to speed incident response and proactively hunt for threats.

As a Senior Backend Engineer for our Investigator team, you will be a primary builder of the evidence-based security platform that elite defenders use to disrupt cyber attacks. You won’t just be writing code; you will be architecting the scalable, cloud-native systems that transform massive streams of network data into actionable intelligence. By bridging the gap between complex data pipelines and high-performance APIs, you will play a vital role in shaping the future of Corelight’s Open NDR SaaS platform and ensuring our customers stay ahead of the most sophisticated adversaries.

Specific Responsibilities:

• Architect Scalable Systems: Lead technical design discussions to build and operate elastic, secure microservices using AWS serverless architectures (Lambda, API Gateway).
• Engineer Data Pipelines: Design and maintain robust Machine Learning and Data Analytics pipelines, utilizing Apache Kafka or similar technologies for real-time data ingestion and transformation.
• Build High-Performance Interfaces: Develop REST and GraphQL services designed to interface with massive datasets, providing the backend power for a rich, data-heavy visual user interface.
• Drive End-to-End Ownership: Work within an Agile team to take features from initial design through to production deployment, monitoring, and iterative improvement.
• Champion Engineering Excellence: Evangelize and implement best practices for code health, testing stability, maintainability, and overall system quality.
• Collaborate Cross-Functionally: Partner with product and architecture teams to influence product direction and translate complex security requirements into reliable software solutions.

Knowledge/Skills/Abilities needed to be successful:

• Applied Curiosity: You have a deep-seated desire to understand the "why" behind complex system behaviors and a passion for learning new technologies in a fluid environment.
• Low-Ego Results: You prioritize team success and project outcomes over personal recognition, fostering a collaborative environment where the best idea wins.
• Technical Influence: You thrive on collaborating with multiple teams and use your communication skills to help steer the technical and product roadmap.
• High Agency: You are a proactive problem solver who takes end-to-end ownership of your work, ensuring that features are not just "done," but are stable and performant in production.

Qualifications/Requirements:

• Professional Experience: 7+ years of professional software development experience, ideally within a SaaS or cloud-focused environment.
• Backend Expertise: High proficiency in at least one core language (Python, Java, and/or Go) and experience with both Relational and NoSQL databases.
• Cloud Mastery: Hands-on experience building and deploying services using AWS (Lambda, API Gateway, DynamoDB, S3) or equivalent cloud providers.
• API Development: Proven track record of building REST or GraphQL APIs that support complex, data-intensive user interfaces.
• Methodology: Strong experience working in Agile development environments and a commitment to modern CI/CD practices.
• Education: Bachelor’s degree in Computer Science, a related field, or equivalent professional experience.
• Preferred Differentiators: Experience with Docker/Kubernetes, familiarity with search tools like Elasticsearch/Splunk, or knowledge of network-based security detections and attack techniques.

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is the fastest growing network detection and response platform in the industry. Our customers trust us to protect mission-critical assets in leading enterprises, government, and research institutions worldwide. We are leading the way with AI-assisted workflows, machine learning models, cloud security and SaaS-based solutions to arm defenders with the tools and knowledge they need to disrupt cyber attacks. Our team of passionate innovators are dedicated to solving some of the toughest challenges in cybersecurity, while fostering a collaborative, inclusive, and growth-oriented culture. Corelight is committed to a geographically distributed yet connected employee base with employees working from home and office locations around the world. At Corelight, we take pride in the diversity of our backgrounds and perspectives, and we are committed to fostering an inclusive environment that strengthens our company. By embracing a wide range of experiences, backgrounds, neurodiversity, talents, and approaches to problem-solving, we aim to create a workplace where everyone can thrive and contribute their best.

We are looking forward to meeting you. Check us out at www.corelight.com

Notice of Pay Transparency:
The compensation for this position may vary depending on factors such as your location, skills and experience. Depending on the nature and seniority of the role, a percentage of compensation may come in the form of a commission-based or discretionary bonus. Equity and additional benefits will also be awarded.

Compensation Range $145,000—$188,000 USD