> Markdown version of [/jobs/ext/673249-professional-services-engineer](https://www.wearedevelopers.com/jobs/ext/673249-professional-services-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Professional Services Engineer

- **Company:** Corelight, Inc.
- **Location:** United States
- **Experience:** Expert
- **Salary:** $124,000.0 - $160,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Apple Mac Systems, Bash Shell, Perl (Programming Language), Intrusion Detection Systems, Python (Programming Language), Network Administration, Windows PowerShell, Logstash, Security Information and Event Management, TCP/IP, Scripting, Computer Networking Systems, Apache Kafka, Firewall Services Module, Splunk
- **Published:** June 27, 2026
- **Apply:** https://www.dice.com/job-detail/19911732-a0ec-4990-a81a-1dcdb3981597

## About the Role

* 5+ years of experience in cybersecurity (Prior startup experience preferred)
 * Extensive experience with a SOC environment
 * Zeek/Corelight experience is a plus
 * Security and/or Networking related certification(s)
 * Demonstrated expertise in Windows/MacOS/Linux/Unix operating systems, IDS/IPS,
 * Network administration, firewall configuration, and strong knowledge of TCP/IP
 * SIEM experience (Splunk required, others a bonus)
 * Scripting in (some of) Zeek, Bash, Python, Perl, Powershell, etc.
 * Strong briefing skills; experience interacting with SES/general officer-level management

## Description

We are currently seeking a Staff Resident PSE to join our Federal Professional Services team, reporting to the manager of Professional Services. In this role, the main focus is to prepare and validate equipment configurations for new installations, develop content for anomaly and hunt detections, assess the overall health of the Corelight infrastructure at the client's location. You're the ideal candidate if you are a strategic thinker with a strong networking and security background, work well independently, and are results-driven., * Help customers improve their cybersecurity posture, with a particular focus on process
optimization

 * Help investigate incidents
 * Educate on Zeek Log use, including as it relates to Corelight Suricata alerts
 * Design and implement technical solutions with ecosystem partners (packet brokers,
asset managers, SOAR systems, etc.)

 * Implement queries and dashboards in SIEMs - Splunk, Elastic, Humio, etc.
 * Influence customers and Corelight teams and be seen as a technical expert
 * Conduct network-related testing to ensure Corelight products operate correctly
 * Perform validation testing of Corelight products
 * Provide ongoing, informal, knowledge transfer
 * Collaborate with product management on product features/integrations
 * Work with back-end tools like Kafka and Logstash
 * Documenting the process for importing of data (MISP, Intel, etc)
 * Developing custom content for threat hunting use cases as defined by the customer
 * Developing playbooks for SOC/IR workflow automation based on Corelight data
 * Ad-hoc (as requested) written summary reports on equipment and security problems
 * Technical input to major service outage root cause analysis and corrective action reports
 * Leading project status meetings and wrap-up/post-mortem meetings
 * Some on-site work required


## Related Videos

- [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Debunking the Top 10 Myths about Web 3](https://www.wearedevelopers.com/videos/634-debunking-the-top-10-myths-about-web-3)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)