Be part of the team that defends the networks the world depends on

Corelight defends the world’s most sensitive networks—from global commerce to national defense—quietly, relentlessly, and with resolve. As cyber threats grow faster and smarter, we serve as the trusted force behind network resilience, putting elite defense within reach.

By transforming digital footprints from physical, virtual, and cloud networks into actionable insights, we empower defenders to illuminate blind spots and stay ahead of an evolving threat landscape. Built on open-source innovations and fueled by industry leading agentic AI technology, Corelight helps teams to detect advanced threats and close cases with unprecedented clarity and precision.

As a Senior Backend Engineer for our Investigator team, you will be a primary builder of the evidence-based security platform that elite defenders use to disrupt cyber attacks. You won’t just be writing code; you will be architecting the scalable, cloud-native systems that transform massive streams of network data into actionable intelligence. By bridging the gap between complex data pipelines and high-performance APIs, you will play a vital role in shaping the future of Corelight’s Open NDR SaaS platform and ensuring our customers stay ahead of the most sophisticated adversaries.

Specific Responsibilities:

Architect Scalable Systems: Lead technical design discussions to build and operate elastic, secure microservices using AWS serverless architectures (Lambda, API Gateway).
Engineer Data Pipelines: Design and maintain robust Machine Learning and Data Analytics pipelines, utilizing Apache Kafka or similar technologies for real-time data ingestion and transformation.
Build High-Performance Interfaces: Develop REST and GraphQL services designed to interface with massive datasets, providing the backend power for a rich, data-heavy visual user interface.
Drive End-to-End Ownership: Work within an Agile team to take features from initial design through to production deployment, monitoring, and iterative improvement.
Champion Engineering Excellence: Evangelize and implement best practices for code health, testing stability, maintainability, and overall system quality.
Collaborate Cross-Functionally: Partner with product and architecture teams to influence product direction and translate complex security requirements into reliable software solutions.

Knowledge/Skills/Abilities needed to be successful:

Applied Curiosity: You have a deep-seated desire to understand the "why" behind complex system behaviors and a passion for learning new technologies in a fluid environment.
Low-Ego Results: You prioritize team success and project outcomes over personal recognition, fostering a collaborative environment where the best idea wins.
Technical Influence: You thrive on collaborating with multiple teams and use your communication skills to help steer the technical and product roadmap.
High Agency: You are a proactive problem solver who takes end-to-end ownership of your work, ensuring that features are not just "done," but are stable and performant in production.

Qualifications/Requirements:

Professional Experience: 7+ years of professional software development experience, ideally within a SaaS or cloud-focused environment.
Backend Expertise: High proficiency in at least one core language (Python, Java, and/or Go) and experience with both Relational and NoSQL databases.
Cloud Mastery: Hands-on experience building and deploying services using AWS (Lambda, API Gateway, DynamoDB, S3) or equivalent cloud providers.
API Development: Proven track record of building REST or GraphQL APIs that support complex, data-intensive user interfaces.
Methodology: Strong experience working in Agile development environments and a commitment to modern CI/CD practices.
Education: Bachelor’s degree in Computer Science, a related field, or equivalent professional experience.
Preferred Differentiators: Experience with Docker/Kubernetes, familiarity with search tools like Elasticsearch/Splunk, or knowledge of network-based security detections and attack techniques.

Notice of Pay Transparency:
The compensation for this position may vary depending on factors such as your location, skills and experience. Depending on the nature and seniority of the role, a percentage of compensation may come in the form of a commission-based or discretionary bonus. Equity and additional benefits will also be awarded.

Compensation Range

$145,000—$188,000 USD

Why Join Us?

Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is one of the fastest growing network detection and response platforms in the industry. Our passionate team thrives in a collaborative, inclusive, and geographically distributed culture. We embrace diverse perspectives, neurodiversity, curiosity and low ego results - fostering an environment where every innovator can solve the toughest challenges in cybersecurity and contribute their best work.

We are looking forward to meeting you. Check us out at www.corelight.com