Senior Security Software Engineer

Join ExtraHop as a Senior Security Software Engineer We are on a mission to empower organizations with total visibility and proactive security through our cutting-edge network detection and response (NDR) technology. Our NDR product stands out in the market, equipping our customers to swiftly detect, investigate, and respond to emerging threats.

Why ExtraHop? We pride ourselves on our innovation and recent accolades, including the Gartner Peer Insights award, which reflects our customers' trust in our solutions. If you are driven by technology, passionate about defending digital infrastructures, and eager to make a significant impact in cybersecurity, we want you on our team.

Position Overview: We are seeking a dynamic Senior Security Software Engineer to enrich our Detection Engineering (DE) team. You will play a pivotal role in extending ExtraHop's leading detection capabilities. The ideal candidate will possess solid software engineering, networking, and cybersecurity fundamentals complemented by expertise in modern Identity and Access Management (IAM). This position promotes collaboration with security researchers and data scientists to sculpt groundbreaking network threat detections drawing from both rule-based and ML-powered strategies.

What You'll Do:

• Detection Engineering:
  • Design and implement network threat detectors using rule-based and ML methodologies.
  • Replicate cyber-attacks in a lab setting with live tools and recorded PCAP traffic; perform threat hunts to discover malicious behaviors.
  • Collaborate with Threat Research and Data Science teams to leverage insights on adversary techniques and advanced machine learning models.
  • Aid infrastructure teams in enhancing tools utilized by Detection Engineering and Threat Research teams.
• Mentorship:
  • Guide and mentor fellow Security Engineers in detector development and emerging network threats.
  • Engage in code reviews to ensure high standards of quality and bolster the development skills of other engineers.

What We're Looking For:

• 5+ years of experience in software and/or detection engineering within a collaborative team setting.
• Proficiency in coding and deploying enterprise software applications, emphasizing code quality and maintainability.
• Comprehensive understanding of networking principles, including the OSI model, and a solid grasp of key protocols from Layer 2 to Layer 7.
• Experience with modern Identity and Access Management (IAM) protocols such as SAML and OIDC.
• Familiarity with network-oriented security tools like Wireshark, Tshark, tcpdump, Suricata, or Snort.

Preferred Skills:

• Proficiency in Javascript and Python.
• Awareness of current network-based threats and detection strategies, focusing on post-exploitation and data exfiltration techniques.
• In-depth knowledge of Windows protocols and associated attack methods.
• Experience in threat hunting, purple teaming, and log/traffic analysis.

Compensation: The salary for this role ranges from 150,000 to 180,000, plus bonus and benefits.

Why Work With Us? ExtraHop is the trusted partner in cybersecurity, helping enterprises unveil unknown threats. Our Reveal(x) 360 platform offers unparalleled network detection and response capabilities. We value our employees' wellbeing, offering a range of benefits including health, dental, and vision coverage, flexible PTO, educational reimbursement, and a supportive work-from-home policy.

We wholeheartedly believe in fostering a diverse workplace that reflects a variety of backgrounds, perspectives, and experiences. At ExtraHop, we know that success is built by diverse teams committed to learning and growing together. If you're excited about creating remarkable technology while contributing to a great culture, we look forward to hearing from you

Ready to join us? #Extrahop #Security #NDR #cybersecurity