Security Engineer III, Security

Job Description

About the Role

Title: Security Engineer III, Security

Location: Remote

Do you like securing complex networks? Want to be a part of a collaborative team that builds solutions that protect some of the biggest networks in the world? ExtraHop is seeking a Software Engineer 3 | Security experienced with modern software development and infrastructure-as-code practices to build and operate the tools, pipelines, and lab infrastructure that allow us to keep pace with a rapidly changing landscape and deliver actionable insights to our customers at lightning speed.

We’re looking for candidates with a mix of software development and DevOps experience, who enjoy working in a collaborative environment and building tools to help developers and threat researchers work faster, smarter, and more efficiently.

You must have experience developing software tools in a collaborative setting, deploying to cloud environments, and developing IaC blueprints for modular, reusable environments using Infrastructure-as-Code, distributed source control, virtualization and container technologies.

Duties & Responsibilities

Support Threat Research and Detection Engineering teams by providing tools and automation to accelerate Research & Development.

Develop and maintain a scalable research lab using modern Infrastructure-as-Code and Cloud-based technologies

Develop and maintain internal systems, including but not limited to:

Software deployment pipelines supporting continuous software delivery

Pipelines for ingestion of new network identifiers to enable fingerprinting of device, software, and cloud services

Central detection engineering metadata repository

Continuous Testing and Validation pipelines

Work with a collaborative, dedicated and seasoned team of engineers

Required Skills & Experience

Bachelors degree or equivalent experience in computer science, engineering, or information technology

Solid understanding of the OSI model and excellent working knowledge of the key protocols from Layer 2 through Layer 7 including ARP, IP, TCP, UDP, and HTTP

Solid knowledge of Git, Python, Terraform, Ansible, and the use of scripting in support of CI/CD pipelines.

Ability to work in a shared code repository while maintaining existing coding standards

Experience deploying and maintaining systems using modern Orchestration and Infrastructure-as-Code technologies

Experience working with container-based environments (Docker, LXC, etc)

Experience using and managing virtual infrastructure for VMware, Hyper-V, Xen, and/or KVM.

Experience with Azure and AWS cloud platforms

Experience building scalable, performant, and cost-effective cloud-based systems

Desired Skills & Experience

Knowledge of Threat Research and/or Detection Engineering disciplines, for example:

Experience using tools such as wireshark, tcpdump, tcpreplay

Experience simulating malicious threats in an isolated environment and documenting outcomes

Experience developing network-based detections based on indicators of compromise

Experience working in an agile or Scaled-agile environment

All R&D Employees will be required to attend 2 mandatory in-person events every year of approx. 4 days duration.

$125,130 – $163,982 + bonus + benefits

Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or assume sponsorship of an employment Visa at this time.

Benefits/perks listed below may vary depending on the nature of your employment with ExtraHop and the country where you work.

Health, dental, and vision benefits

Honor System PTO and 9 Holidays (US only) + 3 Days of Paid Volunteer Time

Non-Commissioned positions are eligible to participate in annual discretionary bonus plan

FSA and Dependent Care Accounts + EAP where applicable

Educational Reimbursement

401k with employer match or Pension where applicable

Pet Insurance (US only)

Parental Leave (US Only)

Hybrid and Remote Work Model

*Candidates should note that the Company may modify reporting relationships, job titles and compensation, including commissions and benefits, from time to time at its sole discretion, as it deems necessary, with or without prior notice.