Your Key Responsibilities

Corelight NDR administration & engineering

• Design, deploy, manage and maintain Corelight sensors across enterprise, cloud and data centre environments
• Develop and optimise network detection use cases leveraging Zeek, Suricata, Corelight Smart PCAP, threat intelligence integrations and YARA
• Ensure complete east-west and north-south traffic visibility
• Establish network baselines and anomaly detection capabilities
• Integrate Corelight with SIEM and SOC platforms
• Monitor health, performance and capacity of NDR infrastructure
• 
  

Detection engineering & threat hunting

• Develop and tune custom Corelight detections
• Create behavioural and anomaly-based detection use cases
• Conduct proactive threat hunting using network telemetry, DNS, HTTP and TLS logs, SMB activity and authentication traffic
• Implement MITRE ATT&CK aligned detection coverage
• Reduce false positives while improving detection fidelity
•