Sr. Principal Security Engineer

We are ExtraHop. We're on a mission to provide security teams with the intelligence they need to confront and stop advanced threats like supply chain attacks, zero day exploits, and ransomware attacks. Cyber attackers still have the advantage. We’re taking it back with creativity, intellectual curiosity, and a sense of humor. Are you ready to help us reclaim the upper hand?

As a company, we’ve embraced machine learning and made it at the core of our product offering. The resulting ExtraHop platform is a novel approach to processing vast amounts of network data in order to detect cyber threats. Adversaries can try to evade or encrypt their attacks but there is no hiding from our Reveal(x) platform that dissects protocols and packets as they traverse the wire to identify attacks using advanced detection logic and algorithms.

Do you like complex problems? Want to be a part of a collaborative team that works on solving one of the most difficult problems, securing some of the biggest networks in the world? ExtraHop is seeking a Sr. Principal Security Engineer experienced with network security and applying machine learning techniques to detecting network threats. We are looking for a self-starter that is interested in working across the organization and across various technologies from machine learning to more traditional detection technologies. 

Duties & Responsibilities

• Collaborate with security engineers from multiple teams to diagnose problems, ideate solutions, and to design product features focusing mainly on threat detection  
• Continue to deepen your own security expertise on attack scenarios in order to contribute to algorithms and models responsible for detecting them
• Become an expert in ExtraHop’s platform and help troubleshoot issues reported by customers regarding detections
• Contribute to discussions about product direction and strategy
• Carryout independent experiments and prototyping to determine feasibility of solutions to complex engineering problems
• Mentor and teach less experienced engineers

Typical Candidate should have:

• Bachelor’s degree or equivalent experience in computer science, engineering, mathematics/statistics, cybersecurity, or other relevant fields
• Five or more years of professional experience in cybersecurity, engineering, data science and/or equivalent combination of education and experience in relevant fields
• Good understanding of malware analysis, threat intelligence, adversary behaviors, detection engineering, and/or other relevant area of cybersecurity
• Good understanding of network protocols
• Good understanding of network network vulnerabilities and attacks
• Proficient at programming in Python or other high-level languages
• Knowledge of basic computer science data structures and algorithms

Desirable Experience:

• Experience in building end-to-end machine learning systems and/or malware detection engines
• Experience in applying machine learning or statistical modeling to solve real-world problems
• Experience with common Windows protocols and/or other network protocols including IP, TCP, UDP, DNS, and HTTP
• Experience with various signature languages, such as YARA, JA3, Snort, ClamAV, etc.
• An understanding of various product-development life cycles
• An understanding of the theory behind machine learning models such as generalized linear models, classification, clustering, ensemble learning, time series analysis, graphical analysis, neural networks, etc.

$194,000- $263,600 + benefits+ options

ABOUT EXTRAHOP 

Cyberattackers have the advantage. ExtraHop is on a mission to help you take it back with security that can’t be undermined, outsmarted, or compromised. Our dynamic cyber defense platform, Reveal(x) 360, helps organizations detect and respond to advanced threats––before they compromise business operations. We apply cloud-scale AI to petabytes of traffic per day, performing line-rate decryption and behavioral analysis across all infrastructure, workloads, and data-in-flight. With complete visibility from ExtraHop, enterprises can detect malicious behavior, hunt advanced threats, and forensically investigate any incident with confidence.

ExtraHop is recognized by leading organizations for both its innovation in the market and its commitment to building a world-class team. In 2020, we’ve already been named a “Best Place to Work” by Inc., Computerworld, BuiltIn Seattle and Seattle Business Magazine, and we’ve been named to