Network Security AI Engineer (LLM & MCP)

Are you driven to conduct rapid experiments with the latest in artificial intelligence?

At Corelight, we hold a firm conviction that a robust cybersecurity posture begins with the network. While adversaries may bypass endpoint detection, firewalls, and other security layers, they cannot erase their digital footprints on the networks they traverse. Our solutions, built upon the open-source innovations of Zeek, Suricata, and YARA and refined through extensive real-world application, transform these network traces from physical, virtual, and cloud environments into actionable intelligence. Our clients leverage these insights to accelerate incident response and proactively hunt for threats.

We are assembling a premier, uniquely focused team to spearhead security product research and development through agile development and rigorous testing. The ideal candidate will possess strong analytical capabilities and a deep understanding of agentic AI solutions and experience in network security data. This individual will be instrumental in creating novel, rapid, and effective software security products utilizing cutting-edge technology, with a particular emphasis on agentic AI.

As Corelight is uniquely positioned to define the future of network detection and response, this role offers a significant opportunity to contribute to this evolution. In this position, you will have the chance to reflect a year from now and state with pride: "I was a key part of building that," and "We are generating insights that are unparalleled in the industry."

As an AI Engineer for MCP and LLM at Corelight, you will collaborate closely with product management, engineering, and network security experts to investigate, design, test, and construct AI solutions for complex network security challenges. You will play a pivotal role in defining what is achievable for future Corelight products and setting the benchmark for network detection in the cybersecurity landscape.

Responsibilities

• Develop and experiment with autonomous AI agents to automate threat detection, analysis, and response, thereby enhancing security workflows.

• Demonstrate a proven ability to utilize AI, including Large Language Models (LLMs) and agentic systems, for both software development and cybersecurity applications.

• Work in close partnership with leaders in product, research, and engineering on the forthcoming generation of network security AI products.

• Independently manage and advance projects from their initial concept to customer deployment and testing, demonstrating an ability to iterate quickly and effectively.

• Harness existing capabilities to find innovative ways to enhance the usability, deployment, and consumption of Corelight products.

• Cultivate new product ideas and features, driven by a strong sense of curiosity and a passion for innovation.

• Champion innovation within Corelight and its customer base.

Minimum Qualifications

• A strong dedication to our core values: low-ego results, tireless service, and applied curiosity.

• 3+ years of experience in agile development within a full-stack environment with demonstrated experience in LLM and agentic AI ecosystems.

• Proficiency in agentic AI programming, with a strong preference for Python.

• A solid grasp of the cybersecurity landscape, with a particular emphasis on network detection and response.

• The ability to work autonomously, manage multiple tasks, and iterate on solutions with speed and efficiency.

• Understanding of computer networking, including layers 2-7 of the OSI model and their contributions to network operations and security.

• A thorough understanding of network security concepts, including encryption, protocol abuse, and patterns of attack.

• Understanding of security operations, threat hunting, and incident response procedures.

• Customer-centric communication skills for effective interaction both internally and with external stakeholders.

Preferred Qualifications

• Hands-on experience with Security Information and Event Management (SIEM) systems such as Splunk or Elastic.

• A strong background in adopting and utilizing Agile development methodologies and tools, with experience working in a distributed team environment.

• Exceptional communication skills, with a history of successful collaboration across UX, engineering, and product teams.

• Familiarity with data analytics, AI-assisted security decision-making, and automation.

• Education: A degree in Computer Science, Cybersecurity, or a related technical field (or equivalent practical experience).

Fueled by investments from leading venture capital firms such as Crowdstrike, Accel, and Insight, Corelight is the most rapidly expanding network detection and response platform in the industry. Our customers entrust us with the protection of their mission-critical assets in top-tier enterprises, government agencies, and research institutions across the globe. We are pioneering the use of AI-assisted workflows, machine learning models, cloud security, and SaaS-based solutions to equip defenders with the tools and knowledge required to thwart cyber attacks. Our team of dedicated innovators is committed to solving some of the most formidable challenges in cybersecurity while cultivating a collaborative, inclusive, and growth-oriented culture.

Corelight is dedicated to maintaining a geographically distributed yet interconnected workforce, with employees operating from home and office locations worldwide. At Corelight, we take pride in our diverse backgrounds and perspectives, and we are unified by our robust shared culture and values.

We look forward to meeting you. Learn more about us at www.corelight.com.