Security Software Engineer

Job Description

The Proofpoint Threat Research team—including Emerging Threats—investigates and creates protective measures against advanced malware and intrusion techniques used by cybercriminal and nation‑state actors. To do this effectively, researchers rely on innovative tooling, scalable infrastructure, and hygienic analysis environments. This role focuses on building and maintaining those systems.

• Evaluate and support changes to our Threat Analysis environment.
• Analyze needs and create and support internal tools where appropriate.
• Support a team researching new and past threats, including malware, exploit kits, and vulnerabilities.

• Experience with network traffic inspection tools, such as Wireshark, tcpdump, Moloch, etc.
• Familiarity with virtualization technologies, such as VMware products, Virtual Box, KVM, etc.
• Experience with one or more scripting languages;
  Lua and Python proficiency preferred.
• Experience with regular expressions/PCRE.
• Creativity, enthusiasm for the network threat space, and a willingness to collaborate with the team.
• Must be able to work under broad strategic guidance.

• Experience building web applications (React preferred).
• RESTful API design and implementation.
• Database experience (Postgre
  
  SQL, ES, or Mongo
  
  DB).
• Data pipeline and ETL experience.
• Experience with containerization (Docker, Kubernetes).

This is a solution engineering role at the intersection of threat research, detection engineering, and platform development. You’ll enable researchers to move faster, see more, and detect better by creating and maintaining tools to help them help each other and our customers.

Proofpoint is an equal opportunity employer, we hire without consideration to race, religion, creed, color, national origin, age, gender, sexual orientation, marital status, veteran status or disability.