Security Software Engineer

Job Description

Proofpoint Threat Research team—encompassing Emerging Threats—investigates and creates protective measures against advanced malware and intrusion techniques used by cybercriminal and nation‑state actors. This role focuses on building and maintaining the scalable infrastructure, tooling, and hygienic analysis environments that enable researchers to move faster, see more, and detect better.

• Evaluate and support changes to the Threat Analysis environment.
• Analyze needs and create or support internal tools where appropriate.
• Support a team researching new and past threats, including malware, exploit kits, and vulnerabilities.

• Experience with network traffic inspection tools (Wireshark, tcpdump, Moloch, etc.).
• Familiarity with virtualization technologies (VMware, Virtual Box, KVM, etc.).
• Proficiency in one or more scripting languages;
  Lua and Python preferred.
• Experience with regular expressions/PCRE.
• Creativity and enthusiasm for the network threat space, and willingness to collaborate.
• Ability to work under broad strategic guidance.

• Experience building web applications (React preferred).
• RESTful API design and implementation.
• Database experience (PostgreSQL, Elasticsearch, or MongoDB).
• Data pipeline and ETL experience.
• Experience with containerization (Docker, Kubernetes).

This is a solution engineering position that sits at the intersection of threat research, detection engineering, and platform development. You’ll empower researchers with the tools they need to detect threats faster and more accurately.

• Competitive compensation and variable equity potential.
• Comprehensive benefits package.
• Flexible work environment, including a three‑week Work‑from‑Anywhere option.

We encourage applications from individuals of all backgrounds, experiences, and perspectives. If you need accommodation during the application or interview process, please reach out to