Network Detection Engineer (Corelight) - Secret Clearance

Zachary Piper Solutions is seekinga Network Detection Corelight Engineer to support a Continuous Diagnostics and Mitigation program for Department of Homeland Security remotely out of Fairfax, VA. The team is seeking a skilled security engineer to assist with the implementation and administration of Corelight services to support the enhancement and automation of existing continuous network monitoring capabilities for the agencies.

Clearance: Secret clearance, ability to obtain DHS/CISA EOD

Location: 100% remote, Fairfax, VA (must be local for occasional meetings)

This job opens for applications on 6/11/2026. Applications for this job will be accepted for at least 30 days from the posting date

Responsibilities of the Network Detection Engineer:

• Collaborate with a highly skilled team dedicated to developing next-generation security solutions for discovering, capturing, and managing endpoint data and IT assets.
• Act as a trusted advisor and technical authority in cybersecurity, driving innovation and expanding capabilities within existing engagements.
• Provide subject matter expertise across a range of security domains.
• Contribute to the design and scoping of complex, multi-vendor security architectures for large-scale networks.
• Execute IT tasks including system design, analysis, testing, debugging, and the implementation of integration scripts.
• Coordinate closely with customer delivery managers to align and prioritize daily operational tasks.
• Develop and maintain comprehensive documentation, including security configurations and Concept of Operations (CONOPS).
• Engage with cross-functional engineering teams and participate in technical discussions with agency specialists.
• Produce detailed technical documentation covering system design, configuration, and analytical findings.
• Identify and address data quality and coverage gaps in security tools by collaborating with agency experts and vendors.

Qualifications of the Network Detection Engineer:

• Secret clearance required
• Must be willing and able to pass a DHS background check to obtain a DHS/CISA EOD Clearance
• Bachelor's degree and 3-8 years experience (4+ years experience in lieu of formal degree)
• Hands on experience with CoreLight
• Experience with configuring, deploying and/or using network detection and response (NDR) tools
• Ability to manage and configure policies of network monitoring tools
• Ability to work closely with customer's network and operations team to resolve issues or security concerns of tools/services and with vendors in troubleshooting and resolving issues related to security tools
• Familiarity with approaches and tools for monitoring and analyzing network traffic, including passive monitoring, packet capture and inspection
• Knowledge of networking, firewalls, and Cloud environments.

Compensation of the Network Detection Engineer:

• Total compensation based on experience level - $120,000 - $135,000+ based on experience level
• Full Benefits: PTO, 11 Paid Holidays, Sick leave as required by state law, Cigna Medical, Dental, and Vision, 401k with ADP
• Certification reimbursement
• Fully remote work
• Contract mobility and job stability through Zachary Piper Solutions

Keywords: Threat detection, corelight, zero trust, zerotrust, engineer, engineering, forescout, netapp, netwitness, crowdstrike, splunk, qualys, cyber, secret, top secret, remote, topsecret, intrusion detection, vulnerability management, risk assessment, network detection, NDE, incident response, security operations, network security, endpoint protection, data loss prevention, identity and access management, zero trust architecture, firewalls, intrusion detection systems, intrusion prevention systems, SIEM, EDR, XDR, packet analysis, encryption protocols, scripting, cloud security, container security, vulnerability scanners, NIST cybersecurity framework, MITRE ATT&CK, ISO/IEC 27001, CIS Controls, SOC 2, PCI-DSS, HIPAA, CISSP, CEH, CISM, CompTIA Security+, OSCP, GSEC, CCSP, DoD, DHS, CISA, federal, CONOPS, Risk management, CDM, continuous diagnostics, mitigation, threat mitigation, SOC, security operations center, agile, cloud, aws, azure