Cato Networks is a pioneer in cloud networking and security, seeking a highly technical Product Enablement Data Engineer to design and manage data feeds for their cybersecurity and networking platform. The role focuses on traffic generation, attack simulation, and managing lab environments to ensure realistic product demonstrations and customer experiences.
Responsibilities:
- Create repeatable simulations of SaaS application traffic (e.g., collaboration tools like Zoom)
- Simulate network conditions including latency, jitter, packet loss, and bandwidth shaping
- Build traffic generators and orchestration workflows for repeatable demo and validation scenarios
- Design and implement data feeds aligned with frameworks such as MITRE ATT&CK
- Simulate intrusion techniques including:
- Lateral movement
- Command-and-control traffic
- Data exfiltration
- Brute force and credential abuse
- Build modular attack simulation libraries that can be triggered programmatically
- Validate product detection accuracy against simulated behaviors
- Configure our SaaS application to receive and process simulated traffic
- Use product APIs to:
- Provision SaaS tenant accounts
- Configure policies and features
- Retrieve telemetry and system status
- Automate SaaS configuration workflows
- Design, build, and maintain lightweight lab environments required to generate and deliver data
- Deploy and manage cloud-based infrastructure (primarily in Azure, AWS acceptable)
- Provision and configure virtual machines used for traffic generation and simulation
- Configure VPN clients and ensure connectivity into SaaS-managed environments
- Ensure lab environments are stable, repeatable, and easy to reset or rebuild
- Troubleshoot connectivity, system, and environment issues impacting data generation
- Maintain scalable infrastructure to support traffic generation and simulation workloads
- Support environment lifecycle management (setup, reset, teardown)
- Work with simple automation approaches to improve repeatability and reliability (scripts, templates, etc.)
- Build dashboards to monitor:
- Data feed health
- Telemetry completeness
- Detection triggers
- Endpoint and lab environment status
- Implement alerting for missing data or degraded environments
- Perform root-cause analysis when telemetry pipelines or lab environments fail
Requirements:
- 10+ years of experience in the networking or cybersecurity industry
- 5+ years of experience in data engineering, network engineering, or security engineering
- Strong programming skills in Python (required)
- Experience working with REST APIs and authentication workflows
- Experience building or working with security testing, attack simulation, or traffic generation workflows
- Hands-on experience with cloud platforms (Azure preferred)
- Experience generating network traffic using tools like Scapy, tcpreplay, iperf, or similar
- Strong working knowledge of Linux command-line environments, including networking tools (tcpdump, curl, ip, netstat)
- PowerShell scripting experience for automation of Windows systems and SaaS/API interactions
- Deep understanding of networking fundamentals (TCP/IP, DNS, HTTP/S, TLS)
- Experience configuring VPN clients and secure connectivity
- Familiarity with MITRE ATT&CK or other security frameworks
- Ability to independently own both data generation and the environments required to support it
- Experience with Terraform or other Infrastructure-as-Code tools
- Experience building or maintaining demo or enablement lab environments
- Experience simulating adversary behaviors in controlled environments
- Familiarity with traffic shaping tools (tc, netem)
- Experience with monitoring/observability platforms (Grafana, ELK, Prometheus)
- Networking or security certifications (e.g., CCNA, Security+)
- Experience working in SASE, networking, or cybersecurity product companies
- Experience with GraphQL APIs