Cato Networks is a pioneering company in cloud networking and security, seeking a highly technical Product Enablement Data Engineer. This role focuses on designing and managing realistic data feeds for their cloud-managed cybersecurity and networking platform, ensuring that the product demonstrates real-world behavior through various simulations and data generation processes.
Responsibilities:
- Create repeatable simulations of SaaS application traffic (e.g., collaboration tools like Zoom)
- Simulate network conditions including latency, jitter, packet loss, and bandwidth shaping
- Build traffic generators and orchestration workflows for repeatable demo and validation scenarios
- Design and implement data feeds aligned with frameworks such as MITRE ATT&CK
- Simulate intrusion techniques including:
- Lateral movement
- Command-and-control traffic
- Data exfiltration
- Brute force and credential abuse
- Build modular attack simulation libraries that can be triggered programmatically
- Validate product detection accuracy against simulated behaviors
- Configure our SaaS application to receive and process simulated traffic
- Use product APIs to:
- Provision SaaS tenant accounts
- Configure policies and features
- Retrieve telemetry and system status
- Automate SaaS configuration workflows
- Design, build, and maintain lightweight lab environments required to generate and deliver data
- Deploy and manage cloud-based infrastructure (primarily in Azure, AWS acceptable)
- Provision and configure virtual machines used for traffic generation and simulation
- Configure VPN clients and ensure connectivity into SaaS-managed environments
- Ensure lab environments are stable, repeatable, and easy to reset or rebuild
- Troubleshoot connectivity, system, and environment issues impacting data generation
- Maintain scalable infrastructure to support traffic generation and simulation workloads
- Support environment lifecycle management (setup, reset, teardown)
- Work with simple automation approaches to improve repeatability and reliability (scripts, templates, etc.)
- Build dashboards to monitor:
- Data feed health
- Telemetry completeness
- Detection triggers
- Endpoint and lab environment status
- Implement alerting for missing data or degraded environments
- Perform root-cause analysis when telemetry pipelines or lab environments fail
Requirements:
- 10+ years of experience in the networking or cybersecurity industry
- 5+ years of experience in data engineering, network engineering, or security engineering
- Strong programming skills in Python (required)
- Experience working with REST APIs and authentication workflows
- Experience building or working with security testing, attack simulation, or traffic generation workflows
- Hands-on experience with cloud platforms (Azure preferred)
- Experience generating network traffic using tools like Scapy, tcpreplay, iperf, or similar
- Strong working knowledge of Linux command-line environments, including networking tools (tcpdump, curl, ip, netstat)
- PowerShell scripting experience for automation of Windows systems and SaaS/API interactions
- Deep understanding of networking fundamentals (TCP/IP, DNS, HTTP/S, TLS)
- Experience configuring VPN clients and secure connectivity
- Familiarity with MITRE ATT&CK or other security frameworks
- Ability to independently own both data generation and the environments required to support it
- Experience with Terraform or other Infrastructure-as-Code tools
- Experience building or maintaining demo or enablement lab environments
- Experience simulating adversary behaviors in controlled environments
- Familiarity with traffic shaping tools (tc, netem)
- Experience with monitoring/observability platforms (Grafana, ELK, Prometheus)
- Networking or security certifications (e.g., CCNA, Security+)
- Experience working in SASE, networking, or cybersecurity product companies
- Experience with GraphQL APIs