ExtraHop Subject Matter Expert (SME)

Who we are:

ShorePoint is a fast-growing, industry recognized and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a "work hard, play hard" mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion and a focus on giving back to our community.

The Perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation's critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 18 days of PTO, 11 holidays, 80% of insurance premium covered, 401k, continued education, certifications maintenance and reimbursement, etc.

Who we're looking for:

We're looking for an experienced ExtraHop Subject Matter Expert (SME) to lead the implementation, management and optimization of our ExtraHop platform. This role focuses on leveraging network performance monitoring and security analytics to extract actionable insights and enhance infrastructure efficiency. The ExtraHop SME will play a critical role in improving application performance and strengthening our overall security posture. This role provides an opportunity to contribute to a high impact cybersecurity mission supporting federal infrastructure and operations.

What you'll be doing:

• Serve as the primary point of contact and technical authority for all matters related to the ExtraHop platform.
• Lead the planning, design, implementation, configuration and integration of the ExtraHop deployment.
• Develop and implement best practices for utilizing ExtraHop in network performance monitoring, application performance management (APM) and security investigations.
• Create and customize dashboards, alerts, reports and triggers to support the needs of teams across Network, Security and Applications.
• Proactively monitor the ExtraHop environment to ensure optimal performance, scalability and operational health.
• Troubleshoot complex issues related to network and application performance, as well as security incidents, using ExtraHop data.
• Collaborate with Network Engineering, Security Operations, Application Development and IT Operations teams to deliver data-driven insights and recommendations.
• Develop and maintain documentation on ExtraHop configurations, processes and system architecture.
• Provide training and knowledge transfer to team members on effective use of the ExtraHop platform.
• Stay current with ExtraHop features and enhancements and proactively recommend and implement improvements.
• Coordinate with ExtraHop support and professional services to resolve issues and integrate new functionalities.
• Contribute to the development and refinement of security policies and procedures informed by ExtraHop insights.
• Support capacity planning and forecasting efforts for the ExtraHop environment.

What you need to know:

• Working knowledge of network and application performance monitoring methodologies.
• Ability to develop data-driven insights to support IT operations, cybersecurity and application teams.
• Familiarity with SIEM and SOAR platforms for correlated threat detection and automated response.
• Understanding of how to align ExtraHop capabilities with security policy development and operational processes.
• Adaptability to stay current with evolving ExtraHop features, updates and best practices.
• Effective collaboration skills across multidisciplinary technical teams.
• Strong documentation and knowledge-sharing capabilities to support team development.

Must have's:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Mathematics, Engineering or a related field
• 3+ years of experience as an ExtraHop administrator or subject matter expert.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Proven ability to design, implement and manage large-scale ExtraHop deployments.
• Hands-on experience with ExtraHop Reveal(x) and other ExtraHop modules.
• Deep understanding of network protocols (TCP/IP, DNS, HTTP), network infrastructure (routers, switches, firewalls, load balancers) and application architectures.
• Experience creating custom dashboards, alerts and reports within ExtraHop.
• Strong analytical and problem-solving skills with the ability to translate complex data into actionable insights.
• Familiarity with security concepts, threat detection methodologies and SIEM platforms such as Splunk.
• Experience integrating ExtraHop with tools like Splunk, Splunk SOAR and Palo Alto firewalls.
• Excellent written and verbal communication skills, with the ability to explain technical concepts to both technical and non-technical audiences.
• Ability to work independently and collaboratively within a team environment.
• U.S. citizenship required for federal compliance and eligibility to obtain and maintain agency required clearance.

Beneficial to have the following:

• ExtraHop certification(s), such as ExtraHop Certified Administrator.
• Experience integrating ExtraHop with security and IT tools including Splunk SOAR and Palo Alto firewalls.
• Familiarity with scripting languages such as Python for automation and data manipulation.

Where it's done:

• Hybrid with ability to travel to customer site minimum 2-3 days per week (Rockville, MD).