Vectra Detection Engineer

VectraAI Engineer

General Description

We are looking for a skilled an VectraAI Integration Engineer to deploy, tune, and sustain VectraAI Detect sensors and Recall pipelines in physical data centers, airgapped networks, and enterprise onpremise environments. This role focuses on network metadata, packetlevel telemetry, routing, sensor placement, and integration with onpremise SOC tooling.

About the Federal Region

GuidePoint Security is the trusted partner that defense and civilian government agencies rely on to lead their cybersecurity efforts and protect their organizations. We help solve their most complex security challenges, mature security architectures, and proactively reduce risk. Our purpose-built solutions ensure compliance, safeguard critical assets, and align security with organizational objectives. Backed by deep expertise, strong partnerships, and advanced technologies, we deliver scalable, adaptive capabilities that evolve with the threat landscape so Federal agencies can lead with confidence and protect what’s next.

Roles and Responsibilities:

• Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in onpremise networks.
• Integrate VectraAI with onpremise SIEM/SOAR/EDR, packet brokers, and analysis tools.
• Engineer physical and virtual sensor placement including SPANs, taps, packet brokers, and eastwest segmentation visibility.
• Manage routing, VLANs, packet capture, and metadata transformation.
• Support STIG aligned configurations and secure baselines consistent with your onprem operating guidance
• Build monitoring dashboards, sensor health checks, and performance tuning workflows.
• Coordinate with operations teams to ensure reliable onprem telemetry ingestion and threat detection fidelity.

Required Experience and Education: 

• Active TS/SCI clearance; willingness to take a polygraph exam
• 5+ years of hands-on experience with onpremise network engineering or cybersecurity platforms.
• Experience deploying NDR platforms (VectraAI preferred) in physical/virtual data center environments.
• Strong knowledge of TCP/IP, DNS, TLS, HTTP/S, NetFlow/IPFIX, packet capture, and metadata pipelines.
• Experience with Zeek, Suricata, Arkime, Endace, or similar packet analytics tools.
• Experience with hardened OS builds, secure enclaves, access controls, and network segmentation.
• Proficiency with Linux engineering and system operations.
• HS diploma or GED and 7+ years of experience with supporting IT projects and activities, Associate’s degree and 5+ years of experience supporting IT projects and activities, Bachelor’s degree and 3+ years of experience supporting IT projects and activities, or Master’s degree and 1+ years of experience supporting IT projects and activities.
• Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP certification within 30 days of start date
• Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure
• Support Certification (CSSP-IS), including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Preferred Experience and Education

• Experience integrating NDR telemetry into SOC pipelines in secure onprem environments.
• Experience in environments with strict access controls or Zero Trust requirements
• Familiarity with virtualization platforms, physical rack deployments, and packet brokers.
• Experience with incident response and threat hunting based on raw network metadata.
• Security certifications (GCIA, GNFA, CISSP, etc.).

Travel Requirements

• This position requires 100% onsite support in Reston, VA OR Washington, D.C.

 Physical Requirements

• Sedentary work
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day
• If you have additional physical requirements/changes, please discuss with HR first

“Applicants selected will be subject to a security investigation and must meet eligibility requirements for access to classified information.”