Vectra Detection Engineer
VectraAI Engineer
General Description
We are looking for a skilled an VectraAI Integration Engineer to deploy, tune, and sustain VectraAI Detect sensors and Recall pipelines in physical data centers, airgapped networks, and enterprise onpremise environments. This role focuses on network metadata, packetlevel telemetry, routing, sensor placement, and integration with onpremise SOC tooling.
About the Federal Region
GuidePoint Security is the trusted partner that defense and civilian government agencies rely on to lead their cybersecurity efforts and protect their organizations. We help solve their most complex security challenges, mature security architectures, and proactively reduce risk. Our purpose-built solutions ensure compliance, safeguard critical assets, and align security with organizational objectives. Backed by deep expertise, strong partnerships, and advanced technologies, we deliver scalable, adaptive capabilities that evolve with the threat landscape so Federal agencies can lead with confidence and protect what’s next.
Roles and Responsibilities:
Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in onpremise networks.
Integrate VectraAI with onpremise SIEM/SOAR/EDR, packet brokers, and analysis tools.
Engineer physical and virtual sensor placement including SPANs, taps, packet brokers, and eastwest segmentation visibility.
Manage routing, VLANs, packet capture, and metadata transformation.
Support STIG aligned configurations and secure baselines consistent with your onprem operating guidance
Build monitoring dashboards, sensor health checks, and performance tuning workflows.
Coordinate with operations teams to ensure reliable onprem telemetry ingestion and threat detection fidelity.
Required Experience and Education:
Active TS/SCI clearance; willingness to take a polygraph exam
5+ years of hands-on experience with onpremise network engineering or cybersecurity platforms.
Experience deploying NDR platforms (VectraAI preferred) in physical/virtual data center environments.
Strong knowledge of TCP/IP, DNS, TLS, HTTP/S, NetFlow/IPFIX, packet capture, and metadata pipelines.
Experience with Zeek, Suricata, Arkime, Endace, or similar packet analytics tools.
Experience with hardened OS builds, secure enclaves, access controls, and network segmentation.
Proficiency with Linux engineering and system operations.
HS diploma or GED and 7+ years of experience with supporting IT projects and activities, Associate’s degree and 5+ years of experience supporting IT projects and activities, Bachelor’s degree and 3+ years of experience supporting IT projects and activities, or Master’s degree and 1+ years of experience supporting IT projects and activities.
Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP certification within 30 days of start date
Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure
Support Certification (CSSP-IS), including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date
Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.
Preferred Experience and Education
Experience integrating NDR telemetry into SOC pipelines in secure onprem environments.
Experience in environments with strict access controls or Zero Trust requirements
Familiarity with virtualization platforms, physical rack deployments, and packet brokers.
Experience with incident response and threat hunting based on raw network metadata.
Security certifications (GCIA, GNFA, CISSP, etc.).
Travel Requirements
This position requires 100% onsite support in Reston, VA OR Washington, D.C.
Physical Requirements
Sedentary work
Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day
If you have additional physical requirements/changes, please discuss with HR first
“Applicants selected will be subject to a security investigation and must meet eligibility requirements for access to classified information.”