On-Prem NDR Integration Engineer (Vectra)

Booz Allen Hamilton; Washington (District of Columbia); Presencial; USD 69.000 - 158.000; Jornada completa

Descripción de la vacante

Booz Allen Hamilton seeks an experienced Vectra AI Integration Engineer to deploy, tune, and sustain sensors and pipelines in onpremise environments. You will focus on network metadata, packet telemetry, routing, and sensor placement while integrating with SIEM/SOAR/EDR tools.

The role requires 3+ years in onprem network engineering or cybersecurity and active TS/SCI clearance. You will work with Linux, STIG baselines, and DoD 8570 certifications within specified timeframes.

Formación

• 3+ years of experience with onpremise network engineering or cybersecurity platforms.
• Experience deploying Vectra AI or NDR platforms in physical or virtual data centers.
• Experience with packet analytics tools such as Zeek, Suricata, Arkime, or Endace.
• Experience with hardened OS builds, secure enclaves, access controls, and network segmentation.
• Experience with Linux engineering and system operations.
• Knowledge of TCP/IP, DNS, TLS, HTTP/S, NetFlow/IPFIX, packet capture, and metadata pipelines.
• Active TS/SCI clearance; willingness to take a polygraph exam.
• Ability to obtain DoD 8570 IAT Level III Certification within 60 days of start date.
• Ability to obtain CSSP-IS certification within 30 days of start date.

Responsabilidades

• Deploy and sustain Vectra AI sensors, collectors, and metadata pipelines in onpremise networks.
• Integrate Vectra AI with onpremise SIEM/SOAR/EDR, packet brokers, and analysis tools.
• Engineer physical and virtual sensor placement including SPANs, taps, packet brokers, and eastwest segmentation visibility.
• Manage routing, VLANs, packet capture, and metadata transformation.
• Support STIGaligned configurations and secure baselines.
• Build monitoring dashboards, sensor health checks, and performance tuning workflows.
• Coordinate with operations teams to ensure reliable onprem telemetry ingestion and threat detection fidelity.

Conocimientos

Onprem network engineering

Vectra AI/NDR deployment

Packet analytics tools

Secure enclaves and networkSeg

Linux engineering

TCP/IP/DNS/TLS/HTTP/S/NetFlow

TS/SCI clearance

DoD 8570 IAT certifications

DoD 8570 CSSP-IS certifications

Educación

HS diploma or GED with 7+ years IT experience

Associate's degree with 5+ years IT experience

Bachelor's degree with 3+ years IT experience

Master's degree with 1+ years IT experience

Herramientas

Vectra AI

Corelight

Stellar

Cortex

Falcon

RevealX

Descripción del empleo

Booz Allen Hamilton seeks an experienced Vectra AI Integration Engineer to deploy, tune, and sustain sensors and pipelines in onpremise environments. You will focus on network metadata, packet telemetry, routing, and sensor placement while integrating with SIEM/SOAR/EDR tools.

The role requires 3+ years in onprem network engineering or cybersecurity and active TS/SCI clearance. You will work with Linux, STIG baselines, and DoD 8570 certifications within specified timeframes.