On‑Prem NDR & VectraAI Integration Engineer

Booz Allen Hamilton; Riverdale Park (MD); On-site; USD 69,400 - 158,000; Full time

Job summary

Booz Allen Hamilton seeks an experienced VectraAI Integration Engineer to deploy, tune, and sustain VectraAI Detect sensors and Recall pipelines in on‑prem environments. You will focus on network metadata, packet‑level telemetry, routing, and sensor placement, integrating with on‑prem SOC tooling.

Responsibilities include deploying sensors and pipelines, configuring SPANs and packet brokers, and coordinating with operations to ensure reliable ingestion and threat detection.

Qualifications

• 5+ years of on‑premise network engineering or cybersecurity platforms.
• Experience deploying NDR platforms in physical or virtual data centers.
• Experience with packet analytics tools such as Zeek, Suricata, Arkime, or Endace.
• Active TS/SCI clearance; willingness to take a polygraph exam.

Responsibilities

• Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in on‑premise networks.
• Integrate VectraAI with on‑premise SIEM, SOAR, or EDR, packet brokers, and analysis tools.
• Engineer physical and virtual sensor placement, including SPANs, taps, and packet brokers.
• Manage routing, VLANs, packet capture, and metadata transformation.
• Support STIG‑aligned configurations and secure baselines.
• Build monitoring dashboards, sensor health checks, and performance tuning workflows.
• Coordinate with operations teams to ensure reliable on‑prem telemetry ingestion and threat detection fidelity.

Skills

On‑prem network engineering

Cybersecurity platforms

NDR deployment

Zeek

Suricata

Arkime

Endace

Linux

TCP/IP

DNS/TLS/HTTPs

Education

HS diploma or GED / Associate’s / Bachelor’s / Master’s with IT experience

Tools

DoD 8570 IAT Level III

DoD 8570 CSSP-IS

Job description

Booz Allen Hamilton seeks an experienced VectraAI Integration Engineer to deploy, tune, and sustain VectraAI Detect sensors and Recall pipelines in on‑prem environments. You will focus on network metadata, packet‑level telemetry, routing, and sensor placement, integrating with on‑prem SOC tooling.

Responsibilities include deploying sensors and pipelines, configuring SPANs and packet brokers, and coordinating with operations to ensure reliable ingestion and threat detection.