Remote Detection Engineer: AI-Driven Threat Detection

GuidePoint Security, LLC; Chantilly (VA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Remote work

Medical insurance options

Flexible time off

Internet allowance

Retirement plan eligibility

Pet Benefit Option

Job summary

GuidePoint Security is expanding its federal Presales engineering team and seeks technically exceptional engineers who thrive at the intersection of federal mission and cybersecurity technology. This role supports Vectra's Attack Signal Production Group, building core threat detection technology using AI for networks, cloud, and hybrid environments.

You will implement and maintain architecture, analyze traffic for threat patterns, and collaborate with data scientists to advance AI-driven

Qualifications

• Active TS/SCI clearance is required or eligible.
• Proven background in network traffic analysis and threat detection.
• Familiarity with MITRE ATT&CK framework and attacker behaviors.

Responsibilities

• Implement and maintain architecture.
• Analyze network traffic to identify and document threat patterns.
• Develop and maintain network-based security signatures (e.g., Suricata).
• Use offensive security tools and techniques to simulate attacks and generate sample network traffic for testing detections.
• Collaborate with data scientists and security researchers to support AI-driven detection efforts and improve accuracy.
• Continuously monitor and tune the effectiveness of network detections, adjusting as needed.
• Contribute to threat hunting by identifying new attacker TTPs.
• Participate in incident response activities when required.

Skills

Threat detection

Data scientist collaboration

Offensive security

MITRE ATT&CK familiarity

Networking protocols

Education

Cybersecurity experience

Certifications optional (OSCP/GCIA/GCDA/GSEC)

Tools

Suricata

Job description

GuidePoint Security is expanding its federal Presales engineering team and seeks technically exceptional engineers who thrive at the intersection of federal mission and cybersecurity technology. This role supports Vectra's Attack Signal Production Group, building core threat detection technology using AI for networks, cloud, and hybrid environments.

You will implement and maintain architecture, analyze traffic for threat patterns, and collaborate with data scientists to advance AI-driven