Remote VectraAI Detection Engineer for Onprem NDR

GuidePoint Security LLC; Reston (VA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Remote workforce opportunities (US‑bas

Group medical insurance options

Group dental insurance

Holiday time off and flexible PTO

Mobile/home internet allowance

Job summary

GuidePoint Security LLC seeks a skilled VectraAI Integration Engineer to deploy, tune, and sustain sensors and Recall pipelines in on-premise environments. You will focus on network metadata, packet-level telemetry, and integration with SOC tooling, ensuring secure baselines in airgapped and enterprise data centers.

Required are an active TS/SCI clearance with polygraph, 5+ years in on-prem network engineering, and DoD 8570 certifications within 30 days.

Qualifications

• Active TS/SCI clearance and willingness to take a polygraph exam.
• 5+ years of hands-on on-premise network engineering or cybersecurity platform experience.
• Experience deploying NDR platforms (VectraAI preferred) in physical/virtual data centers.
• Strong knowledge of networks, metadata pipelines, and packet capture tooling.
• Ability to obtain DoD 8570 IAT Level III and CSSP-IS certifications within 30 days.

Responsibilities

• Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in on-premise networks.
• Integrate VectraAI with SIEM/SOAR/EDR, packet brokers, and analysis tools.
• Engineer sensor placement including SPANs, taps, and east-west visibility.
• Manage routing, VLANs, packet capture, and metadata transformation.
• Build monitoring dashboards and health checks for sensors and pipelines.
• Coordinate with operations teams to ensure telemetry ingestion and detection fidelity.

Skills

Network engineering

Linux

TCP/IP

Packet capture

Education

Bachelor’s degree or higher in a related field

Tools

VectraAI

Zeek

Suricata

Arkime

Endace

Job description

GuidePoint Security LLC seeks a skilled VectraAI Integration Engineer to deploy, tune, and sustain sensors and Recall pipelines in on-premise environments. You will focus on network metadata, packet-level telemetry, and integration with SOC tooling, ensuring secure baselines in airgapped and enterprise data centers.

Required are an active TS/SCI clearance with polygraph, 5+ years in on-prem network engineering, and DoD 8570 certifications within 30 days.