Senior On-Prem NDR & SIEM Engineer

Booz Allen Hamilton; Washington (District of Columbia); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking an experienced Integration Engineer to deploy and sustain VectraAI sensors and data pipelines in on‑prem environments. The role emphasizes network metadata, packet telemetry, and integration with on‑prem SOC tooling.

You will design sensor placement, manage routing and VLANs, and ensure secure baselines while coordinating with operations for reliable telemetry ingestion and threat detection fidelity.

Qualifications

• 5+ years of experience in on-premise network engineering or cybersecurity platforms.
• Experience deploying NDR platforms in data center environments, physical or virtual.
• Experience with Linux engineering and system operations.
• Familiarity with packet analytics tools (Zeek, Suricata, Arkime, Endace).
• Experience with secured baselines and STIG-aligned configurations.

Responsibilities

• Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in on-prem networks.
• Integrate VectraAI with on-prem SIEM, SOAR, or EDR and packet brokers.
• Engineer sensor placement and network visibility across data centers.
• Manage routing, VLANs, and packet capture.
• Support secure baselines and STIG-aligned configurations.
• Build monitoring dashboards and health checks for sensors.
• Coordinate with operations teams to ensure telemetry ingestion and threat detection fidelity.

Skills

NDR platforms experience

On-premise network engineering

Linux engineering

Packet analysis tools

Network metadata pipelines

Routing and VLANs

Security clearance TS/SCI

DoD 8570 readiness

Education

Bachelor's degree or higher in IT / cybersecurity

Tools

Zeek

Suricata

Arkime

Endace

Packet brokers

SIEM / SOAR

Job description

Booz Allen Hamilton is seeking an experienced Integration Engineer to deploy and sustain VectraAI sensors and data pipelines in on‑prem environments. The role emphasizes network metadata, packet telemetry, and integration with on‑prem SOC tooling.

You will design sensor placement, manage routing and VLANs, and ensure secure baselines while coordinating with operations for reliable telemetry ingestion and threat detection fidelity.