Threat Detection Engineer - Remote, TS/SCI

GuidePoint Security; Chantilly (VA); On-site; USD 120,000 - 155,000; Full time

Benefits offered by this job

Remote work

Group health insurance

Competitive 401(k)

Generous PTO

Cell phone and internet stipend

Travel opportunities

Pet benefits

Job summary

GuidePoint Security is seeking technically exceptional engineers to join its federal Presales engineering team. You will apply threat detection and network analysis skills to support government agencies and Fortune 500 clients, helping them choose best-fit security solutions.

This role emphasizes hands-on work with Suricata, security architectures, and collaboration with data scientists to improve AI-driven detections, with TS/SCI clearance preferred and a remote-first work model.

Qualifications

• Active TS/SCI clearance preferred or required for federal roles.
• Strong background in network traffic analysis and threat detection.
• Hands-on experience with Suricata and signature-based detection.
• Familiarity with MITRE ATT&CK framework and attacker behaviors.

Responsibilities

• Implement and maintain architecture.
• Analyze network traffic to identify and document threat patterns.
• Develop and maintain network-based security signatures (e.g., Suricata).
• Use offensive security tools to simulate attacks and generate sample traffic for testing detections.
• Collaborate with data scientists and security researchers to improve AI-driven detections.
• Monitor and tune effectiveness of network detections; adjust as needed.
• Contribute to threat hunting by identifying new attacker TTPs.
• Participate in incident response activities when required.

Skills

TS/SCI Clearance

Threat detection

Network traffic analysis

Offensive security

MITRE ATT&CK

Collaboration with data scientists

Networking protocols

Security concepts (L3-L7)

Education

Relevant cybersecurity experience

Certifications such as OSCP/GCIA/GCDA/GSEC

Tools

Suricata

Job description

GuidePoint Security is seeking technically exceptional engineers to join its federal Presales engineering team. You will apply threat detection and network analysis skills to support government agencies and Fortune 500 clients, helping them choose best-fit security solutions.

This role emphasizes hands-on work with Suricata, security architectures, and collaboration with data scientists to improve AI-driven detections, with TS/SCI clearance preferred and a remote-first work model.