Vectra Detection Engineer

GuidePoint Security LLC; Reston (VA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Remote workforce opportunities (US‑bas

Group medical insurance options

Group dental insurance

Holiday time off and flexible PTO

Mobile/home internet allowance

Job summary

GuidePoint Security LLC seeks a skilled VectraAI Integration Engineer to deploy, tune, and sustain sensors and Recall pipelines in on-premise environments. You will focus on network metadata, packet-level telemetry, and integration with SOC tooling, ensuring secure baselines in airgapped and enterprise data centers.

Required are an active TS/SCI clearance with polygraph, 5+ years in on-prem network engineering, and DoD 8570 certifications within 30 days.

Qualifications

• Active TS/SCI clearance and willingness to take a polygraph exam.
• 5+ years of hands-on on-premise network engineering or cybersecurity platform experience.
• Experience deploying NDR platforms (VectraAI preferred) in physical/virtual data centers.
• Strong knowledge of networks, metadata pipelines, and packet capture tooling.
• Ability to obtain DoD 8570 IAT Level III and CSSP-IS certifications within 30 days.

Responsibilities

• Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in on-premise networks.
• Integrate VectraAI with SIEM/SOAR/EDR, packet brokers, and analysis tools.
• Engineer sensor placement including SPANs, taps, and east-west visibility.
• Manage routing, VLANs, packet capture, and metadata transformation.
• Build monitoring dashboards and health checks for sensors and pipelines.
• Coordinate with operations teams to ensure telemetry ingestion and detection fidelity.

Skills

Network engineering

Linux

TCP/IP

Packet capture

Education

Bachelor’s degree or higher in a related field

Tools

VectraAI

Zeek

Suricata

Arkime

Endace

Job description

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

General Description

We are looking for a skilled an VectraAI Integration Engineer to deploy, tune, and sustain VectraAI Detect sensors and Recall pipelines in physical data centers, airgapped networks, and enterprise onpremise environments. This role focuses on network metadata, packetlevel telemetry, routing, sensor placement, and integration with onpremise SOC tooling.

About the Federal Region

GuidePoint Security is the trusted partner that defense and civilian government agencies rely on to lead their cybersecurity efforts and protect their organizations. We help solve their most complex security challenges, mature security architectures, and proactively reduce risk. Our purpose-built solutions ensure compliance, safeguard critical assets, and align security with organizational objectives. Backed by deep expertise, strong partnerships, and advanced technologies, we deliver scalable, adaptive capabilities that evolve with the threat landscape so Federal agencies can lead with confidence and protect what’s next.

Roles and Responsibilities

• Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in onpremise networks.
• Integrate VectraAI with onpremise SIEM/SOAR/EDR, packet brokers, and analysis tools.
• Engineer physical and virtual sensor placement including SPANs, taps, packet brokers, and eastwest segmentation visibility.
• Manage routing, VLANs, packet capture, and metadata transformation.
• Support STIG aligned configurations and secure baselines consistent with your onprem operating guidance
• Build monitoring dashboards, sensor health checks, and performance tuning workflows.
• Coordinate with operations teams to ensure reliable onprem telemetry ingestion and threat detection fidelity.

Required Experience and Education

• Active TS/SCI clearance; willingness to take a polygraph exam
• 5+ years of hands‑on experience with onpremise network engineering or cybersecurity platforms.
• Experience deploying NDR platforms (VectraAI preferred) in physical/virtual data center environments.
• Strong knowledge of TCP/IP, DNS, TLS, HTTP/S, NetFlow/IPFIX, packet capture, and metadata pipelines.
• Experience with Zeek, Suricata, Arkime, Endace, or similar packet analytics tools.
• Experience with hardened OS builds, secure enclaves, access controls, and network segmentation.
• Proficiency with Linux engineering and system operations.
• HS diploma or GED and 7+ years of experience with supporting IT projects and activities, Associate’s degree and 5+ years of experience supporting IT projects and activities, Bachelor’s degree and 3+ years of experience supporting IT projects and activities, or Master’s degree and 1+ years of experience supporting IT projects and activities.
• Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP certification within 30 days of start date
• Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support Certification (CSSP-IS), including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Preferred Experience and Education

• Experience integrating NDR telemetry into SOC pipelines in secure onprem environments.
• Experience in environments with strict access controls or Zero Trust requirements
• Familiarity with virtualization platforms, physical rack deployments, and packet brokers.
• Experience with incident response and threat hunting based on raw network metadata.
• Security certifications (GCIA, GNFA, CISSP, etc.).

Travel Requirements

• This position requires 100% onsite support in Reston, VA OR Washington, D.C.

Physical Requirements

• Sedentary work
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day
• If you have additional physical requirements/changes, please discuss with HR first

Applicants selected will be subject to a security investigation and must meet eligibility requirements for access to classified information.

We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.

Why GuidePoint?

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,300 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.

Firmly‑defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.

This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.

Some added perks

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on‑site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options))
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in GuidePoint Security’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service‑connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.