Vectra Detection Engineer

GuidePoint Security, LLC; Reston (VA); Presencial; USD 120.000 - 160.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote workforce primarily (U.S. based

Group Medical Insurance

Group Dental Insurance

12 corporate holidays

Phone and home internet allowance

Retirement plan eligibility

Pet Benefit Option

Descripción de la vacante

GuidePoint Security in Reston, VA is seeking a VectraAI Integration Engineer to deploy, tune, and sustain sensors and metadata pipelines across on-premise data centers.

The role emphasizes network engineering, SIEM/SOAR/EDR integration, and secure baselines, with a TS/SCI clearance and readiness for DoD/federal environments.

Formación

• Active TS/SCI clearance; willingness to take a polygraph exam.
• 5+ years of hands-on experience with onpremise network engineering or cybersecurity platforms.
• Experience deploying NDR platforms (VectraAI preferred) in physical/virtual data center environments.
• Strong knowledge of TCP/IP, DNS, TLS, HTTP/S, NetFlow/IPFIX, packet capture, and metadata pipelines.
• Experience with Zeek, Suricata, Arkime, Endace, or similar packet analytics tools.
• Experience with hardened OS builds, secure enclaves, access controls, and network segmentation.
• Proficiency with Linux engineering and system operations.
• Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX, CCNP Security, CISA, CISSP within 30 days of start date.

Responsabilidades

• Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in onpremise networks.
• Integrate VectraAI with onpremise SIEM/SOAR/EDR, packet brokers, and analysis tools.
• Engineer physical and virtual sensor placement including SPANs, taps, packet brokers, and eastwest segmentation visibility.
• Manage routing, VLANs, packet capture, and metadata transformation.
• Support STIG aligned configurations and secure baselines consistent with your onprem operating guidance
• Build monitoring dashboards, sensor health checks, and performance tuning workflows.
• Coordinate with operations teams to ensure reliable onprem telemetry ingestion and threat detection fidelity.

Conocimientos

NDR platforms

VectraAI

Linux

Packet capture

Metadata pipelines

TCP/IP

DNS

Network segmentation

Onpremise networks

Educación

HS diploma or GED

Associate's degree

Bachelor's degree

Master's degree

Herramientas

Zeek

Suricata

Arkime

Endace

Packet brokers

SPANs/TAPs

Descripción del empleo

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation's top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

VectraAI Engineer

General Description

We are looking for a skilled an VectraAI Integration Engineer to deploy, tune, and sustain VectraAI Detect sensors and Recall pipelines in physical data centers, airgapped networks, and enterprise onpremise environments. This role focuses on network metadata, packetlevel telemetry, routing, sensor placement, and integration with onpremise SOC tooling.

About the Federal Region

GuidePoint Security is the trusted partner that defense and civilian government agencies rely on to lead their cybersecurity efforts and protect their organizations. We help solve their most complex security challenges, mature security architectures, and proactively reduce risk. Our purpose-built solutions ensure compliance, safeguard critical assets, and align security with organizational objectives. Backed by deep expertise, strong partnerships, and advanced technologies, we deliver scalable, adaptive capabilities that evolve with the threat landscape so Federal agencies can lead with confidence and protect what's next.

Roles and Responsibilities:

• Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in onpremise networks.
• Integrate VectraAI with onpremise SIEM/SOAR/EDR, packet brokers, and analysis tools.
• Engineer physical and virtual sensor placement including SPANs, taps, packet brokers, and eastwest segmentation visibility.
• Manage routing, VLANs, packet capture, and metadata transformation.
• Support STIG aligned configurations and secure baselines consistent with your onprem operating guidance
• Build monitoring dashboards, sensor health checks, and performance tuning workflows.
• Coordinate with operations teams to ensure reliable onprem telemetry ingestion and threat detection fidelity.

Required Experience and Education

• Active TS/SCI clearance; willingness to take a polygraph exam
• 5+ years of hands-on experience with onpremise network engineering or cybersecurity platforms.
• Experience deploying NDR platforms (VectraAI preferred) in physical/virtual data center environments.
• Strong knowledge of TCP/IP, DNS, TLS, HTTP/S, NetFlow/IPFIX, packet capture, and metadata pipelines.
• Experience with Zeek, Suricata, Arkime, Endace, or similar packet analytics tools.
• Experience with hardened OS builds, secure enclaves, access controls, and network segmentation.
• Proficiency with Linux engineering and system operations.
• HS diploma or GED and 7+ years of experience with supporting IT projects and activities, Associate's degree and 5+ years of experience supporting IT projects and activities, Bachelor's degree and 3+ years of experience supporting IT projects and activities, or Master's degree and 1+ years of experience supporting IT projects and activities.
• Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP certification within 30 days of start date
• Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure
• Support Certification (CSSP-IS), including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Preferred Experience and Education

• Experience integrating NDR telemetry into SOC pipelines in secure onprem environments.
• Experience in environments with strict access controls or Zero Trust requirements
• Familiarity with virtualization platforms, physical rack deployments, and packet brokers.
• Experience with incident response and threat hunting based on raw network metadata.
• Security certifications (GCIA, GNFA, CISSP, etc.).

Travel Requirements

• This position requires 100% onsite support in Reston, VA OR Washington, D.C.

Physical Requirements

• Sedentary work
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day
• If you have additional physical requirements/changes, please discuss with HR first

"Applicants selected will be subject to a security investigation and must meet eligibility requirements for access to classified information".

Why GuidePoint?

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,300 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.

Firmly-defined core values drive all aspects of the business, which have been paramount to the company's success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.

This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.

Some added perks....

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option