VectraAI On-Prem NDR Integration Engineer

Booz Allen Hamilton; Washington (District of Columbia); On-site; USD 69,400 - 158,000; Full time

Job summary

Booz Allen Hamilton seeks a VectraAI Integration Engineer to deploy, tune, and sustain VectraAI Detect sensors and Recall pipelines in on-premise data centers and air-gapped networks. This role emphasizes network metadata, packet-level telemetry, routing, sensor placement, and SOC tooling integration.

You will deploy sensors, integrate with SIEM/SOAR/EDR, engineer placement, manage routing and metadata pipelines, and ensure STIG-aligned configurations and secure baselines while building

Qualifications

• 5+ years of on-premise network engineering or cybersecurity platform experience.
• Experience deploying NDR platforms in physical or virtual data centers.
• Knowledge of TCP/IP, DNS, TLS, HTTP/S, NetFlow/IPFIX and metadata pipelines.
• Active TS/SCI clearance with willingness to take a polygraph.

Responsibilities

• Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in on-prem networks.
• Integrate VectraAI with on-prem SIEM/SOAR/EDR, packet brokers, and analysis tools.
• Engineer sensor placement, including SPANs and taps for visibility.
• Manage routing, VLANs, packet capture, and metadata transformation.
• Support STIG-aligned configurations and secure baselines.
• Build monitoring dashboards and sensor health checks.
• Coordinate with operations to ensure telemetry ingestion and threat detection fidelity.

Skills

Network engineering

Cybersecurity platforms

NDR platforms

Packet analytics

Linux engineering

TCP/IP

TS/SCI clearance

DoD 8570 IAT Level III

DoD 8570 CSSP-IS

Education

Bachelor's degree or higher in IT/CS

Tools

Zeek

Suricata

Arkime

Endace

Job description

Booz Allen Hamilton seeks a VectraAI Integration Engineer to deploy, tune, and sustain VectraAI Detect sensors and Recall pipelines in on-premise data centers and air-gapped networks. This role emphasizes network metadata, packet-level telemetry, routing, sensor placement, and SOC tooling integration.

You will deploy sensors, integrate with SIEM/SOAR/EDR, engineer placement, manage routing and metadata pipelines, and ensure STIG-aligned configurations and secure baselines while building