Nod CareersAuto-apply free

Vectra Detection Engineer

guidepointsecurity · Reston, VA · Federal
Auto-apply to this job with Nod →
<div class="content-intro"><p>GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.</p></div><p> </p> <p><strong><u>VectraAI Engineer</u></strong></p> <p><strong><u>General Description </u></strong></p> <p>We are looking for a skilled an VectraAI Integration Engineer to deploy, tune, and sustain VectraAI Detect sensors and Recall pipelines in physical data centers, airgapped networks, and enterprise onpremise environments. This role focuses on network metadata, packetlevel telemetry, routing, sensor placement, and integration with onpremise SOC tooling.</p> <p><strong><u>About the Federal Region</u></strong></p> <p>GuidePoint Security is the trusted partner that defense and civilian government agencies rely on to lead their cybersecurity efforts and protect their organizations. We help solve their most complex security challenges, mature security architectures, and proactively reduce risk. Our purpose-built solutions ensure compliance, safeguard critical assets, and align security with organizational objectives. Backed by deep expertise, strong partnerships, and advanced technologies, we deliver scalable, adaptive capabilities that evolve with the threat landscape so Federal agencies can lead with confidence and protect what’s next.</p> <p><strong><u>Roles and Responsibilities:</u></strong><strong>   </strong></p> <ul> <li>Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in onpremise networks.</li> <li>Integrate VectraAI with onpremise SIEM/SOAR/EDR, packet brokers, and analysis tools.</li> <li>Engineer physical and virtual sensor placement including SPANs, taps, packet brokers, and eastwest segmentation visibility.</li> <li>Manage routing, VLANs, packet capture, and metadata transformation.</li> <li>Support STIG aligned configurations and secure baselines consistent with your onprem operating guidance</li> <li>Build monitoring dashboards, sensor health checks, and performance tuning workflows.</li> <li>Coordinate with operations teams to ensure reliable onprem telemetry ingestion and threat detection fidelity.</li> </ul> <p><strong><u>Required Experience and Education</u></strong><strong><u>:</u></strong> </p> <ul> <li>Active TS/SCI clearance; willingness to take a polygraph exam</li> <li>5+ years of hands-on experience with onpremise network engineering or cybersecurity platforms.</li> <li>Experience deploying NDR platforms (VectraAI preferred) in physical/virtual data center environments.</li> <li>Strong knowledge of TCP/IP, DNS, TLS, HTTP/S, NetFlow/IPFIX, packet capture, and metadata pipelines.</li> <li>Experience with Zeek, Suricata, Arkime, Endace, or similar packet analytics tools.</li> <li>Experience with hardened OS builds, secure enclaves, access controls, and network segmentation.</li> <li>Proficiency with Linux engineering and system operations.</li> <li>HS diploma or GED and 7+ years of experience with supporting IT projects and activities, Associate’s degree and 5+ years of experience supporting IT projects and activities, Bachelor’s degree and 3+ years of experience supporting IT projects and activities, or Master’s degree and 1+ years of experience supporting IT projects and activities.</li> <li>Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP certification within 30 days of start date</li> <li>Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure</li> <li>Support Certification (CSSP-IS), including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date</li> <li>Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.</li> </ul> <p><strong><u>Preferred Experience and Education </u></strong></p> <ul> <li>Experience integrating NDR telemetry into SOC pipelines in secure onprem environments.</li> <li>Experience in environments with strict access controls or Zero Trust requirements</li> <li>Familiarity with virtualization platforms, physical rack deployments, and packet brokers.</li> <li>Experience with incident response and threat hunting based on raw network metadata.</li> <li>Security certifications (GCIA, GNFA, CISSP, etc.).</li> </ul> <p><strong><u>Travel Requirements</u></strong></p> <ul> <li>This position requires 100% onsite support in Reston, VA OR Washington, D.C.</li> </ul> <p><span style="text-decoration: underline;"><strong> Physical Requirements</strong></span></p> <ul> <li>Sedentary work</li> <li>Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day</li> <li>Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day</li> <li><em>If

Let Nod apply for you →

More jobs at guidepointsecurity

Fortinet Network Security Engineer - North Central region — guidepointsecurityLoad Balancer / WAF Engineer - North Central region — guidepointsecuritySecurity Consultant (Identity & SecOps) - Mid-Atlantic region (Remote in NC, VA, MD, DC, DE, PA, or NJ) — guidepointsecuritySecurity Architect - AD/Entra ID (Remote in the US) — guidepointsecurityDevSecOps Presales Solutions Engineer - Mid-Atlantic region (Remote in VA, MD, PA, NC, DE, NJ, or DC) — guidepointsecurityStrategic Security Advisor (New York Metro) - Northeast region — guidepointsecurity