Vectra Detection Engineer

GuidePoint Security is seeking a skilled VectraAI Integration Engineer to deploy, tune, and sustain VectraAI Detect sensors and Recall pipelines in physical data centers, airgapped networks, and enterprise on-premise environments.

The role focuses on network metadata, packet-level telemetry, routing, sensor placement, and integration with on-premise SOC tooling.

Responsibilities:

• Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in on-premise networks.
• Integrate VectraAI with on-premise SIEM/SOAR/EDR, packet brokers, and analysis tools.
• Engineer physical and virtual sensor placement including SPANs, taps, packet brokers, and east-west segmentation visibility.
• Manage routing, VLANs, packet capture, and metadata transformation.
• Support STIG aligned configurations and secure baselines consistent with on-prem operating guidance.
• Build monitoring dashboards, sensor health checks, and performance tuning workflows.
• Coordinate with operations teams to ensure reliable on-prem telemetry ingestion and threat detection fidelity.

Requirements:

• Active TS/SCI clearance; willingness to take a polygraph exam.
• 5+ years of hands-on experience with on-premise network engineering or cybersecurity platforms.
• Experience deploying NDR platforms (VectraAI preferred) in physical/virtual data center environments.
• Strong knowledge of TCP/IP, DNS, TLS, HTTP/S, NetFlow/IPFIX, packet capture, and metadata pipelines.
• Experience with Zeek, Suricata, Arkime, Endace, or similar packet analytics tools.
• Experience with hardened OS builds, secure enclaves, access controls, and network segmentation.
• Proficiency with Linux engineering and system operations.

Preferred Experience and Education:

• Experience integrating NDR telemetry into SOC pipelines in secure on-prem environments.
• Experience in environments with strict access controls or Zero Trust requirements.
• Familiarity with virtualization platforms, physical rack deployments, and packet brokers.
• Experience with incident response and threat hunting based on raw network metadata.
• Security certifications (GCIA, GNFA, CISSP, etc.).

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions).
• Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA.
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans.
• 12 corporate holidays and a Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option.