Vectra Detection Engineer

About the role

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

VectraAI Engineer

General Description

We are looking for a skilled an VectraAI Integration Engineer to deploy, tune, and sustain VectraAI Detect sensors and Recall pipelines in physical data centers, airgapped networks, and enterprise onpremise environments. This role focuses on network metadata, packetlevel telemetry, routing, sensor placement, and integration with onpremise SOC tooling.

About the Federal Region

GuidePoint Security is the trusted partner that defense and civilian government agencies rely on to lead their cybersecurity efforts and protect their organizations. We help solve their most complex security challenges, mature security architectures, and proactively reduce risk. Our purpose-built solutions ensure compliance, safeguard critical assets, and align security with organizational objectives. Backed by deep expertise, strong partnerships, and advanced technologies, we deliver scalable, adaptive capabilities that evolve with the threat landscape so Federal agencies can lead with confidence and protect what’s next.

Roles and Responsibilities:

- Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in onpremise networks.

- Integrate VectraAI with onpremise SIEM/SOAR/EDR, packet brokers, and analysis tools.

- Engineer physical and virtual sensor placement including SPANs, taps, packet brokers, and eastwest segmentation visibility.

- Manage routing, VLANs, packet capture, and metadata transformation.

- Support STIG aligned configurations and secure baselines consistent with your onprem operating guidance

- Build monitoring dashboards, sensor health checks, and performance tuning workflows.

- Coordinate with operations teams to ensure reliable onprem telemetry ingestion and threat detection fidelity.

Required Experience and Education:

- Active TS/SCI clearance; willingness to take a polygraph exam

- 5+ years of hands-on experience with onpremise network engineering or cybersecurity platforms.

- Experience deploying NDR platforms (VectraAI preferred) in physical/virtual data center environments.

- Strong knowledge of TCP/IP, DNS, TLS, HTTP/S, NetFlow/IPFIX, packet capture, and metadata pipelines.

- Experience with Zeek, Suricata, Arkime, Endace, or similar packet analytics tools.

- Experience with hardened OS builds, secure enclaves, access controls, and network segmentation.

- Proficiency with Linux engineering and system operations.