GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

VectraAI Engineer

General Description

We are looking for a skilled an VectraAI Integration Engineer to deploy, tune, and sustain VectraAI Detect sensors and Recall pipelines in physical data centers, airgapped networks, and enterprise onpremise environments. This role focuses on network metadata, packetlevel telemetry, routing, sensor placement, and integration with onpremise SOC tooling.

About the Federal Region

GuidePoint Security is the trusted partner that defense and civilian government agencies rely on to lead their cybersecurity efforts and protect their organizations. We help solve their most complex security challenges, mature security architectures, and proactively reduce risk. Our purpose-built solutions ensure compliance, safeguard critical assets, and align security with organizational objectives. Backed by deep expertise, strong partnerships, and advanced technologies, we deliver scalable, adaptive capabilities that evolve with the threat landscape so Federal agencies can lead with confidence and protect what’s next.

Roles and Responsibilities

Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in onpremise networks.
Integrate VectraAI with onpremise SIEM/SOAR/EDR, packet brokers, and analysis tools.
Engineer physical and virtual sensor placement including SPANs, taps, packet brokers, and eastwest segmentation visibility.
Manage routing, VLANs, packet capture, and metadata transformation.
Support STIG aligned configurations and secure baselines consistent with your onprem operating guidance
Build monitoring dashboards, sensor health checks, and performance tuning workflows.
Coordinate with operations teams to ensure reliable onprem telemetry ingestion and threat detection fidelity.

Required Experience and Education:

Active TS/SCI clearance; willingness to take a polygraph exam
5+ years of hands-on experience with onpremise network engineering or cybersecurity platforms.
Experience deploying NDR platforms (VectraAI preferred) in physical/virtual data center environments.
Strong knowledge of TCP/IP, DNS, TLS, HTTP/S, NetFlow/IPFIX, packet capture, and metadata pipelines.
Experience with Zeek, Suricata, Arkime, Endace, or similar packet analytics tools.
Experience with hardened OS builds, secure enclaves, access controls, and network segmentation.
Proficiency with Linux engineering and system operations.
HS diploma or GED and 7+ years of experience with supporting IT projects and activities, Associate’s degree and 5+ years of experience supporting IT projects and activities, Bachelor’s degree and 3+ years of experience supporting IT projects and activities, or Master’s degree and 1+ years of experience supporting IT projects and activities.
Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP certification within 30 days of start date
Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure
Support Certification (CSSP-IS), including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date
Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Preferred Experience and Education

Experience integrating NDR telemetry into SOC pipelines in secure onprem environments.
Experience in environments with strict access controls or Zero Trust requirements
Familiarity with virtualization platforms, physical rack deployments, and packet brokers.
Experience with incident response and threat hunting based on raw network metadata.