REQUIRES AN ACTIVE / EXISTING TS/SCI WITH CI POLY - NO REMOTE WORKLocation: Reston, VA OR Washington, DC Funding Status: Contingent Position Description:We are seeking an
VectraAI Integration Engineer to deploy, tune, and sustain VectraAI Detect sensors and Recall pipelines in physical data centers, air-gapped networks, and enterprise on-premise environments. This role focuses on network metadata, packet-level telemetry, routing, sensor placement, and integration with on-premise SOC tooling.
Job Responsibilities:- Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in on-premise networks.
- Integrate VectraAI with on-premise SIEM/SOAR/EDR, packet brokers, and analysis tools.
- Engineer physical and virtual sensor placement including SPANs, taps, packet brokers, and east-west segmentation visibility.
- Manage routing, VLANs, packet capture, and metadata transformation.
- Support STIG-aligned configurations and secure baselines consistent with your on-prem operating guidance
- Build monitoring dashboards, sensor health checks, and performance tuning workflows.
- Coordinate with operations teams to ensure reliable on-prem telemetry ingestion and threat detection fidelity.
Basic Qualifications:- 5+ years of hands-on experience with on-premise network engineering or cybersecurity platforms.
- Experience deploying NDR platforms (VectraAI preferred) in physical/virtual data center environments.
- Strong knowledge of TCP/IP, DNS, TLS, HTTP/S, NetFlow/IPFIX, packet capture, and metadata pipelines.
- Experience with Zeek, Suricata, Arkime, Endace, or similar packet analytics tools.
- Experience with hardened OS builds, secure enclaves, access controls, and network segmentation.
- Proficiency with Linux engineering and system operations.
- Active TS/SCI clearance; willingness to take a polygraph exam
- HS diploma or GED and 7+ years of experience with supporting IT projects and activities, Associate's degree and 5+ years of experience supporting IT projects and activities, Bachelor's degree and 3+ years of experience supporting IT projects and activities, or Master's degree and 1+ years of experience supporting IT projects and activities.
- Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP certification within 30 days of start date
- Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support Certification (CSSP-IS), including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date
Additional Qualifications:- Experience integrating NDR telemetry into SOC pipelines in secure on-prem environments.
- Experience in environments with strict access controls or Zero Trust requirements
- Familiarity with virtualization platforms, physical rack deployments, and packet brokers.
- Experience with incident response and threat hunting based on raw network metadata.
- Security certifications (GCIA, GNFA, CISSP, etc.).