VectraAI On Premise Integration Engineer, Senior
$99,000–$225,000 year
On-siteCharlottesville, Virginia, United States or Washington, District of Columbia, United States
Job Summary
Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in on-premise networks, air-gapped environments, and physical data centers. Integrate VectraAI with on-premise SIEM, SOAR, EDR, packet brokers, and analysis tools. Engineer sensor placement including SPANs, taps, and east-west segmentation visibility while managing routing, VLANs, and packet capture. Support STIG-aligned configurations and build monitoring dashboards for sensor health and performance tuning. Coordinate with operations teams to ensure reliable telemetry ingestion and threat detection fidelity. This role requires TS/SCI clearance and 7+ years of on-premise network engineering experience.
Required Qualifications
- 7+ years of experience with on-premise network engineering or cybersecurity platforms
- Experience deploying NDR platforms in physical or virtual data center environments
- Experience with packet analytics tools such as Zeek, Suricata, Arkime, or Endace
- Experience with hardened OS builds, secure enclaves, access controls, and network segmentation
- Experience with Linux engineering and system operations
- Knowledge of TCP/IP, DNS, TLS, HTTP or HTTPS, NetFlow or IPFIX, packet capture, and metadata pipelines
- Active TS/SCI clearance; willingness to take a polygraph exam
- Associate's degree and 10+ years of experience supporting IT projects and activities
- Bachelor's degree and 8+ years of experience supporting IT projects and activities
- Master's degree and 6+ years of experience supporting IT projects and activities
- Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX, CCNP Security, CISA, CISSP or Associate, GCED, GCIH, or CCSP Certification within 30 days of start date
- Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support Certification (CSSP-IS) Certification, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date
- Security certifications, such as GCIA, GNFA, CISSP, or related Certifications
Desired Qualifications
- Experience integrating NDR telemetry into SOC pipelines in secure on-prem environments
- Experience in environments with strict access controls or Zero Trust requirements
- Experience with virtualization platforms, physical rack deployments, and packet brokers
- Experience with incident response and threat hunting based on raw network metadata
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.