EF
VectraAI Engineer
Ennoble First
- Location not stated
- Mid level
- 10 hours ago
- SIEM
- EDR
- VLANs
- TCP/IP
- DNS
- TLS
- Zeek
- Suricata
- Linux
- CCNP
- CISA
- CISSP
- GCIH
- CCSP
- CEH
- CySA+
- Zero Trust
- Incident Response
- GCIA
- Equity
10 hours ago
Location: Reston, VA
Required Clearance: Active TS/SCI with Willingness to Complete a Polygraph
Employment Type: Full-Time Regular
Shift: Day
Travel: No
Company Overview
We are Ennoble First. The people supporting and securing some of the most complex government, defense, and intelligence projects across the country. We ensure today is safe and tomorrow is smarter. Our work has meaning and impact on the world around us, but also on us, and that's important. Ennoble First is your place. You make it your own by embracing autonomy, seizing opportunity, and being trusted to deliver your best every day. We think. We act. We deliver. There is no challenge we can't turn into an opportunity.
Position Overview
Ennoble First is seeking a Mid-Level VectraAI On-Premises Integration Engineer to deploy, tune, and sustain VectraAI Detect sensors and Recall pipelines in physical data centers, air-gapped networks, and enterprise on-premises environments. This role focuses on network metadata, packet-level telemetry, routing, sensor placement, and integration with on-premises security operations center (SOC) tooling.
Primary Responsibilities
- Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in on-premises networks.
- Integrate VectraAI with on-premises SIEM, SOAR, EDR, packet brokers, and analysis tools.
- Engineer physical and virtual sensor placement, including SPAN ports, taps, packet brokers, and east-west segmentation visibility.
- Manage routing, VLANs, packet capture, and metadata transformation.
- Support STIG-aligned configurations and secure baselines consistent with on-premises operating guidance.
- Build monitoring dashboards, sensor health checks, and performance tuning workflows.
- Coordinate with operations teams to ensure reliable on-premises telemetry ingestion and threat detection fidelity.
- 5+ years of hands-on experience with on-premises network engineering or cybersecurity platforms.
- Experience deploying Network Detection and Response (NDR) platforms (VectraAI preferred) in physical or virtual data center environments.
- Strong knowledge of TCP/IP, DNS, TLS, HTTP/S, NetFlow/IPFIX, packet capture, and metadata pipelines.
- Experience with Zeek, Suricata, Arkime, Endace, or similar packet analytics tools.
- Experience with hardened operating system builds, secure enclaves, access controls, and network segmentation.
- Proficiency with Linux engineering and system operations.
- High school diploma/GED and 7+ years of experience supporting IT projects and activities; Associate's degree and 5+ years; Bachelor's degree and 3+ years; or Master's degree and 1+ years.
- Ability to obtain a qualifying DoD 8570 IAT Level III certification within 30 days of start date, such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, or CCSP.
- Ability to obtain a qualifying DoD 8570 CSSP-IS certification within 30 days of start date, such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.
- Experience integrating NDR telemetry into SOC pipelines in secure on-premises environments.
- Experience in environments with strict access controls or Zero Trust requirements.
- Familiarity with virtualization platforms, physical rack deployments, and packet brokers.
- Experience with incident response and threat hunting based on raw network metadata.
- Security certifications such as GCIA, GNFA, or CISSP.
$120,000–$150,000
The Ennoble First pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
Equal Employment Opportunity
Ennoble First is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by law.
E-Verify Participation
Ennoble First participates in E-Verify. Learn more at www.dhs.gov/E-Verify.
E-Verify is a registered trademark of the U.S. Department of Homeland Security.
VectraAI Engineer · Ennoble First