Vectra AI Integration Engineer, Mid

Booz Allen Hamilton•Washington, DC

19h•$69,400 - $158,000

About The Position

Booz Allen is seeking a Vectra AI Integration Engineer to deploy, tune, and sustain Vectra AI Detect sensors and Recall pipelines in physical data centers, air-gapped networks, and enterprise on-premise environments. The role focuses on network metadata, packet-level telemetry, routing, sensor placement, and integration with on-premise SOC tooling. The engineer will deploy and maintain Vectra AI sensors, collectors, and metadata pipelines; integrate Vectra AI with on-premise SIEM/SOAR/EDR systems and network analysis tools; engineer physical and virtual sensor placement; and manage routing, VLANs, packet capture, and metadata transformation. The role also supports STIG-aligned configurations and secure baselines, builds monitoring dashboards and sensor health checks, tunes performance, and coordinates with operations teams to support reliable telemetry ingestion and threat detection. Applicants must hold an active TS/SCI clearance and be willing to take a polygraph exam. The job requires a high school diploma or GED with 7+ years of relevant IT project support experience, an associate degree with 5+ years, a bachelor’s degree with 3+ years, or a master’s degree with 1+ years. The selected candidate must be able to obtain the specified DoD 8570 IAT Level III certification within 60 days of starting and a CSSP-IS certification within 30 days.

Requirements

At least 3 years of experience with on-premise network engineering or cybersecurity platforms.
Experience deploying Vectra AI or another Network Detection and Response platform, such as Corelight, Stellar, Cortex, Falcon, or RevealX, in physical or virtual data center environments.
Experience with packet analytics tools such as Zeek, Suricata, Arkime, or Endace.
Experience with hardened OS builds, secure enclaves, access controls, and network segmentation.
Experience with Linux engineering and system operations.
Knowledge of TCP/IP, DNS, TLS, HTTP/S, NetFlow/IPFIX, packet capture, and metadata pipelines.
Active TS/SCI clearance and willingness to take a polygraph exam.
High school diploma or GED and 7+ years of experience supporting IT projects and activities; or an associate degree and 5+ years; or a bachelor’s degree and 3+ years; or a master’s degree and 1+ years.
Ability to obtain a DoD 8570 IAT Level III certification, such as SecurityX, CCNP Security, CISA, CISSP or Associate, GCED, GCIH, or CCSP, within 60 days of start date.
Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support (CSSP-IS) certification, such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND, within 30 days of start date.

Nice To Haves

Experience integrating NDR telemetry into SOC pipelines in secure on-premise environments.
Experience in environments with strict access controls or Zero Trust requirements.
Experience with virtualization platforms, physical rack deployments, and packet brokers.
Experience with incident response and threat hunting based on raw network metadata.

Responsibilities

Deploy and sustain Vectra AI sensors, collectors, and metadata pipelines in on-premise networks.
Integrate Vectra AI with on-premise SIEM/SOAR/EDR systems, packet brokers, and analysis tools.
Engineer physical and virtual sensor placement, including SPANs, taps, packet brokers, and east-west segmentation visibility.
Manage routing, VLANs, packet capture, and metadata transformation.
Support STIG-aligned configurations and secure baselines consistent with on-premise operating guidance.
Build monitoring dashboards, sensor health checks, and performance-tuning workflows.
Coordinate with operations teams to ensure reliable on-premise telemetry ingestion and threat-detection fidelity.