Vectra Detection Engineer
GuidePoint Security3 months ago
Chantilly, VA, USAMid Level
H1B sponsor
Responsibilities
- Implement and maintain detection architecture.
- Analyze network traffic to identify and document threat patterns.
- Develop and maintain network-based security signatures, including Suricata signatures.
- Use offensive security tools and techniques to simulate attacks and generate sample traffic for detection testing.
- Collaborate with data scientists and security researchers on AI-driven detection efforts and accuracy improvements.
- Monitor and tune network-detection effectiveness.
- Contribute to threat hunting by identifying new attacker tactics, techniques, and procedures.
- Participate in incident response activities when required.
Requirements
- Active TS/SCI clearance is required.
- Strong background in network traffic analysis and threat detection.
- Hands-on experience with Suricata or similar signature-based detection tools.
- Knowledge of offensive security and attack simulation techniques.
- Familiarity with the MITRE ATT&CK framework and real-world attacker behaviors such as lateral movement and command-and-control activity.
- Understanding of networking protocols, OSI layers, and security concepts across L3-L7.
- Relevant cybersecurity experience, typically several years, is preferred or valued.
- Certifications such as OSCP, GCIA, GCDA, GSEC, or similar are optional but valued.
- Applicants must meet eligibility requirements for access to classified information and will be subject to a security investigation.
Benefits
- Primarily remote for U.S.-based employees, with some travel and possible on-site work for federal positions.
- Medical insurance options include a zero-deductible PPO or high-deductible health plan with HSA contributions.
- Dental insurance is provided, with GuidePoint paying 100% of employee premiums and 75% of family premiums.
- 12 corporate holidays and a Flexible Time Off program.
- Mobile phone and home internet allowance.
- Retirement plan eligibility after two months at open enrollment.
- Pet benefit option.
Categories
About GuidePoint Security
GuidePoint Security provides cybersecurity consulting, managed services, and value-added reselling/integration of security products for enterprises and U.S. public-sector agencies. Its teams deliver assessments, penetration testing, cloud and application security, identity and access management, endpoint and network protection, and governance services. Founded in 2011 and headquartered in Reston, Virginia, the privately held company serves Fortune 500 organizations and cabinet-level federal agencies.