Job Title: ExtraHop Engineer (Government Client)
Overview:
Government Client is seeking an ExtraHop Engineer to support the deployment, configuration, and optimization of ExtraHop Reveal(x) for advanced network detection and response (NDR). This is an onsite role requiring a TS/SCI clearance. The ideal candidate will combine strong ExtraHop expertise with network monitoring, anomaly detection, and automation skills.
Key Responsibilities:
Configure, tune, and maintain ExtraHop Reveal(x) for network visibility and threat detection.
Automate network baselining and anomaly detection workflows.
Conduct TCP/IP and flow-based traffic analysis to identify performance or security issues.
Develop and deploy ExtraHop triggers (JavaScript) and API integrations (Python).
Collaborate with security, SOC, and infrastructure teams to enhance monitoring and incident response capabilities.
Qualifications:
Active TS/SCI clearance (required).
Hands-on experience with ExtraHop Reveal(x) configuration and monitoring.
Strong understanding of TCP/IP protocols, flow analysis, and network fundamentals.
Scripting skills with JavaScript and Python preferred.
Certifications such as ExtraHop Certified Professional, WCNA, Security+, CISSP, GIAC GCIA, CCNP, or Network+.
Preferred Background:
Experience as an NDR Engineer, Security Monitoring Engineer, Network Performance Engineer, Wire Data Analyst, or Cybersecurity Engineer (monitoring tools focus).
Candidates with backgrounds in Gigamon, Darktrace, or NetScout monitoring platforms are highly transferable.