Authentic8

• Monitor, investigate, and respond to security detections across the SIEM, driving alerts to resolution. • Develop, tune, and maintain SIEM use cases and correlation rules to improve detection coverage. • Build and deliver operational reports and dashboards from available SIEM log source data. • Identify, assess, and escalate high-impact events from multiple data sources to senior staff and stakeholders following established procedures. • Intake, triage, and respond to security reports (phishing, suspicious activity, etc.), escalating as necessary. • Own the lifecycle of security tickets in the case management system, ensuring accurate documentation, timely updates, and proper closure. • Support proactive investigations and threat hunting as directed. • Provide day-to-day SOC operational support and coverage, communicating findings and relevant event details clearly to team members and stakeholders. • Draft and update SOC and Authentic8 documentation, runbooks, standards, and procedures. • Work with system and application owners to remediate discovered security vulnerabilities. • Ability to collaborate effectively in a dynamic team environment.

• Design, build, and operate an AI-augmented red teaming harness using frontier LLM APIs. • Implement a control loop architecture (Plan | Act | Observe | Adjust) for autonomous and semi-autonomous vulnerability discovery. • Integrate the harness with purpose-built SBOM tooling (Endor Labs), CVE monitoring feeds (NVD, OSV.dev, EPSS/KEV, GitHub Advisory Database, and vendor-specific bulletins), and our CI/CD pipeline (Snyk, SonarQube). • Conduct adversarial testing across four attack perspectives: (Internal source code, External unauthenticated adversary, Internal authenticated user, and Internal unprivileged adversary) • Chain findings identify exploitable paths and corresponding vulnerabilities. • Validate and prioritize findings using CVSS, EPSS, and KEV context before handing off to the patch management pipeline. • Support the development and day-to-day operation of Authentic8's internal Bug Bounty Program. • Collaborate with engineering on custom mitigation decisions when vendor patches are unavailable. • Assume ownership of security stage-gates within our CI/CD pipeline, integrating Snyk, SonarQube, and harness findings into the build process. • Work alongside the SOC Lead on CVE monitoring, alerting, and vulnerability prioritization workflows. • Partner with DevSecOps Engineers on harness architecture and pipeline integration. • Provide technical input to the Integrated Operations Center on detection use case design for our SIEM. • Regularly brief the VP of Information Security on findings, program health, and checkpoint criteria.

• Build a smarter, faster demand engine, architecting and executing a full-funnel strategy to drive sustainable growth. • Own and optimize the entire customer lifecycle, from initial awareness and acquisition to customer activation, retention, and expansion. • Design and execute persona-based and use-case-based campaigns that speak directly to the unique needs of prospective customers. • Develop and manage targeted marketing campaigns for our existing customer base to increase product adoption, drive upsell/cross-sell opportunities, and cultivate brand advocates. • Leverage AI to enhance every stage of the funnel, from improving segmentation and targeting, to accelerating campaign production and testing, to optimizing lead nurture and reporting. • Build and manage a sophisticated email marketing engine for both prospects and customers, including AI-powered nurture programs and campaigns that drive revenue. • Champion a culture of continuous, data-driven improvement by constantly analyzing campaign performance, user behavior, and cohort data to identify optimization opportunities across the entire lifecycle. • Collaborate closely with Product Marketing, Content Marketing, Product Management, Sales, and Customer Success teams to ensure a cohesive customer experience and tight alignment on growth initiatives.

• Build a smarter, faster demand engine, architecting and executing a full-funnel strategy to drive sustainable growth. • Own and optimize the entire customer lifecycle, from initial awareness and acquisition to customer activation, retention, and expansion. • Design and execute persona-based and use-case-based campaigns that speak directly to the unique needs of prospective customers. • Develop and manage targeted marketing campaigns for our existing customer base to increase product adoption, drive upsell/cross-sell opportunities, and cultivate brand advocates. • Leverage AI to enhance every stage of the funnel, from improving segmentation and targeting, to accelerating campaign production and testing, to optimizing lead nurture and reporting. • Build and manage a sophisticated email marketing engine for both prospects and customers, including AI-powered nurture programs and campaigns that drive revenue. • Champion a culture of continuous, data-driven improvement by constantly analyzing campaign performance, user behavior, and cohort data to identify optimization opportunities across the entire lifecycle. • Collaborate closely with Product Marketing, Content Marketing, Product Management, Sales, and Customer Success teams to ensure a cohesive customer experience and tight alignment on growth initiatives.

• Own the availability, incident response, and operational health of the company’s PostgreSQL platform databases (Eng, QA, and Production) • Ensure high availability and disaster recovery processes are tested and functioning. • Implement PostgreSQL changes with minimal service interruption. • Perform live schema updates and patches in coordination with Engineering and DevOps. • Plan for database growth, execute tuning analysis, and conduct performance optimization. • Review and assist with SQL query optimization, identify and resolve deadlocks. • Coordinate schema deployments with DevOps. • Support ad hoc query needs from Customer Success, Sales, and Marketing teams. • Ensure all PostgreSQL security best practices are applied and monitored. • Help restructure or re-architect current and future databases to support performance and scalability. • Lead data integration projects that centralize company data from multiple systems into one or more centralized data pools (e.g., BigQuery). • Architect and implement data pipelines (ETL/ELT) from systems such as Salesforce (CRM), Zuora (billing and revenue management), PostgreSQL (service data), Pendo.io (product analytics), Freshdesk (customer support/ticketing), Jira (work management and issue tracking). • Partner closely with Business Operations analysts to: Align on data models and schema designs that support reporting and analytics as well as build performant queries and transformations for ongoing business intelligence. • Ensure centralized data repositories are clean, consistent, and optimized for analysis. • Implement monitoring and alerting for data pipeline health and performance.

• Oversee the full lifecycle of the Silo platform • Guide investment and organizational focus from product concept, development, market positioning and placement, through post-sales engagement • Connect across engineering, operations, finance, marketing, and sales

• Raise awareness and generate interest through cold calling, emails, and social outreach • Conduct high level conversations and present Authentic8's value prop to prospects • Schedule discovery calls between prospective customers and Account Executives • Meet monthly objectives and report to the SDR manager on identified key metrics • Actively participate in and add to team learning opportunities and best practices • Stay up-to-date with new products and industry trends

• Manage the Information Assurance Control Calendar by completing assigned compliance activities (e.g., access reviews) and coordinating with stakeholders to ensure periodic tasks (e.g., contingency and incident response plan testing) are completed on schedule. • Ensure company policies, plans, procedures, and standards are reviewed and updated regularly for accuracy and compliance. • Maintain and manage the Plan of Action & Milestones (POA&M) for FedRAMP, CMMC, and internal findings to ensure timely resolution of security gaps. • Lead and facilitate monthly FedRAMP meetings, providing authorizing officials with briefings on all deliverables and program status. • Lead and oversee the company’s supply chain risk management program, conducting risk assessments for all new and existing vendors, suppliers, and services. • Lead the CVE (Common Vulnerabilities and Exposures) meeting, providing detailed explanations of vulnerabilities, their impact, and recommended remediation steps to relevant stakeholders. • Assist the Governance Risk & Compliance Manager in preparing for external assessments (e.g., FedRAMP audits, SOC 2 attestations) by maintaining audit-ready documentation, collecting evidence, and coordinating with stakeholders during the process. • Ensure all personnel complete mandatory training during onboarding and on a periodic basis as required, and collaborate with relevant teams to develop and update training materials yearly based on evolving security protocols and company requirements. • Support current and potential customers by providing detailed and timely responses to Requests for Information (RFI). • Ensure continuous adherence to established regulatory frameworks, including FedRAMP, ISO 27001, CMMC, SOC 2, HIPAA, GDPR, and PCI DSS.