GuidePoint Security

• Lead technical discovery calls and translate customer requirements into high-level solution designs • Speak credibly about product capabilities, integrations, and architectural trade-offs (e.g., Splunk, Sentinel, CrowdStrike Next-Gen SIEM, Tines, Torque, Snowflake) • Draw integration diagrams, validate technical feasibility, and position GuidePoint's differentiated capabilities • Support account executives in pre-sales engagements, ensuring technical alignment before formal scoping • Stay current on security operations trends, emerging platforms, and competitive positioning • Collaborate with delivery architects to ensure smooth transitions from sales to implementation • Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes

Role Description GuidePoint Security offers an inclusive set of Application Security services helping clients implement, fine tune and run their Application Security SAST, DAST and SCA tools. Many clients need assistance with either supplementing their Application Security teams or simply need teammates who have a specialization in Application Security. - Implement, operationalize, and/or improve the configuration of client application security tools - Perform manual application/API assessments of customer applications - Assist customers with questions relating to practical use of application security tools - Advise customers on application security best practices - Embrace emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes Qualifications - Experiential understanding of the Software Development Lifecycle (SDLC) - Experience with automation tools such as Jenkins - Practical understanding of cloud infrastructure environments such as AWS/Azure/GCP including “serverless” workflows - In-depth knowledge of Application Security tools - Fundamental knowledge of software composition analysis and code/library dependencies - Experience with testing tools such as: Burp Suite, Netsparker, Veracode, Checkmarx, Snyk, Invicti, etc. - Deep understanding of a broad range of Application Security issues as well as their mitigation strategies - Understanding of Application Security related vulnerabilities including cryptographic implementations - Experience with reviewing source code written in JavaScript, Python, Java, C++, PHP, or C# - Written communication skills for written interactions with clients - Strong communication skills that include the ability to clearly articulate thoughts and distill complex problems into stakeholder-friendly language - Ability to manage time independently while handling multiple projects concurrently - Standard industry certifications are preferred - Significant knowledge of SAST, DAST, SCA, IAST, and/or RASP tooling preferred Benefits - Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions) - Group Medical Insurance options: - Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) - High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans) - If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually) - Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans - 12 corporate holidays and a Flexible Time Off (FTO) program - Healthy mobile phone and home internet allowance - Eligibility for retirement plan after 2 months at open enrollment - Pet Benefit Option

• Lead and oversee OT security engineering engagements, including deployment and optimization of OT security tools, health-checks of existing OT security programs, driving configuration and architecture decisions in collaboration with clients and vendors, and leading OT security architecture assessments • Define and advance GuidePoint's OT service delivery methodology, setting technical standards and quality benchmarks for the broader OT practice • Author and review comprehensive services deliverables that are proficiently tailored to both technical and executive audiences, fully detailing technical execution, core deficiencies, business impact, and strategic remediation roadmaps • Serve as a subject matter expert (SME) and final technical escalation point for complex OT engagements across the practice • Perpetually strengthen and disseminate relevant skills, knowledge, and capabilities to keep GuidePoint and its clients at the forefront of the OT security industry • Cultivate and expand senior client relationships, acting as a trusted advisor to client leadership and representing GuidePoint at the highest levels • Drive cross-functional collaboration to mature and differentiate GuidePoint's OT service offerings in alignment with the SANS Five ICS Critical Controls and other leading frameworks • Contribute to business development through thought leadership, conference presentations, whitepaper authorship, and active participation in pre-sales and proposal activities • Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

• Deliver Threat & Attack Simulation's professional services, including but not limited to Vulnerability Assessments, Internal and External Penetration Tests, Wireless Security Assessments, Onsite and Remote Social Engineering, and a variety of custom assessments • Author comprehensive assessment deliverables that are proficiently tailored to both technical and managerial audiences and fully detail the technical execution, core deficiencies, business impact, and realistic remediation strategies • Utilize automation, orchestration, and scripting to reduce manual processes, improving overall efficiency while also enabling new capabilities to meet the rapidly changing needs of our clients • Contribute to marketing initiatives via activities such as publishing research, speaking at industry conferences, authoring blog articles and whitepapers, hosting webinars, and developing security tools • Assist with Practice development, including improving existing offerings • Perpetually strengthen relevant skills, knowledge, and abilities to stay at the forefront of the information security industry. • Foster client relationships by providing support, information, and guidance • Configure, operate, and manage a Breach and Attack Simulation (BAS) or continuous penetration testing platform and report results to relevant stakeholders promptly • Maintain a strong desire to learn, adapt, and improve along with a rapidly-growing company • Perform other duties as assigned

• Create and manage Marketo programs, including automated newsletters, list uploads, and targeted campaigns to support BDR outreach to white space. • Produce content and various marketing assets to be used digitally and for regional events. • Manage the marketing credit card, process event invoices and act as the primary liaison between the marketing team and accounting team for payment escalations. • Maintain and update campaign data within Marketo and SalesForce to ensure accurate tracking. • Track event registration and attendance trends to report results and ROI to Sales and Marketing leadership. • Oversee fulfillment house inventory, maintenance and distribution of regional event properties, promotional items and collateral for sales & field events. • Assist in driving partner campaigns using co-sponsored materials and tools. • Build and maintain ongoing communications with the sales team regarding new and planned marketing activities. • Help to ensure that Marketo and SalesForce campaigns are updated. • Other duties as assigned. • Adhere to GuidePoint Security Core Values.

• Organize, collaborate, and execute regional events. • Manage the demands of multiple events at once and prioritize accordingly. • Ensure deadlines are met for all event related activities, logistics, purchases, promotions, and deliverables. • Manage event supplies and shipping coordination of supplies for all events. • Collaborate with the team to promote events using Marketo and helping drive registration. • Regular communication with leadership – updates on event status and logistics, meeting deadlines, budget requirements, etc. • Manage lead acquisition, processing, nurturing and follow-up, ensuring there is a pre-event, at-event, and post-event strategy to increase engagement. • Manage and maintain registration lists, event calendar and provide regular updates to the regional team. • Track and provide reporting on event and campaign metrics. • Provide administrative support to marketing team as needed. • Provide onsite support for events when needed. • Coordinate, collaborate, build, develop, and maintain relationships with vendors as it relates to events. • Solicit marketing funds from GuidePoint's various vendor partners to help sponsor events. • Other related duties as needed. • Adhere to GuidePoint Security Core Values.

Role Description - Run client SAST, DAST, and SCA tools, review outputs and provide recommendations - Implement integrations for tools into pipelines, ticketing systems, etc. - Collaborate with developers to provide secure design guidance and remediation strategies - Familiarity with CI/CD systems (i.e. GitHub) and integrating software security tools into the development workflow - Strong understanding of web application security principles and best practices - Manage, maintain and operate application security tooling, including configuration, tuning, and automation Qualifications - 3+ years of experience in an Application Security focused position. Prior experience in a software development role preferred. - Experience with multiple SAST/DAST/SCA Application Security tools (Checkmarx, Veracode, Synk, Invicti, Semgrep, Blackduck, etc.) - Manual testing tools such as Burp Suite Pro - Experience with the integration of tools into development pipelines - Experience understanding and mitigating Application Security related vulnerabilities - Experience with reviewing source code written in JavaScript, Python, Java, C++, PHP, or C# - Integrated Development Environment (IDE) and Continuous integration / Continuous Delivery (CI/CD) Pipeline tools and processes (e.g. Azure Dev Ops, Jenkins, Bamboo, etc.) - Secure Development Lifecycles and experience remediating technical vulnerabilities identified by web application scanning tools - Information Systems architecture, security control design, and development experience - Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes Benefits - Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions) - Group Medical Insurance options: - Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) - High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans) - If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually) - Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans - 12 corporate holidays and a Flexible Time Off (FTO) program - Healthy mobile phone and home internet allowance - Eligibility for retirement plan after 2 months at open enrollment - Pet Benefit Option

• GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. • Seeking a Security Analyst with a proactive mindset to prevent incidents rather than just respond. • Collaborating as a team player and willingness to learn from constructive criticism to stay ahead of emerging threats and innovative threat actors. • Looking for a candidate currently living in the eastern time zone (EST)

Role Description The Principal, Security Alignment reports directly to the Chief Information Security Officer (CISO) and serves as the primary security advisor and strategic partner between Corporate Information Security and regional business operations. The organization operates a federated business model where corporate functions establish enterprise capabilities, standards, and guardrails while regional teams maintain autonomy in executing their business objectives. This role exists to ensure regional execution aligns with enterprise security expectations while enabling business velocity and operational flexibility. The Principal, Security Alignment will partner with regional leadership teams to understand: - Business processes - Professional services delivery models - Customer commitments - Internally developed solutions - Data handling practices - Operational workflows Success requires the ability to operate as a trusted business advisor — influencing without direct authority, translating security requirements into practical business outcomes, and helping regions mature without creating unnecessary friction. Qualifications - 10+ years of experience in information security, risk management, technology leadership, consulting, or business operations. - Experience operating in federated, decentralized, or matrixed organizations. - Strong understanding of enterprise security governance, risk management, and operational controls. - Experience partnering with executive business stakeholders. - Ability to influence teams without direct reporting authority. - Experience translating security concepts into business outcomes. - Strong executive communication and reporting skills. Requirements - Establish trusted relationships with regional executives and operational leaders. - Serve as the primary security advisor connecting regional business operations with the Enterprise Information Security organization. - Understand regional priorities, customer requirements, delivery practices, and operational challenges. - Help regional teams interpret and operationalize enterprise security standards. - Ensure security considerations are incorporated into regional decision-making processes. - Assess regional business practices to identify potential security, privacy, compliance, and operational risks. - Evaluate areas including: - Professional services delivery practices - Customer data handling - Customer environment access - Internally developed tools and automation - AI adoption and usage - Third-party/vendor usage - Data movement and storage practices - Customer contractual security obligations - Identify inconsistencies between regional execution and enterprise expectations. - Develop a scalable governance model that balances corporate oversight with regional autonomy. - Define clear ownership expectations between corporate security and regional leadership. - Create visibility mechanisms that allow risks to be identified proactively. - Establish regional security operating rhythms, reporting, and accountability structures. - Ensure exceptions, deviations, and business-driven decisions are documented and understood. - Provide the CISO with ongoing visibility into regional security maturity, emerging risks, and operational trends. - Develop executive-level reporting around: - Regional alignment - Key risk indicators - Security maturity - Remediation progress - Areas requiring leadership escalation - Escalate material concerns where business practices create unacceptable enterprise risk. - Identify opportunities to simplify adoption of corporate security capabilities. - Reduce friction between security requirements and regional execution. - Create reusable playbooks, processes, and frameworks. - Promote consistency without eliminating appropriate regional flexibility. - Build a culture where security is viewed as a business enabler. First Six-Month Objectives - Complete security/business assessments across all eight regions. - Establish relationships with regional leadership teams. - Create a regional security maturity baseline. - Identify high-priority risks and improvement opportunities. - Define the corporate/regional responsibility model. - Establish recurring governance and reporting cadence. - Implement regional security scorecards. - Deliver a prioritized roadmap for long-term maturity. Benefits - Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions). - Group Medical Insurance options: - Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans). - High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans). - Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans. - 12 corporate holidays and a Flexible Time Off (FTO) program. - Healthy mobile phone and home internet allowance. - Eligibility for retirement plan after 2 months at open enrollment. - Pet Benefit Option.

Role Description GuidePoint Security is seeking an Applied AI Engineer to join our AI and Agentic Enablement practice. This is a mid-level engineering role for practitioners with hands-on experience designing and deploying agentic systems. The role spans harness development within existing agentic platforms, internal tooling for NE regional teams, and structured enablement programs that build lasting agentic capability across the organization. Working independently across the full delivery lifecycle, this engineer leads harness design and deployment, owns internal tooling initiatives, and drives the enablement programs that transfer agentic operating capability to regional teams. Roles and Responsibilities: - Design, build, and deploy agentic harnesses and LLM-integrated workflows from prototype through production within existing platforms. - Define and own performance benchmarks to evaluate reliability, accuracy, and continuous improvement of agentic pipelines. - Evaluate and recommend emerging AI tools, models, and platforms for adoption. - Identify, develop, and maintain AI-powered automations and tools that improve efficiency across service delivery, operations, and sales functions throughout the Northeast region. - Lead workflow assessments to identify opportunities for agentic automation and design repeatable, scalable delivery frameworks. - Own documentation, testing, and iteration on productized AI components and proof-of-concept builds for internal and client audiences. - Design and deliver enablement programs that build regional teams' capability to independently operate, maintain, and extend agentic harnesses. - Develop training materials and lead workshops that build agentic AI literacy across functional teams, including handoff documentation and runbooks. - Other duties as assigned. Qualifications - B.S. degree in computer science or relevant field and 3 years of experience or M.S. degree. - 3+ years of software development or AI/ML engineering experience. - Demonstrated ability to design, author, and deploy agentic harnesses within existing agentic platforms. - Working knowledge of Python and at least one additional language relevant to agentic development. - Working understanding of large language models, prompt engineering, and API-based AI integration. - Ability to independently scope, build, and ship agentic solutions at a mid-level engineering standard, ensuring secure development practices throughout. - Demonstrated ability to explain technical concepts to non-technical audiences. Requirements - Experience with cloud platforms (AWS, Azure, or Google Cloud), particularly AI/ML services. - Experience with vector databases, orchestration layers, or workflow automation platforms. - Experience with retrieval-augmented generation (RAG) patterns or tool-use/function-calling with LLMs. - Experience designing and applying evaluation frameworks and benchmarks for AI systems. - Experience designing and facilitating technical enablement programs for mixed audiences. Travel Requirements - Up to 10% travel. Physical Requirements - Sedentary work. - Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day. - Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day. Benefits - Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions). - Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans). - Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans. - 12 corporate holidays and a Flexible Time Off (FTO) program. - Healthy mobile phone and home internet allowance. - Eligibility for retirement plan after 2 months at open enrollment. - Pet Benefit Option.