Role Description The Director, Security Solutions Engineering will oversee and manage the Security Solutions Engineering Team. This role will provide thought-leadership, solution sales account planning, and technical pre-sales leadership for internal sales teams. - Lead a team of Solutions Engineers for the Security Practice which provides thought leadership to identify customer challenges and includes a variety of services and products. - Directly manage Security Solutions Engineers and Architects, carrying out supervisory responsibilities in accordance with the organization’s policies. - Responsible for interviewing, hiring and training employees; planning, assigning, and directing work; appraising performance, rewarding and disciplining employees; addressing complaints and resolving problems. - Lead go-to-market strategy, planning and execution for the Security Practice. - Drive execution of technical go-to-market plan with field sales. - Drive discovery and execution of cross-functional solutions to advance our customer’s next generation programs. - Drive cross-functional education and execution across different technology disciplines. - Provide expertise and input to solution development process. - Create solution plays consisting of engineering led solutions that educate field sales on areas of expertise. - Maintain required technical certification requirements for key partners. - Ensure Solutions Architects and Engineers are managing opportunities and proactively driving to closure. - Demonstrate and actively promote an understanding and commitment to the mission of the company through performing behaviors consistent with the organization’s values. - Understand and leverage the broader consultative and architectural teams to craft service and product offerings that make our customers successful. Qualifications - Must reside in PST/MST. - 10+ years’ experience in related area with IT background. - Technical sales related experience around security tools, security architecture, consulting and collaboration. - Excellent communication skills via presentations, written and oral communications. - Ability to manage security and networking technologies. - Proficient use of all Microsoft Office applications. - Superior leadership abilities. - Demonstrated ability to work effectively across functional groups and levels within an organization, as well as externally. - Self-starter with excellent organizational, administrative, and interpersonal skills and ability to project manage, multi-task, and work in a fast-paced environment. - Communicate with leadership effectively. - Ability to prioritize and meet deadlines. Requirements - Salary commensurate with years of experience, technical expertise and geographic location. - Salary range: $200,000 to $240,000. - Performance bonuses. Benefits - Benefits package that includes 100% paid medical, dental and vision for the employee. - 401(k) with employer match. - Strong company culture. - Flexible PTO policy. - Flexible working arrangements. - Annual company overnight retreat. Company Description EVOTEK believes that everyone has the ability to make an impact, and we are proud to be an equal opportunity employer committed to providing employment opportunity regardless of sex, race, creed, color, gender, religion, marital status, domestic partner status, age, national origin or ancestry, physical or mental disability, medical condition, sexual orientation, pregnancy, military or veteran status, citizenship status, and genetic information.

GC AI is the fastest-growing and most trusted legal AI platform for in-house legal teams. We're building the future of legal work, and we're doing it fast. You'll join at a pivotal moment—when decisions matter, impact is immediate, and the runway to shape your career is wide open. We’re a high-performing team where you'll have real ownership and influence from day one. More than 1,700 companies use GC AI to drive their business forward, including 150+ public companies, 25+ unicorns, and brands such as News Corp, Miro, Bass Pro Shops, Snyk, Skims, Liquid Death, Vercel, Zscaler, and TIME. We've 10x'd revenue in 12 months, raised a $60 million Series B ($555 million valuation), and are growing faster than ever. We are backed by incredible investors, including Scale Venture Partners, Northzone, Sound Ventures, and Guillermo Rauch, CEO of Vercel. If you thrive when the stakes are high and the path isn't paved, you'll love it here. Our six guiding principles are: 1% better every day, customer obsession, ship today, find a way, care deeply, and own it completely. Come shape the future of legal work with us. About The RoleAs Senior Privacy & Security Counsel, you will own GC AI's privacy, data protection, and security compliance legal work, reporting to the General Counsel initially. You will be the go-to lawyer for everything from GDPR and CCPA compliance to SOC 2 and ISO certification programs, DPA negotiations, and AI governance. You will partner with the Privacy & Compliance team on operational execution, work alongside the commercial legal team on customer-facing data protection terms, and advise product and engineering on privacy-by-design. At a company that builds legal AI, you will also be shaping how privacy and security counsel work gets done in the future. The Impact You Will Have - Own GC AI's privacy and security legal posture across every regulatory framework that touches the business. - Serve as the internal subject matter expert that product, engineering, sales, and the commercial legal team rely on for privacy and security guidance. - Directly enable enterprise deals by handling the DPA and security addendum negotiations that sophisticated customers require. - Build and maintain the privacy and security playbook positions that scale with GC AI's growth. - Keep GC AI ahead of the regulatory curve on AI governance, international privacy frameworks, and emerging US state privacy laws. What You Will Do - Own the legal framework for GC AI's SOC 2, ISO 27001, and ISO 42001 compliance programs, partnering with the GRC and Compliance team on operational execution. - Advise product and engineering on privacy-by-design, data protection impact assessments, and AI governance requirements. - Own GC AI's regulatory compliance posture for GDPR, CCPA/CPRA, EU AI Act, and emerging US state privacy laws. - Serve as the escalation point for complex DPA and security addendum negotiations, working alongside the commercial legal team. - Directly handle DPA and security addendum redlines for strategic and high-value customer deals. - Maintain and evolve GC AI's standard DPA, security addendum, and Information Security Addendum templates and playbook positions. - Support enterprise sales by joining security calls with sophisticated prospects and responding to detailed security and privacy inquiries. - Assist with managing relationships with external auditors and compliance vendors (e.g., SOC 2 auditors, penetration testing firms, privacy tooling providers). - Advise on incident response legal obligations, breach notification requirements, and customer communications. - Own the legal review of the Trust Center, security marketing claims, and subprocessor disclosures. - Provide guidance on cross-border data transfers, international privacy frameworks, and jurisdiction-specific data protection requirements. - Assist with other compliance projects (including entity compliance management) - Take on additional projects and tasks as needed in response to the evolving needs of a fast- growing startup. Required Experience - JD and active bar membership in at least one US jurisdiction. - 5-10 years of privacy and security legal experience, with a meaningful portion in-house at a technology or SaaS company. - Deep working knowledge of GDPR, CCPA/CPRA, and the broader US and international data protection regulatory landscape. - Experience supporting sales processes at a B2B SaaS company, including security reviews, procurement questionnaires, and customer-facing calls. - Experience negotiating DPAs and data protection terms in a B2B SaaS context, including GDPR Article 28 processor obligations, standard contractual clauses, and cross-border transfer mechanisms. - Demonstrated ability to work independently, prioritize competing demands, and deliver under pressure. - Comfort working at startup pace with ambiguity, shifting priorities, and limited precedent. Nice To Have - CIPP/US, CIPP/E, or similar privacy certification. - Experience with AI governance frameworks (EU AI Act, NIST AI RMF) or ISO 42001. - Hands-on experience supporting security compliance programs (SOC 2, ISO 27001, or similar), including policy drafting, audit support, and gap analysis. - Background in cybersecurity incident response or breach management. - Experience at a high-growth startup or scale-up company (Series B through pre-IPO). - Prior big law firm experience in privacy, data protection, or technology transactions Location PolicyThis is a remote role unless you fall within the following parameters. If you live within approximately 50 miles of our San Mateo, CA or Provo, UT office, the position follows a hybrid schedule with in-office days on Tuesdays, Wednesdays, and Thursdays. Equal Opportunity EmploymentGC AI is an equal opportunity employer that supports workplace diversity and does not discriminate on the basis of race, color, religion, gender identity/expression, national origin, age, military service eligibility, veteran status, sexual orientation, marital status, physical or mental disability, or any other protected class. GC AI is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities. #LI-GCAI Fraud Notice to GC AI ApplicantsTo protect yourself against phishing and recruitment fraud, please note that GC AI only accepts job applications through our official careers page at https://gc.ai/careers and through sponsored jobs on LinkedIn. All legitimate communication from our team regarding job opportunities will come from a GC AI team member with a @gc.ai or @getgc.ai email address. GC AI will never: - Refer you to external websites to apply - Conduct interviews over email, chat platforms, or messaging apps - Ask you to provide payment or purchase equipment - Request personal or financial information such as your mailing address, social security number, credit card numbers, or banking information during the application process Examples of fraudulent email addresses: - info.gcai.careers.com@gmail.com - info.gc.aicareers.online.com@gmail.com - Any email address ending in @gmail.com, @yahoo.com, or other free email services If you are contacted by someone claiming to be from GC AI via an unofficial channel or from a suspicious email address, please do not share any information. Mark the communication as "phishing" or "spam" and do not respond.

• Lead technical Red Team initiatives, adversary simulations, offensive testing, and control validation. • Support the definition of methodology, scope, rules of engagement, and prioritization of offensive exercises. • Conduct or guide simulations based on tactics, techniques, and procedures (TTPs) of real threats. • Identify weaknesses in identity, infrastructure, applications, networks, cloud, and operational processes. • Produce mitigation recommendations with technical clarity, risk-based prioritization, and practical guidance. • Correlate offensive findings with Blue Team, CSIRT, IAM, AppSec, architecture, and governance. • Support the development of indicators for exposure, resilience, and control effectiveness.

Role Description This position ensures the technological and digital security of the Bank at an advanced level of ability and technical expertise. Responsible for Network Security Engineering aspect of multiple Information Security platform technologies, including but not limited to; Firewall, Proxy, Remote Access, and WAF. Participate in cross-training with other team members to ensure team has functional knowledge across all Security platforms we support. - Mitigates exposure to cyber threats, security risks, and unauthorized access. - Assesses organization networks, applications, or systems for potential vulnerabilities. - Protects assets and information through a variety of methods, resolving security issues or incidents as they arise. - Maintains a strong knowledge of industry practices, technology, and evolving threats to enhance defenses for the Bank's information systems and resources. - Provide guidance to less experienced associates in the work group. Qualifications - Bachelor's Degree and 8 years of experience in Systems Engineering, Network, or Information Security OR High School Diploma or GED and 12 years of experience in Systems Engineering, Network, or Information Security. - Knowledge of data security practices, procedures, monitoring and alert tools, and risk management standards. - Knowledge of Firewall Policy Flow, Proxy Administration, Active Directory, Domain Name System, Security Management concepts and solution design. - Ability to clearly communicate risks, threats, and vulnerabilities and proposed implementation plan to mitigate/remediate. Requirements - Technical Security – Facilitates operation of Network Security designs for new and existing solutions. - Performs hardware and software lifecycle support for a range of security tools that secure assigned technical areas and data. - Perform operational support including incident management, processing of change requests, and provide troubleshooting assistance to internal and external customers. - Queue triage and management – Review, Triage, and coordinate response to incidents and tickets assigned to the group. - On-call support – Participate in on-call rotation requiring night and weekend support and availability. - Analysis - Identifies and evaluates potential threats or vulnerabilities in the Bank's networks, applications, or systems. - Compiles data from external or internal sources. - Performs data gathering and review processes on as needed basis. - Security Expertise - Maintains a current knowledge of technology, emerging threats, and security trends within the assigned technical area. - Provides guidance on appropriate security protocols. - Participates in special projects as a technical and security resource. - May assist with training on trends, threats, and applicable technologies. - Issue Resolution - Investigates and resolves network security infrastructure support incidents which may include network, routing, access control, configuration anomalies, and other risks. - Serves as escalation point for Security Operations teams. - Escalates as appropriate. - Business Planning - May assist in the development of security policies, standards, and strategies. Benefits - The base pay for this position is generally between $149,000 and $200,000. - Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law. - For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment. - Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. - More information can be found at First Citizens Bank Benefits .