• Run external/internal vulnerability and application/software scans; analyze, deduplicate, and publish prioritized remediation backlogs. • Correlate findings with threat intelligence, KEV/exploit data, and asset criticality; track SLAs and risk reduction. • Coordinate fixes with Infra/Identity/App teams; validate remediation, capture evidence, and report on closure. • Support formal penetration tests and external posture monitoring (e.g., BitSight); manage findings through closure. • Design, build, and operate AI-driven workflows (Claude and/or ChatGPT) that automate recurring work across security operations, identity, GRC, and reporting — prioritized by the Sr. Director. • Translate leadership priorities into production automations: report generation, evidence collection, alert summarization, audit prep, vuln triage drafting, ticket workflow assistance. • Maintain human-in-the-loop governance and audit trails for all AI outputs; document prompts, approvals, and edge cases. • Continuously benchmark AI tooling effectiveness; report time saved, accuracy, and adoption across the department. • Participate in an on-call rotation.

• Execute the Vulnerability Management lifecycle: analyze scan results, prioritize based on risk, and coordinate and track remediation with the responsible teams (Infrastructure, Systems, etc.). • Maintain, update and improve operational indicators and remediation workbooks (agent coverage, severity, monitoring of remediation SLAs). • Operate Identity and Access Management (IAM) processes: provisioning, deprovisioning, privilege granting, periodic access reviews and support for MFA mechanisms. • Actively support corporate access review campaigns and validation of segregation of duties (SoD). • Monitor, classify and investigate alerts generated by the security tools within your scope. • Perform initial triage and analysis of security incidents, escalating to a Specialist when necessary. • Produce periodic operational reports and security metrics for your area of responsibility. • Prepare and keep technical documentation and Standard Operating Procedures (SOPs) up to date.

• Operate and support the maintenance of the SIEM platform, ensuring correct collection of log sources, and the integrity and quality of received data. • Support the creation, review and fine-tuning of detection rules and use cases to reduce false positives and optimize alerts. • Operate and administer Next-Generation Firewalls (NGFW): controlled implementation of access rules, NAT, VPNs, justification documentation, and periodic review of orphaned rules. • Actively support network segmentation activities, traffic rules, and perimeter hardening. • Monitor, classify and investigate security alerts generated by the SIEM, firewalls and other perimeter tools. • Perform triage and initial analysis of perimeter security incidents, carrying out structured escalation to a Specialist when necessary. • Produce operational reports, traffic maps and indicators of security incidents/blocks. • Create and keep up-to-date technical documentation of topologies, network flows and operational procedures (SOPs).

• GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. • Seeking a Security Analyst with a proactive mindset to prevent incidents rather than just respond. • Collaborating as a team player and willingness to learn from constructive criticism to stay ahead of emerging threats and innovative threat actors. • Looking for a candidate currently living in the eastern time zone (EST)