• Plan and execute AI-assisted red team engagements across web applications, APIs, cloud workloads and infrastructure, and deliver prioritized technical reports and executive summaries. • Provide clear remediation guidance and validate fixes, prioritizing critical and high findings. • Configure, tune and maintain offensive tooling and develop automation playbooks that reduce manual triage and false positives. • Integrate recurring security checks into CI/CD pipelines and platform processes to enable continuous testing and attack-surface reduction. • Run remediation workshops and knowledge transfers, and produce reusable runbooks for product and platform teams. • Coordinate triage and handoff with SOC, IT Ops, product teams and central IT Security, and support governance and compliance mapping (OWASP, API Security Top 10, CVSS).

• Represent SpecterOps at industry conferences, webinars, meetups, and virtual events. And serve as a public-facing advocate for SpecterOps across online and offline communities, helping build awareness, trust, and engagement within the cybersecurity community. • Engage with the cybersecurity community through social media, forums, and online groups to promote best practices and thought leadership. • Manage and execute Community event sponsorships, with primary focus on the North America region. • Develop high-quality, technical content such as blogs, whitepapers, tutorials, and videos to educate users about BloodHound Community Edition, BloodHound Enterprise, other SpecterOps’ open-source tools and related security topics. • Create and deliver compelling presentations and workshops on attack path management, identity security, and other key areas of expertise. • Partner closely with the Community Manager to develop and execute community growth initiatives, ambassador programs, educator programs, content creator programs, and community engagement campaigns. • Stay current with trends and developments in cybersecurity to serve as a trusted expert. • Contribute to SpecterOps’ position as a leader in attack path management and enterprise security by sharing innovative ideas and solutions. • Uncover new use cases for our existing tools and potential new opportunities for us to develop solutions for existing customers and community members. • Serve as a technical expert on the marketing team and help inform other demand gen programs, product marketing campaigns and other initiatives as needed.

• Lead and oversee OT security engineering engagements, including deployment and optimization of OT security tools, health-checks of existing OT security programs, driving configuration and architecture decisions in collaboration with clients and vendors, and leading OT security architecture assessments • Define and advance GuidePoint's OT service delivery methodology, setting technical standards and quality benchmarks for the broader OT practice • Author and review comprehensive services deliverables that are proficiently tailored to both technical and executive audiences, fully detailing technical execution, core deficiencies, business impact, and strategic remediation roadmaps • Serve as a subject matter expert (SME) and final technical escalation point for complex OT engagements across the practice • Perpetually strengthen and disseminate relevant skills, knowledge, and capabilities to keep GuidePoint and its clients at the forefront of the OT security industry • Cultivate and expand senior client relationships, acting as a trusted advisor to client leadership and representing GuidePoint at the highest levels • Drive cross-functional collaboration to mature and differentiate GuidePoint's OT service offerings in alignment with the SANS Five ICS Critical Controls and other leading frameworks • Contribute to business development through thought leadership, conference presentations, whitepaper authorship, and active participation in pre-sales and proposal activities • Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Role Description As a Security Automation Engineer I, you will contribute to the growth and maturity of our Security Operations team by developing and maintaining automation playbooks and workflows within our SOAR and XDR platforms. You will be responsible for translating analyst-driven investigation workflows into automation that accelerates triage, enrichment, containment, and remediation of issues across the SOC. - A strong background in security operations is essential for this role. - Understanding what happens before and after an alert is received is crucial. - Collaborate closely with SOC analysts and senior engineers to reduce manual workload, improve response consistency, and support a more resilient security operation. Qualifications - 2+ years of experience as a SOC analyst, with senior analyst experience preferred. - Hands-on familiarity with alert triage, threat investigation, and escalation decision-making. - 1-2 years of experience working with a SOAR platform, with Palo Alto XSIAM or XSOAR experience strongly preferred. - Four-year college degree resulting in a bachelor's degree, or equivalent practical experience. - One or more of the following certifications: Palo Alto Cortex, CompTIA Security+, CompTIA CySA+, GIAC GSEC, EC-Council CEH, and similar. Requirements - Solid understanding of cybersecurity principles, common attack techniques, and SOC operational workflows. - Experience with SIEM, SOAR, EDR/XDR, threat intelligence, endpoint protection, and email security technologies. - Familiarity with SOAR playbook development, with Palo Alto XSIAM and/or XSOAR experience being strongly preferred. - Understanding of common detection use cases including phishing, endpoint compromise, identity threats, and network anomalies. - Proficiency in Python for scripting and automation tasks. - Comfortable working with REST APIs, Regex, and JSON to build and troubleshoot platform integrations. - Familiarity with Windows, MacOS, and Linux environments. Skills - Develop, test, and maintain automated playbooks and integrations across Palo Alto XSOAR and Cortex XSIAM. - Collaborate with SOC analysts to identify manual, repetitive workflows and translate them into reliable automation. - Experience integrating security tools and platforms to support cohesive, automated response workflows. - Strong analytical skills to evaluate playbook performance, identify logic gaps, and iterate based on analyst feedback and operational data. - Effective problem-solving to troubleshoot integration and automation failures. - Clear verbal and written communication skills, with the ability to document playbook logic and contribute to design discussions across distributed teams. Abilities - Ability to work independently, manage time effectively, and stay productive in a remote environment. - Collaborative team player capable of contributing to technical conversations and troubleshooting sessions. - High attention to detail to ensure automation logic performs accurately under varied conditions. - Commitment to continuous learning and staying current with evolving threats, detection techniques, and automation capabilities. - Ability to adapt playbook logic as the threat landscape and tool stack change over time. Supervisory Responsibilities - No Supervisory Responsibility.