The primary function of this role will be threat actor communications for GuidePoint's clients, collecting intelligence and advising digital extortion victims of appropriate courses of action aligned to their business needs.

The ideal candidate will also support GRIT's intelligence research efforts, operationalizing threat intelligence data obtained through threat actor engagement and digital forensics efforts.

Responsibilities:

• Lead and conduct Threat Actor Communications engagements, advising clients, legal counsel, and insurance carriers on risks, benefits, and key considerations for communication with threat actors in ransomware and data extortion cases.
• Operate as a technical resource within the Practice and actively participate in DFIR investigations to share and identify actionable intelligence.
• Effective engagement communication, time management, and collaboration with peers and clients.
• Foster client relationships by providing support, information, and guidance.
• Author comprehensive engagement deliverables that are tailored to both technical and managerial audiences.
• Utilize automation, orchestration, and scripting to reduce manual processes, improving overall efficiency.
• Contribute to integration of existing and future open-source and commercial tools or automation to help improve GRIT processes and procedures.
• Perpetually strengthen relevant skills, knowledge, and abilities to stay at the forefront of the information security industry.
• Maintain a strong desire to learn, adapt, and improve along with a rapidly growing company.
• Willingness and ability to support a rotating on-call schedule, including possible weekend work as needed to support emergency requirements.

Requirements:

• 2 - 4 years prior experience in communicating with threat actors.
• Two (2+) years of experience performing Threat Intelligence analysis and/or collection.
• Prior experience in intelligence sharing relationships and partnerships.
• Prior experience in building and developing persona operations.
• Familiarity with digital forensics and incident response workflows.
• Experience in client-facing, professional services, or consulting roles.
• Experience using emerging technologies, including AI tools.

Benefits:

• Remote workforce primarily.
• Group Medical Insurance options.
• Group Dental Insurance.
• 12 corporate holidays and a Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option

Job Data by YubHub.

As a Senior Security Engineer, you will design and build pipelines to fix problems with security data, such as high SIEM bills, inconsistent data, and platform migration issues. You will work directly with vendor partners and account teams, seeing the same problems across many client environments, and keeping up with a rapidly changing market.

Key areas of focus include:

• Establishing reliable and reusable data pipelines
• Improving data quality, accessibility, and processing efficiency
• Supporting security, observability, analytics, and operational use cases

Responsibilities:

• Architect, deploy, and optimize telemetry pipelines with Cribl Stream, Edge, Lake, and Search, and comparable platforms
• Onboard, parse, and normalize data from various sources into common schemas
• Build reduction, filtering, enrichment, and tiering strategies
• Quantify business cases for ingest and savings
• Brief client senior leadership on findings and recommendations
• Size and harden deployments, including worker topology and high availability
• Build governance into the data flow with masking and redaction, role-based access control, and retention policy
• Lead data workstreams for SIEM and platform migrations
• Deliver pipeline health checks and optimization assessments
• Support pre-sales and contribute to statements of work
• Work with vendor partner engineering teams on joint delivery and product feedback

Requirements:

• 5+ years in cybersecurity, IT operations, or data engineering
• 3+ years building and running production telemetry pipelines
• Hands-on experience with Cribl Stream or comparable pipeline platforms
• Working knowledge of SIEM or analytics destinations
• Client-facing delivery experience
• Linux administration and networking fundamentals
• Scripting and data skills in JavaScript, Python, or Bash
• Ability to engage senior leadership and translate technical work into business terms

Preferred Experience and Education:

• Experience at a VAR, systems integrator, or MSSP
• Technical writing experience
• Delivery experience on multiple pipeline platforms
• Cribl Certified Admin (Edge); Splunk Certified Admin or Architect; Elastic Certified Engineer
• Kubernetes and containers; Terraform or Ansible; Git and CI/CD
• Kafka, object storage, and data lakes; Snowflake or Databricks as destinations
• OpenTelemetry for metrics and traces

Benefits:

• Remote workforce
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan
• Pet Benefit Option

Job Data by YubHub.

Role and Responsibilities:

• Ensures timely processing of customer orders meeting service-level agreement standards
• Issues accurate purchase orders to vendors
• Tracks all product-related line items for proof of delivery and follows up with vendors for all unfulfilled items
• Reconciles vendor invoicing discrepancies
• Works closely with different sales groups to ensure that all transactional contracts are complete, accurate, and meet all internal booking requirements
• Communicates effectively and professionally with internal and external partners
• Other duties as assigned

Position Requirements:

• BA/BS in Business Administration or equivalent work experience
• 2-3 years' purchasing experience, or relevant roles
• Demonstrates a willingness to learn and use AI-enabled tools
• Attention to detail is a must
• Analytical and critical thinker
• Ability to collect and analyze data efficiently
• Possesses the ability to self-manage and adapt to changes, delays, or unexpected shifts in priorities while maintaining focus and productivity in a fast-paced environment
• Ability to work a flexible work schedule is required
• Excellent verbal and written communication skills

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The ideal Account Manager works on a team with and for an Account Executive, assisting them in sales lifecycle responsibilities and ensuring customer retention and growth.

Roles and Responsibilities:

• Serve as the dedicated Account Manager for a specified Account Executive, helping this individual maintain and grow their specific business within their accounts.
• Respond to customer inquiries in a timely fashion and move to resolution.
• Serve as a liaison between customers, vendors, and GuidePoint resources for this specified AE.
• Develop and retain product and industry knowledge, vendor resources, and GuidePoint Security service offerings.
• Develop and maintain relationships with GuidePoint key vendors and Account Executive's customers.
• Leverage vendor resources and relationships to bring value to customers.
• Improve more frequent calls and higher touch for AE's customer base.
• Manage open opportunities in existing accounts with guidance from AE.
• Identify whitespace opportunities with customers and vendors.
• Represent GPS AE at customer meetings as needed.
• With AE guidance, close renewal, upsell and net new sales cycles.
• Proactive support for upcoming renewals, identifying upsell and proactive support for existing business.
• Collaborate on promoting marketing communication to account base with targeted follow-up.
• Focus on driving and selling GPS Professional Services engagements across targeted account base.
• Assist AE in forecast management and internal strategic reporting.
• If required, have the ability to leverage salesforce.com to generate quotes, track open opportunities and renewal opportunities.

Required Experience and Education:

• Proven success in inside sales with cyber security experience required.
• Demonstrated ability to multitask, maintain outstanding attention to detail, and follow through on commitments.
• An unwavering positive attitude, strong drive for results, and the ability to navigate ambiguity within a collaborative team environment.
• Strong written and verbal communication skills, with the ability to communicate clearly and concisely via email, phone, and written documents.
• Experience with Salesforce.com and Microsoft Office required.
• Ability to work a flexible schedule required.
• Demonstrated willingness to learn and use AI-enabled tools.

Preferred Experience and Education:

• Bachelor's degree is preferred.

Travel Requirements:

• Up to 25% travel.

Physical Requirements:

• Sedentary work.
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day.
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day.

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions).
• Group medical insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees' premiums and 75% for family plans).
• Group dental insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans.
• 12 corporate holidays and a Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet benefit option.

Job Data by YubHub.

Key responsibilities include:

• Designing, configuring, and supporting ServiceNow Vulnerability Response (VR) to manage the end-to-end vulnerability lifecycle
• Building and maintaining remediation workflows, vulnerability groups, assignment rules, and calculators using Flow Designer, Business Rules, and other ServiceNow technologies
• Configuring risk scoring and prioritization models that combine CVSS, threat intelligence, exploitability, and business/asset criticality to drive risk-based remediation
• Developing custom automation and workflows using JavaScript, HTML/CSS, Python, and ServiceNow platform capabilities
• Integrating vulnerability scanners and security tools (e.g., Qualys, Tenable, Rapid7, Microsoft Defender, CrowdStrike) with ServiceNow via APIs
• Providing operational support, including incident support, root cause investigations, and process optimization

The ideal candidate will have:

• At least 1-2 years of experience in ServiceNow Security Operations and CMDB implementation and integration
• Hands-on experience configuring ServiceNow Vulnerability Response (VR) and Security Operations
• Experience integrating vulnerability scanners and security tools with ServiceNow via APIs
• Working knowledge of vulnerability management concepts, including CVSS, risk assessment, exploitability, and SLA-driven remediation
• Strong programming skills in Python, JavaScript, HTML/CSS, and other ServiceNow technologies

GuidePoint Security offers a range of benefits, including:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Senior Technical Project Manager will be required to demonstrate exceptional communication, leadership, and problem-solving skills to drive cross-functional teams and manage complex security initiatives.

Responsibilities:

• Lead a team of cyber security engineers delivering cybersecurity projects using established project management methodologies
• Define project scope, cost, success criteria, dependencies, assumptions, and constraints with stakeholders
• Design and implement global technologies and services to meet the Federal Region's business needs
• Manage development teams on system design and gap analysis, in addition to prioritization of critical strategic components of the deployments
• Coordinate the collection of business requirements across multiple regional partners
• Direct the rollout of new and existing functionality to multiple agencies
• Develop measures to define progress and success
• Establish ongoing reporting requirements and key performance indicators for confirming return on investment
• Maintain project budgets and forecasts
• Develop and maintain contract management plans, project plans, identify resource needs, and manage project schedule and budget
• Collaborate effectively across teams to define strategy, goals, and commitment to timelines and deliverables
• Work at an individual and team level to develop project growth and opportunities beyond initial project scope
• Own all project communications to project members and stakeholders on progress, issues, and risks

Requirements:

• MUST have an active TS/SCI clearance for consideration
• 7+ years of direct Project Management experience
• 5+ years of managing a technical team focused on Cyber Security or Operations
• 5+ years of experience managing a Program with over 10 people
• 5+ years of experience in public sector/DOD/IC contract management
• A BS degree in Computer Science, Cybersecurity, or equivalent hands-on experience in software engineering or IT infrastructure
• Required Project Management Professional (PMP) Certification
• Required Security+ Certification
• Knowledge and awareness of the certification in the Information Technology Infrastructure Library (ITIL) framework standards for information technology (IT) infrastructure, development, and operations

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The role focuses on network metadata, packet-level telemetry, routing, sensor placement, and integration with on-premise SOC tooling.

Responsibilities:

• Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in on-premise networks.
• Integrate VectraAI with on-premise SIEM/SOAR/EDR, packet brokers, and analysis tools.
• Engineer physical and virtual sensor placement including SPANs, taps, packet brokers, and east-west segmentation visibility.
• Manage routing, VLANs, packet capture, and metadata transformation.
• Support STIG aligned configurations and secure baselines consistent with on-prem operating guidance.
• Build monitoring dashboards, sensor health checks, and performance tuning workflows.
• Coordinate with operations teams to ensure reliable on-prem telemetry ingestion and threat detection fidelity.

Requirements:

• Active TS/SCI clearance; willingness to take a polygraph exam.
• 5+ years of hands-on experience with on-premise network engineering or cybersecurity platforms.
• Experience deploying NDR platforms (VectraAI preferred) in physical/virtual data center environments.
• Strong knowledge of TCP/IP, DNS, TLS, HTTP/S, NetFlow/IPFIX, packet capture, and metadata pipelines.
• Experience with Zeek, Suricata, Arkime, Endace, or similar packet analytics tools.
• Experience with hardened OS builds, secure enclaves, access controls, and network segmentation.
• Proficiency with Linux engineering and system operations.

Preferred Experience and Education:

• Experience integrating NDR telemetry into SOC pipelines in secure on-prem environments.
• Experience in environments with strict access controls or Zero Trust requirements.
• Familiarity with virtualization platforms, physical rack deployments, and packet brokers.
• Experience with incident response and threat hunting based on raw network metadata.
• Security certifications (GCIA, GNFA, CISSP, etc.).

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions).
• Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA.
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans.
• 12 corporate holidays and a Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option.

Job Data by YubHub.

As a Senior Security Engineer, you will be responsible for designing, implementing, and managing firewall policies across Palo Alto and Checkpoint (Cloud) virtual firewalls. You will also configure and optimise firewall rules to meet business and security requirements, implement security best practices for firewall configurations and policy management, and deploy and manage Prisma Access for secure remote access and cloud-delivered security services.

Responsibilities:

• Design, implement, and manage firewall policies across Palo Alto and Checkpoint (Cloud) virtual firewalls
• Configure and optimise firewall rules to meet business and security requirements
• Implement security best practices for firewall configurations and policy management
• Configure and manage Prisma Access for secure remote access and cloud-delivered security services
• Implement and optimise Prisma Access policies and configurations
• Integrate Prisma Access with existing security infrastructure
• Utilise Strata Cloud Manager for centralized firewall management and configuration
• Leverage Palo Alto Networks Panorama for policy deployment and management across multiple firewalls
• Manage Checkpoint Cloud configurations through centralized management platforms
• Process and implement firewall change requests following change control procedures
• Troubleshoot firewall connectivity and policy issues
• Perform firewall configuration updates and enhancements
• Collaborate with network and security teams on firewall-related projects

Requirements:

• 5+ years of Network Security experience (Enterprise network experience preferred)
• Strong/Expert Level Palo Alto and Checkpoint (Cloud) firewall configuration/engineering experience
• Hands-on experience with Prisma Access configuration and deployment
• User Experience with Palo Alto Networks Panorama for centralized management
• Palo Alto Networks Certified Cybersecurity Associate (PCCSA) or higher certification
• Strong Routing and Switching knowledge with Firewall integration
• Experience managing Large Firewall Deployments (50+ Firewalls)
• User Experience with Splunk for log analysis and troubleshooting

Nice to have:

• Strata Cloud Manager experience
• FireMon Security Manager and Other Modules
• Tufin or Similar Firewall Automation Experience
• Azure Networking Experience
• Experience with Palo Alto Networks Automation Tools (e.g., Palo Alto Networks Automation API, Terraform)
• Integration experience with Palo Alto Networks and other security solutions (e.g., Threat Prevention, URL Filtering, DNS Security)
• Experience with firewall rule optimisation and cleanup projects

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

Responsibilities:

• Complete internal training for Automated Security Validation (ASV)
• Lead complex ASV deployments and partner with customers to address diverse security use cases
• Assess customer security posture and requirements to guide solution design
• Maximize ASV value by enabling customers and supporting their cybersecurity strategy
• Collaborate with internal product and technical teams to deliver solutions and drive innovation

Requirements:

• Active Top Secret/SCI clearance with a CI Poly within 10 years
• 5–10 years of security systems engineering and troubleshooting experience
• Active DoD 8570 IAT Level II+ certification
• Strong understanding of cyber threat techniques, intelligence analysis, and adversary TTPs
• Familiarity with MITRE ATT&CK and similar threat frameworks

Preferred Qualifications:

• Bachelor’s degree in a relevant field or equivalent experience
• Experience configuring and utilizing enterprise SIEM platforms
• Understanding of OS auditing
• Experience with Mandiant Security Validation or other Breach and Attack Simulation (BAS) tools

Benefits:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The role blends strategic advisory responsibilities with deep technical expertise,guiding clients through the development of secure data architectures, platform enablement, and integration of leading data protection and security solutions.

Key Responsibilities:

• Client Engagement & Leadership: Act as the primary technical lead on client data security engagements, overseeing design, delivery, and implementation of strategic data protection solutions.
• Data Security Strategy Development: Collaborate with customer stakeholders to assess current data protection posture and develop tailored data security strategies aligned to business, compliance, and transformation goals.
• Architecture & Design: Design and document enterprise data security architectures including data discovery, classification, encryption, tokenization, and access control across multi-cloud and hybrid environments.
• Tooling & Platform Enablement: Lead assessments and integrations of data security platforms such as DLP, DSPM, CASB, and insider risk management tools across client environments.
• Implementation Oversight: Provide technical oversight for solution deployments, policy configurations, and integration of security tooling into existing client infrastructures.
• Team Leadership: Lead and mentor a team of consultants and engineers; assign tasks, review deliverables, and ensure technical excellence and consistency across engagements.
• Client Advisory & Evangelism: Act as a trusted advisor to customer executives and technical teams,educating on best practices, regulatory impacts, and emerging data protection technologies.
• Continuous Improvement & R&D: Research and recommend emerging tools, frameworks, and automation approaches to enhance client data security maturity and consulting methodologies.

Qualifications:

• Education: Bachelor’s degree in Computer Science, Information Security, or related field; or equivalent experience.
• Experience: 8+ years in information security, with 3+ years focused on data security or protection; 3+ years in a client-facing consulting or technical lead capacity; proven experience developing and implementing data security strategies across complex enterprise environments.
• Technical Expertise: Hands-on experience with leading data protection platforms (Proofpoint, Netskope, Cyera, Cyberhaven, BigID, Symantec DLP, Varonis, etc.); strong understanding of encryption, key management (KMS/HSM), tokenization, data masking, and structured/unstructured data protection; experience with security automation, APIs, and integration (Python, PowerShell, Terraform, or Ansible); deep understanding of data governance and compliance frameworks (GDPR, CCPA, HIPAA, ISO 27001, NIST).
• Soft Skills: Exceptional client communication and presentation abilities; proven leadership and mentorship capabilities within consulting or project delivery teams; ability to manage multiple engagements and translate business outcomes into technical execution plans.

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Senior Security Engineer is a hands-on technical leader responsible for architecting, implementing, and optimizing Access Management solutions across the Okta Identity Engine (OIE) and Auth0 platforms. This role requires deep expertise in Okta Workflows, federation, and modern authentication patterns , with the ability to flex between workforce and customer identity use cases depending on engagement needs.

Responsibilities:

• Technical Delivery & Solution Architecture (50%): Lead end-to-end design and implementation of Okta OIE solutions including SSO, MFA, adaptive access policies, and Lifecycle Management (LCM). Design and implement comprehensive LCM solutions including joiner/mover/leaver automation, SCIM provisioning to downstream applications, HR-driven identity workflows, provisioning agent deployment, and directory integrations.
• Engagement Leadership & Delivery Execution (25%): Lead assigned engagements independently , owning timelines, deliverables, and client communication with minimal oversight. Develop and maintain engagement plans, track milestones, and proactively manage risks and dependencies.
• Mentorship & Technical Enablement (15%): Mentor junior consultants and business analysts on Okta/Auth0 technical concepts and delivery best practices. Conduct internal knowledge-sharing sessions, brown bags, and technical deep dives.
• Presales & Practice Development (10%): Support sales efforts by participating in scoping calls, technical qualification, and solution demonstrations. Contribute to SOW development, LOE estimation, and proposal creation for Okta/Auth0 opportunities.

Requirements:

• Bachelor’s degree in Computer Science, Information Security, or related field , or equivalent work experience
• 7+ years of hands-on experience in Identity and Access Management
• 4+ years of direct implementation experience with Okta OIE (Workforce Identity Cloud)
• Full proficiency in Okta Workflows , including connector development, error handling, complex flow logic, and API-driven automations
• Strong LCM implementation background , proven experience designing and deploying joiner/mover/leaver processes, SCIM provisioning, and automated lifecycle orchestration using Okta Workflows

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Senior Security Consultant, NHI will engage in the development of NHI discovery and inventory, risk scoring and prioritization, and lifecycle and remediation programs while providing "Wow Them" service to clients and/or internal customers or co-workers.

Responsibilities:

• Serve as a senior subject matter expert for Non-Human Identity (NHI) security, including service accounts, application identities, machine identities, workload identities, API identities, secrets, tokens, certificates, and other machine-to-machine credentials.
• Develop and implement NHI discovery, inventory, classification, ownership, lifecycle management, and governance processes across enterprise environments.
• Conduct assessments to identify unknown, orphaned, excessive, over-privileged, stale, and high-risk non-human identities.
• Define and implement NHI security controls aligned with Zero Trust, least privilege, identity security, and secrets management principles.
• Leverage modern NHI security platforms, preferably Oasis Security, Clutch Security, and Entro, to discover, analyze, monitor, and remediate non-human identities.
• Develop NHI risk scoring and prioritization models based on privileges, exposure, usage, ownership, credential type, business criticality, and potential blast radius.
• Analyze NHI relationships and dependencies across applications, infrastructure, cloud environments, APIs, databases, DevOps pipelines, and third-party platforms.
• Identify and remediate credential sprawl, hardcoded secrets, excessive privileges, unused credentials, unmanaged identities, and insecure authentication mechanisms.
• Establish NHI ownership and accountability by working with application owners, development teams, infrastructure teams, DevOps, cloud engineering, and security teams.
• Develop and maintain NHI lifecycle processes covering creation, onboarding, authentication, authorization, rotation, monitoring, certification, suspension, and retirement.
• Integrate NHI security capabilities with enterprise IAM, PAM, CIEM, CSPM, SIEM, ITSM, secrets management, and DevSecOps platforms.
• Analyze authentication and activity data to identify anomalous or suspicious behavior involving non-human identities.
• Support implementation of least privilege and just-in-time access for workloads, applications, APIs, and machine identities.
• Develop automation to improve NHI discovery, remediation, credential rotation, ownership assignment, and policy enforcement.
• Define and maintain NHI security standards, procedures, control requirements, and operating processes.
• Conduct periodic NHI reviews and support access certification, audit, compliance, and risk assessments.
• Develop dashboards and metrics to track NHI security posture, including inventory coverage, ownership, risk, privilege levels, credential age, remediation status, and policy compliance.
• Collaborate with PAM and IAM teams to establish clear boundaries and integration between human identity, privileged identity, and non-human identity management.
• Support NHI strategy, architecture, proof-of-concepts, technology evaluations, and implementation initiatives.
• Stay current on emerging NHI threats, attack techniques, industry standards, and technologies related to machine identities, workload identities, secrets, APIs, and AI agents.
• Mentor junior analysts and contribute to the development of NHI security playbooks, standards, and reusable analytical processes.

Requirements:

• 5+ years of experience in cybersecurity, IAM, PAM, cloud security, application security, or a related security discipline.
• 2+ years of experience working with non-human identities, service accounts, application identities, machine identities, workload identities, or secrets management.
• Strong understanding of the Non-Human Identity security lifecycle, including discovery, classification, ownership, risk assessment, governance, monitoring, remediation, and retirement.
• Strong understanding of different NHI types, including service and application accounts, workload and machine identities, API identities and API keys, service principals, access tokens and OAuth credentials, SSH keys, certificates, secrets and credentials, CI/CD identities, cloud workload identities, containers and Kubernetes identities, and robotic/process automation identities.
• Hands-on experience with NHI security, secrets management, PAM, IAM, or identity security platforms.
• Preferred experience with Oasis Security, Clutch Security, and Entro or comparable NHI security platforms.

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family))

Job Data by YubHub.

Key Responsibilities

• Establish and maintain deep, consultative relationships with customer executives and security leaders, serving as their primary trusted advisor on cybersecurity matters
• Identify and uncover opportunities where GuidePoint Security solutions can address customer cybersecurity needs and business objectives
• Provide expert guidance on cybersecurity strategy, risk management, and security program development tailored to each customer's unique environment
• Represent GuidePoint Security as a subject matter expert in the cybersecurity community through speaking engagements, publications, and industry events
• Partner closely with sales, delivery, and product teams to ensure seamless customer experiences and drive solution alignment
• Stay current on emerging threats, industry trends, and regulatory requirements affecting customers in the region, and proactively communicate relevant insights to customers
• Serve as a senior resource and mentor to colleagues, contributing to the development of best practices, methodologies, and advisory frameworks across the organization

Other Responsibilities

• Identify opportunities for program efficiency, alignment, and optimization across client engagements
• Advocate internally for client requirements, ensuring the right technical, architectural, and strategic resources are assigned
• Guide the creation of roadmaps and strategic plans that support client growth and security maturity
• Support vendor relationship management to ensure solution fit, partner accountability, and long-term success
• Partner with Architects and Presales Engineers to correctly identify, socialize, and document client requirements
• Collaborate with Sales leadership to support regional and account-specific resource alignment
• Work with Service Delivery and Engagement Leadership to define achievable program outcomes and ensure continuity from presales to delivery
• Coordinate with vendor partners to shape and maintain long-term strategic relationships
• Embrace emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes

Required Qualifications

• 10+ years of experience in cybersecurity, with at least 5 years in advisory, consulting, or senior customer-facing roles
• Ability to challenge assumptions, clarify goals, and advocate for measurable outcomes
• Demonstrated success in building and managing executive-level customer relationships that drive measurable business outcomes
• Deep expertise across multiple cybersecurity domains (e.g., risk management, compliance, incident response, security architecture)
• Strong business acumen with ability to translate technical concepts into business value for diverse stakeholders
• Excellent communication and presentation skills with C-level executives
• Established network and reputation in the New York City cybersecurity community
• Must be local to the New York City metropolitan area

Preferred Qualifications

• Relevant certifications such as CISSP, CISM, CISA, or similar
• Experience with security frameworks (NIST, ISO 27001, CIS Controls)
• Background in professional services or consulting
• Track record of driving significant revenue growth through advisory relationships

Benefits

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

Key Responsibilities

• Establish and maintain deep, consultative relationships with customer executives and security leaders, serving as their primary trusted advisor on cybersecurity matters
• Identify and uncover opportunities where GuidePoint Security solutions can address customer cybersecurity needs and business objectives
• Provide expert guidance on cybersecurity strategy, risk management, and security program development tailored to each customer's unique environment
• Represent GuidePoint Security as a subject matter expert in the cybersecurity community through speaking engagements, publications, and industry events
• Partner closely with sales, delivery, and product teams to ensure seamless customer experiences and drive solution alignment
• Stay current on emerging threats, industry trends, and regulatory requirements affecting customers in the region, and proactively communicate relevant insights to customers
• Serve as a senior resource and mentor to colleagues, contributing to the development of best practices, methodologies, and advisory frameworks across the organization

Other Responsibilities

• Identify opportunities for program efficiency, alignment, and optimization across client engagements
• Advocate internally for client requirements, ensuring the right technical, architectural, and strategic resources are assigned
• Guide the creation of roadmaps and strategic plans that support client growth and security maturity
• Support vendor relationship management to ensure solution fit, partner accountability, and long-term success
• Partner with Architects and Presales Engineers to correctly identify, socialize, and document client requirements
• Collaborate with Sales leadership to support regional and account-specific resource alignment
• Work with Service Delivery and Engagement Leadership to define achievable program outcomes and ensure continuity from presales to delivery
• Coordinate with vendor partners to shape and maintain long-term strategic relationships
• Embrace emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes

Required Qualifications

• 10+ years of experience in cybersecurity, with at least 5 years in advisory, consulting, or senior customer-facing roles
• Ability to challenge assumptions, clarify goals, and advocate for measurable outcomes
• Demonstrated success in building and managing executive-level customer relationships that drive measurable business outcomes
• Deep expertise across multiple cybersecurity domains (e.g., risk management, compliance, incident response, security architecture)
• Strong business acumen with ability to translate technical concepts into business value for diverse stakeholders
• Excellent communication and presentation skills with C-level executives
• Established network and reputation in the New England cybersecurity community
• Must be local to the New England area

Preferred Qualifications

• Relevant certifications such as CISSP, CISM, CISA, or similar
• Experience with security frameworks (NIST, ISO 27001, CIS Controls)
• Background in professional services or consulting
• Track record of driving significant revenue growth through advisory relationships

Benefits

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The ideal candidate will have broad architecture knowledge across various network, cloud, identity, application, data, and infrastructure security domains. They should also have practitioner knowledge on implementing firewalls, secure web gateways, ZTNA solutions, endpoint security platforms, and data loss prevention technologies.

Key responsibilities include:

• Reviewing the current state of the network architecture
• Assessing its maturity
• Making recommendations to improve the security posture that aligns with business risk and compliance needs

The Senior Security Architect will need to have strong understanding of security architecture principles, threat modeling, and secure design patterns. They must be able to write clear assessment reports and present recommendations to C-Suite leadership.

Benefits include:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The successful candidate will deliver comprehensive current state analysis, future state recommendations, maturity enhancements, and strategic roadmaps.

Key responsibilities include:

• Leading IAM assessment engagements and delivering executive-ready deliverables
• Facilitating discovery sessions to evaluate client environments across IGA, AM, PAM, and Identity Verification (IdV) domains
• Developing polished, executive-ready deliverables that address people, process, and technology recommendations
• Serving as a trusted advisor during the presales process, identifying and aligning the right IAM services to client needs
• Supporting clients through vendor selection and helping define a clear path forward for IAM program improvements
• Collaborating with internal teams to continuously develop and refine assessment methodology and service offerings
• Contributing to thought leadership through development of reusable frameworks, templates, and best practice content
• Embracing emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes

Requirements:

• 7+ years of experience in IAM strategy, governance, and advisory services spanning IGA, AM, PAM, and IdV
• Exceptional verbal and written communication skills with a demonstrated ability to create and present compelling, executive-level deliverables
• Experience conducting IAM maturity assessments and developing strategic roadmaps
• Proven ability to manage stakeholder relationships across technical and business audiences
• 4-5 years of experience supporting presales engagements, scoping complex IAM projects, and developing statements of work
• Deep understanding of IAM industry standards, frameworks, and best practices including NIST, ISO, and OWASP
• Self-motivated with the ability to effectively manage a remote work environment and work independently
• Ability to manage multiple client engagements simultaneously while maintaining high-quality deliverables
• Strong business acumen with the ability to translate complex IAM concepts into clear business value and risk language for executive audiences

Preferred qualifications:

• Relevant industry certifications such as CISSP, CISM, or CISA
• Familiarity with IAM-related compliance frameworks such as SOX, HIPAA, or GDPR
• Creative thinker with the ability to develop innovative advisory approaches and presentation styles that clearly communicate complex IAM concepts to diverse audiences
• Familiarity with common IAM vendor landscapes to support objective vendor selection guidance

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

Responsibilities:

• Consistently meet sales and profitability goals
• Position, configure and quote product and service solutions to clients
• Participate in industry organisations such as ISSA, ISACA, OWASP etc.
• Manage leads and opportunities through Salesforce and other CRM tools
• Accurately and consistently report sales forecasts and opportunity funnels
• Participate in creation, editing and closure of services proposals
• Work with GuidePoint Security vendors to understand and position their technologies
• Represent GuidePoint Consultants to clients and articulate areas of expertise
• Set proper expectations and maintain open communication with clients and vendors
• Professionally develop and present sales presentations to large groups and executive level clients

Requirements:

• Minimum 7 years outside sales experience in the IT space required
• Current enterprise security space experience preferred
• Strong, established relationships with key accounts in the territory required
• Experience with Salesforce.com
• Strong group presentation skills a must
• Verifiable history of exceeding sales goals and generating leads
• Demonstrated ability of lead generation and opening new accounts
• Bachelor's degree preferred
• Network security vendor related certifications strongly preferred

Compensation range: $50-$100K base salary plus commissions DOQ

Benefits:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

Responsibilities:

• Implement Saviynt IGA solutions for clients (SailPoint or C1 experience a plus)
• Perform assessments and IGA roadmaps for clients
• Help shape proposals for IGA deployments and assessments
• Help shape statements of work for IGA related work
• Develop deliverable templates and act as subject matter expert for client discussions
• Provide mentoring and guidance to more junior level engineers
• Embrace emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes

Experience required:

• Seven plus years of hands-on experience with designing, architecting & building IGA solutions (SailPoint, Saviynt, C1)
• Experience with common connectors including Active Directory (AD), Azure AD, JDBC, exchange, Mainframe, web service connector and authoritative source integration (such as SAP and Workday)
• Knowledge of Java/J2EE, Beanshell, XML and web services (REST/SOAP)
• Experience with workflows including joiner, leaver, mover
• Solid understanding of object models, rules and policies
• Experience with both life cycle manager and compliance manager modules
• Experience with the software development lifecycle (SDLC)
• Strong verbal and written skills to develop technical documentation and presentations
• Experience in leading technical architecture and security design discussions with developers and infrastructure team
• Experience with consultative and complex technical deployment projects, managing various stakeholder relationships
• Understanding of cloud computing technologies, business drivers, and emerging computing trends
• Demonstrated strong project delivery experience with regard to estimates, planning and deliverables using project management methodologies
• Exposure to Privileged Access Management solutions or Okta is a big plus

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Senior Technical Project Manager will be required to demonstrate exceptional communication, leadership, and problem-solving skills to drive cross-functional teams and manage complex security initiatives.

Responsibilities:

• Lead a team of cyber security engineers delivering cybersecurity projects using established project management methodologies
• Define project scope, cost, success criteria, dependencies, assumptions, and constraints with stakeholders
• Design and implement global technologies and services to meet the Federal Region's business needs
• Manage development teams on system design and gap analysis, in addition to prioritization of critical strategic components of the deployments
• Coordinate the collection of business requirements across multiple regional partners
• Direct the rollout of new and existing functionality to multiple agencies
• Develop measures to define progress and success
• Establish ongoing reporting requirements and key performance indicators for confirming return on investment
• Maintain project budgets and forecasts
• Develop and maintain contract management plans, project plans, identify resource needs, and manage project schedule and budget
• Collaborate effectively across teams to define strategy, goals, and commitment to timelines and deliverables
• Work at an individual and team level to develop project growth and opportunities beyond initial project scope
• Own all project communications to project members and stakeholders on progress, issues, and risks

Requirements:

• Active TS/SCI w/FSP clearance
• 7+ years of direct Project Management experience
• 5+ years of managing a technical team focused on Cyber Security or Operations
• 5+ years of experience managing a Program with over 10 people
• 5+ years of experience in public sector/DOD/IC contract management
• BS degree in Computer Science, Cybersecurity, or equivalent hands-on experience in software engineering or IT infrastructure
• Project Management Professional (PMP) Certification
• Security+ Certification
• Knowledge and awareness of the certification in the Information Technology Infrastructure Library (ITIL) framework standards for information technology (IT) infrastructure, development, and operations

Preferred Qualifications:

• Certified Scrum Master (CSM)
• Certified Information Security Manager (CISM)
• Certified Security Project Manager (CSPM)
• Agile Certified Practitioner (ACP)
• ITIL 4 Foundations Certification or equivalent

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

Responsibilities:

• Technical Execution & Engagement Delivery: Lead and perform DFIR investigations, including host forensics, network traffic analysis, malware handling/triage, log review, and BEC analysis.
• Engagement Communication: Drive effective engagement communication, time management, and coordination throughout the investigative lifecycle.
• Deliverables: Author comprehensive engagement deliverables tailored to both technical and managerial audiences.
• Mission-Critical Assessments: Apply creativity and adaptability to perform advanced, mission-critical assessments across reactive and proactive engagement types.
• Collaboration & Continuous Improvement: Collaborate with peers, utilize automation and orchestration, and contribute to the integration of existing and future open-source and commercial tools.
• Client & Practice Contribution: Foster client relationships, help the DFIR Practice adapt to emerging threats and diverse client needs, and maintain a strong desire to learn, adapt, and improve.

Requirements:

• 7 years of experience, including 4+ years of hands-on experience performing incident response investigations and 6+ combined years of IT and information security experience.
• Demonstrated proficiency across core DFIR disciplines: host forensics, network traffic analysis, malware handling/triage, log review, and BEC analysis.
• Strong written and verbal communication skills.
• Creativity and adaptability to solve challenging and complex problems.

Benefits:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Senior Cloud Security Automation & AI Engineer will be required to demonstrate strong technical depth across cloud-native AI services, agentic AI design patterns, and AI governance frameworks. This individual will compose and secure agentic AI solutions, implement AI gateways and policy-based controls, and translate complex security and automation requirements into actionable, outcome-driven solutions.

Responsibilities

Delivery & Technical Execution

• Lead end-to-end delivery of cloud security automation and AI engagements, including scoping, architecture design, implementation, and client handoff
• Design and implement secure agentic AI solutions, including multi-agent orchestration, Model Context Protocol (MCP) integrations, AI gateway architectures, and policy-based access controls using frameworks such as Cedar
• Architect and enforce AI governance policies, including usage policies, data handling controls, model access management, and compliance guardrails for enterprise AI deployments
• Develop and deploy AI-powered security automation solutions (e.g., automated compliance checks, threat detection agents, remediation workflows) for clients
• Produce high-quality deliverables including architecture documents, runbooks, SOPs, and security assessment reports

Technical Oversight & Quality Assurance

• Provide technical oversight and quality assurance across active engagements, ensuring deliverables meet GuidePoint standards and client expectations
• Mentor and guide junior engineers on best practices for cloud security, AI/ML implementation, and secure development
• Conduct architecture reviews, code reviews, and security assessments for AI/ML workloads

Presales & Business Development Support

• Support presales activities by participating in client discovery calls, demos, and technical deep dives
• Contribute to proposals, statements of work (SOWs), and pricing estimates for AI security and automation engagements
• Collaborate with account executives and practice leadership to identify opportunities and shape client solutions

Practice Development & Thought Leadership

• Contribute to practice development by building reusable tools, templates, accelerators, and reference architectures
• Develop thought leadership content such as blog posts, whitepapers, webinars, and conference presentations
• Stay current on emerging AI/ML platforms, cloud security trends, and regulatory developments to inform practice strategy

Requirements

• Bachelor's Degree (BS/BA) + 5-7 years of experience
• Demonstrated experience designing, implementing, or securing AI/ML workloads in cloud environments
• Hands-on proficiency with primary AI/ML platforms: Amazon Bedrock, Amazon Q, and Amazon SageMaker
• Preferred experience with secondary platforms: Azure AI Foundry, Microsoft 365 Copilot, Copilot Studio, Azure Machine Learning
• Experience in a client-facing consulting or professional services role
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes
• Basic Python competency, including the ability to read, write, and troubleshoot code for automation and integration tasks
• Understanding of agentic AI patterns, AI governance frameworks, and secure AI composition (e.g., multi-agent orchestration, tool-use guardrails, prompt injection mitigation)

Benefits

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

As a Senior Application Security Consultant within Strategic Services, you'll deliver these offerings to clients across various industries. You'll join GuidePoint's elite team to perform engagements, communicate with clients, deliver comprehensive reports, and provide remediation guidance. You'll also contribute to evolving our service offerings in response to emerging threats and client needs.

We’re ideally seeking candidates who have transitioned from software development into application security, bringing practical coding experience and an in-depth understanding of secure software development practices.

Role Requirements

• Willingness to travel up to 10%
• Delivering Application Security services, including Application Threat Modeling, Application Architecture Reviews, and AppSec/DevSecOps Program Assessments
• Author comprehensive assessment deliverables tailored to both technical and managerial audiences detailing technical execution, deficiencies, business impact, and remediation strategies
• Understanding of application security landscape, tools, methodologies, and frameworks such as OWASP SAMM, OWASP DSOMM, NIST SSDF, SLSA, NIST AI RMF, and MITRE ATLAS
• Deep understanding of application security issues, mitigation strategies, and common security controls
• Ability to analyze and understand complex application architectures
• Experience working directly within development teams and integrating security into the SDLC
• Assist with Practice development, improving offerings, and mentoring team members
• Contribute to marketing initiatives via research, speaking, writing, and tool development
• Foster client relationships through support, information, and guidance while managing concurrent client engagements
• Demonstrates a startup mentality with a highly driven, high-performance approach to work
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes

Education, Credentials, and Experience

• Comprehensive hands-on experience using generative AI in automated workflows
• Direct hands-on experience in application security service offerings, including application threat modeling, architecture reviews, and AppSec/DevSecOps program assessments
• Experience with application security controls, architectures, requirements, and industry standards
• Development and/or application architecture design background with understanding of secure implementation practices for cryptography, input validation techniques to prevent injection attacks, and exception management
• Operational DevSecOps experience
• Development experience in JavaScript, shell, Python, Java, C++, PHP, or C#, with ability to translate security requirements into technical implementations
• Excellent writing, communication, and time management skills
• Minimum of 6 years of experience in Application Security and/or Software Development, with at least 3 years in Application Security
• Minimum of 2 years of experience in consulting services or internal security roles requiring effective communication with both technical teams and executive leadership
• Bachelor’s degree in a relevant discipline or equivalent experience

Benefits

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Senior Access Management Engineer is responsible for designing, deploying, integrating, and optimizing Duo MFA and access solutions for some of the largest organizations in the US. This role serves as the go-to technical lead for all Duo engagements, owning architecture decisions, integration design, and delivery execution.

Responsibilities:

• Duo Security – Lead Engineer (Primary – 50%):
• Serve as the primary technical lead on all Duo Security engagements, owning end-to-end delivery from design through implementation and handoff
• Lead Duo deployment architecture and design, including Duo MFA policy design, user enrollment strategies, self-service portal configuration, and phased rollout planning
• Duo Authentication Proxy , Deployment, configuration, high availability, and integration with RADIUS, LDAP, and Active Directory
• Duo Single Sign-On (SSO) , SAML 2.0 and OIDC federation, application onboarding, and custom login branding
• Duo Device Trust , Trusted endpoint policies, certificate-based device verification, and managed/unmanaged device posture enforcement

• Okta & Ping Identity – Supporting Engineer (Secondary – 35%):
• Serve as a supporting engineer on Okta and Ping Identity engagements when Duo workload permits, working under the direction of the engagement's lead architect
• Contribute hands-on technical work on Okta engagements, including application integration, SSO configuration, MFA policy configuration, and adaptive access policies

• Project Ownership & Client Success (10%):
• Serve as the technical project owner on Duo engagements, taking full accountability for successful delivery and client outcomes
• On Okta/Ping engagements, support the lead architect with clear status updates, task completion, and proactive communication of blockers

• Presales Support & Business Development (5%):
• Provide Duo-focused technical expertise during the presales process to support new business opportunities
• Assist with technical discovery, scoping, and requirements gathering for prospective Duo and MFA engagements

Requirements:

• Bachelor’s degree in computer science, Information Security, or related field , or equivalent work experience
• 5+ years of experience in Identity and Access Management, with a strong emphasis on MFA and access security
• Deep, hands-on experience with Cisco Duo Security, including Duo MFA policy design, deployment, and administration
• Working proficiency with at least one of the following: Okta , Application integration, SSO, MFA, Lifecycle Management, directory integrations; Ping Identity , PingFederate, PingOne, PingAccess configuration and administration
• Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and RADIUS protocols
• Proficiency with Python, PowerShell, or Bash for automation and API integrations

Job Data by YubHub.

Responsibilities:

• Serve as a technical resource for clients across the Heartland region, delivering hands-on support, design guidance, and security best practices in the network security domain
• Collaborate with sales teams to scope solutions, conduct technical discovery, and present security architectures that align with client business objectives
• Build and maintain deep expertise in network security platforms, translating technical capabilities into strategic business outcomes for clients
• Develop trusted advisor relationships with client stakeholders by demonstrating empathy, active listening, and a genuine commitment to solving their challenges
• Produce clear, concise documentation including security assessments, architecture recommendations, and implementation guides
• Continuously expand your knowledge across adjacent security domains, working toward becoming a well-rounded security strategist
• Embrace emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes

Requirements:

• Network Security Foundation – Hands-on experience with network security products and concepts such as zero trust architecture, next-generation firewalls, application identification (AppID), micro-segmentation, and secure access
• Firewall & Platform Proficiency – Proven experience working with firewall and network security platforms such as Palo Alto Networks, Checkpoint, and/or Fortinet
• Troubleshooting Ability – Familiarity with common troubleshooting methodologies on network security platforms, including firewalls, routing, NAT, and VPN
• Operating System Knowledge – Proficiency across client and server operating systems including Windows, macOS, and Linux
• Security Fundamentals – Working knowledge of general security concepts aligning with CISSP domains
• Communication Skills – Comfortable producing clear, concise reports and documentation related to security incidents, system performance, and recommendations

Preferred Qualifications:

• Experience with adjacent security solutions including CrowdStrike, SentinelOne, Zscaler, Microsoft Defender suite, Carbon Black, Splunk, and/or Cisco security products
• Experience authoring security runbooks, policies, and best practice documentation
• Exposure to pre-sales, client-facing consulting, or solution architecture
• Bachelor's degree in a relevant discipline or equivalent professional experience
• Industry certifications (PCNSE, CCNP Security, CISSP, etc.) are a plus but not required

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Security Engineer, CIS will be required to demonstrate strong event triage, and threat hunting capabilities, alongside a solid understanding of networks and systems fundamentals. The ideal candidate will have a strong bias toward automating the boring stuff and bring a genuine curiosity about attack mechanics.

Responsibilities:

• Investigate and prioritize alerts, separate signal from noise, and drive incidents to resolution or escalation.
• Proactively search for adversary activity and develop and tune high-fidelity detections.
• Translate intel into detections, hunts, and response actions that measurably reduce risk.
• Build tooling and automation code with AI coding agents, applying sound engineering judgment to review, test, and safely deploy what they produce.
• Contribute to detection-as-code and runbooks, improving coverage, quality, and repeatability over time.
• Partner with peers and internal customers to share knowledge, document your work, and continuously raise the bar for the team.
• Participate in a rotating on-call schedule to support incident response outside of standard business hours.

Requirements:

• High School diploma + 5 years of relevant experience, OR Bachelor’s degree (BS/BA) + 2 years of relevant experience, OR Master’s degree (MS/MA).
• Experience triaging events with a strong focus on technical accuracy, root cause analysis and timely escalation.
• A solid grasp of how attacks work and common attack vectors, TCP/IP and core networking, and authentication and authorization concepts.
• Some hands-on experience already building automation or tooling with LLMs / AI agents applied thoughtfully and safely.
• Scripting skills (e.g. Python) applied to security operations or other business workflow automation.

Benefits:

• Remote workforce primarily (U.S. based only)
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The role focuses on Microsoft Entra ID, Active Directory, Identity & Access Management (IAM), PKI, Conditional Access Policy (CAP) assessments, and modern identity security platforms while helping customers navigate emerging challenges around Non-Human Identity (NHI) and AI/agentic identity security.

Responsibilities:

• Lead and deliver identity-focused engagements from scoping through execution and final deliverables
• Assess, design, and improve Microsoft Entra ID / Active Directory environments
• Perform Conditional Access Policy (CAP) assessments and identity hardening reviews
• Design and advise on PKI, certificate lifecycle, and foundational cryptographic controls
• Support Identity governance, MFA, PAM, Conditional Access, PIM, RBAC, and passwordless / FIDO2 initiatives
• Advise on and help secure modern identity platforms, including CrowdStrike Falcon Identity Protection / Next-Gen Identity Security (ITDR), Microsoft Entra, Okta, and related solutions
• Help customers address Non-Human Identity (NHI) risks (service accounts, workload identities, API keys, secrets) and emerging AI / agentic identity security concerns
• Support SecOps initiatives including SIEM, SOC, ITDR, threat hunting, log ingestion, telemetry coverage, and alert tuning
• Perform Security Architecture Reviews and technical assessments, and develop actionable remediation roadmaps
• Mentor and provide technical leadership to junior consultants and analysts, elevating team capability
• Support presales activities (scoping calls, solutioning, statements of work, and technical demonstrations) as a trusted advisor to prospective and existing customers
• Produce high-quality customer deliverables and technical documentation
• Embrace emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes

Requirements:

• 8+ years of cybersecurity consulting, engineering, or architecture experience, with demonstrated project delivery ownership
• Deep, hands-on experience with Microsoft Entra ID / Active Directory and M365 security
• Experience implementing or administering IAM controls, PKI, and authentication technologies
• Strong command of Conditional Access, MFA, SSO, RBAC, PIM, PAM, and Zero Trust concepts
• Experience supporting SecOps functions , SIEM/Sentinel, SOC, ITDR, or threat hunting
• Demonstrated leadership skills , leading engagements, mentoring team members, and owning delivery outcomes
• Strong customer-facing and presales skills with the ability to lead conversations, present to technical and executive audiences, and act as a trusted advisor
• Excellent written and verbal communication skills
• Ability to lead and manage multiple customer engagements in parallel
• Eastern Time Zone availability required

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

As a Security Automation Engineer, you will play a critical role in designing and building security automation and orchestration workflows to help organizations optimize resources and integrate best-fit solutions that mitigate risk.

Required Qualifications:

• 5+ years of experience in security operations with a working understanding of how a SOC functions end-to-end (alert triage, escalation, incident response, case management)
• 3+ years of experience designing and building security automation and orchestration workflows
• Hands-on experience with at least one SOAR/automation platform (Tines, Torq, or Cortex XSOAR highly preferred)
• Proficiency integrating security and IT systems via REST APIs, webhooks, and JSON
• Scripting ability, primarily Python, for custom logic, data transforms, and handling within automated workflows
• Working knowledge of the tooling categories automations connect to: SIEM, EDR/XDR, ticketing (ServiceNow, Jira), threat intelligence, and email security
• Ability to decompose a manual security process into a reliable automated workflow, including error handling, conditional logic, and secure runs

Preferred Qualifications:

• Familiarity using LLMs in a development and automation context, including AI-assisted or agentic coding tools such as Claude Code or Codex
• Exposure to MCP-based integrations
• Platform or vendor certifications: Tines, Torq, Cortex XSOAR, or SIEM/EDR certs (such as Splunk, Microsoft Sentinel, CrowdStrike)
• Cloud experience (AWS or Azure) and familiarity with cloud-native security tooling
• Prior delivery experience in a consulting, professional services, or MSSP environment
• Detection engineering exposure in areas such as detections-as-code (DaC), Sigma, or similar
• Version control and automation-as-code practices (Git or similar repo controls)

Benefits:

• Remote workforce primarily (U.S.-based only, some travel may be required for certain positions)
• Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Security Architect will act as the primary technical resource supporting the sales cycle, partnering with Account Executives to understand customer environments, design solutions, and demonstrate value across the network and data security portfolio.

Key Responsibilities:

• Serve as the lead technical resource in the sales cycle for network and data security opportunities
• Conduct discovery sessions with prospective and existing customers to understand current network architecture, security posture, and business drivers
• Design and present tailored network and data security solutions
• Deliver compelling product demonstrations, proof-of-concepts (POCs), and technical workshops
• Respond to RFPs/RFIs with accurate technical content and solution positioning
• Build and maintain strong relationships with customer technical stakeholders
• Collaborate with internal teams to relay customer feedback and ensure smooth handoff after the sale
• Stay current on network and data security trends, competitive landscape, and emerging threats
• Represent the company at regional industry conferences, trade shows, and customer events
• Support internal enablement efforts, including training sales teams on technical positioning and messaging

Required Qualifications:

• 10+ years of experience in network and data security engineering, architecture, or a related technical role
• Strong working knowledge of network and data security technologies, such as:
• Next-Gen Firewalls (NGFW)
• SD-WAN / SASE
• Zero Trust Network Access (ZTNA)
• IDS/IPS
• VPN and remote access solutions
• Network segmentation and micro-segmentation
• Data Loss Prevention (DLP)
• Data classification and governance
• Cloud data security (CASB, DSPM)
• Excellent presentation, communication, and interpersonal skills
• Must reside in the Northeast region and be willing to travel regionally as needed
• Self-motivated and comfortable working in a home-office/remote setup
• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience

Preferred Qualifications:

• Prior presales, sales engineering, or solutions engineering experience
• Previous experience working at a Value-Added Reseller (VAR)
• Industry certifications such as CISSP, CCNP Security, PCNSE, NSE (Fortinet), or equivalent vendor certifications
• Experience responding to formal RFP/RFI processes
• Familiarity with cloud security concepts and hybrid network architectures

Benefits:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Security Architect will be responsible for the scope, assessment, design, testing, and technical documentation for the implementation, support, and security of identity solutions.

Key responsibilities:

• Lead the evaluation, design, and development of Active Directory & Azure Active Directory technical requirements, solutions, and implementation roadmap.
• Develop and enforce IAM policies, standards, and procedures to ensure compliance with regulatory requirements and industry best practices.
• Ensure continuous improvement within the IAM security architecture by introducing and implementing emerging security technologies and practices.
• Provide technical advice, guidance, expertise, and risk analysis to global project and operational teams.
• Translate requirements into an Architectural design and influence the deployment of key infrastructure components.
• Maintain a thorough understanding of existing and emerging Microsoft Entra ID and related core technologies.
• Analyze current Azure Active Directory environment to identify both technical and operational challenges while making recommendations and developing solutions for improvement.
• Maintain and optimize on-premises Active Directory (AD) infrastructure, including DNS, GPOs, and domain controllers.
• Participate in or lead complex or high severity troubleshooting and incident/problem resolutions with other infrastructure teams.
• Evaluate and ensure the resolution of technically complex security issues, internal control issues, critical incidents and/or crisis resolution management, escalating as necessary.
• Implement and enforce Multi-Factor Authentication (MFA) and security best practices across user accounts and devices.
• Develop and manage integrations using the Microsoft Graph API for automation and custom applications, enabling advanced capabilities across Microsoft 365 services.
• Create custom scripts to automate administrative tasks and data retrieval from the Graph API, enhancing operational efficiency.
• Write and maintain Advanced PowerShell scripts to automate user and resource provisioning, reporting, and service configurations across Entra ID and Active Directory.
• Implement and maintain security best practices.

Requirements:

• 10+ years of relevant working experience in IT Security and IT Architecture.
• 7+ years of experience with Active Directory architecture and infrastructure.
• 3+ years of experience with Azure Active Directory architecture and design.
• 5+ years of experience with Identity and Access Management (IAM) processes and technologies.
• Proven expertise in designing and implementing IAM solutions in complex environments.
• Expertise in managing Azure AD/Entra, including Conditional Access, MFA, security best practices, hybrid environments, GPO's, On-Premises Active Directory Migrations and Azure AD Connect.
• Experience with Microsoft Graph API for data retrieval and automation across Azure AAD.
• In-depth knowledge of identity governance, authentication, authorization, and federation.
• Understanding of federation technologies (WS-Fed, OAuth, SAML, etc.).
• Enterprise/Domain Admin and/or Azure Global Admin responsibilities.
• Proven knowledge in managing Active Directory 2016/2019/2022 infrastructure for the Enterprise.
• Strong experience in PowerShell and Microsoft Graph API.
• Knowledgeable of Microsoft Security Stack: Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Entra ID, Microsoft Purview Information Protection, Data Loss Prevention and Compliance Center.
• Strong communication and interpersonal skills, with the ability to collaborate effectively with stakeholders at all levels.

Benefits:

• Remote workforce primarily (U.S. based only).
• Group Medical Insurance options.
• Group Dental Insurance.
• 12 corporate holidays and a Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option.

Job Data by YubHub.

The SecOps Security Architect will engage in the development of target architectures, professional-services solutions, and technology roadmaps while providing 'Wow Them' service to clients, internal customers, and co-workers.

Key areas of focus include:

• Connecting client requirements to appropriate technologies and service offerings.
• Improving the accuracy and consistency of technical scoping and delivery.
• Developing repeatable architectures, estimation models, and implementation standards.

Responsibilities:

• Lead technical discovery and translate client objectives, environments, constraints, and risks into current-state and target-state architectures.
• Provide presales support by developing solution approaches, architecture diagrams, technical presentations, proposals, and responses to client requirements.
• Define engagement scope, activities, assumptions, dependencies, responsibilities, exclusions, deliverables, acceptance criteria, and level-of-effort estimates.
• Provide architectural leadership and technical oversight across SecOps Engineering and Data Analytics engagements.
• Evaluate SIEM, SOAR, data pipeline, observability, automation, AI, and related technologies against client use cases, integration requirements, operating models, and existing investments.
• Develop and maintain reference architectures, discovery questionnaires, scoping tools, estimation models, implementation patterns, and technical standards.
• Mentor SecOps Engineers and SecOps Data Engineers while reviewing designs and deliverables for technical accuracy, scope alignment, and maintainability.
• Partner with account executives and regional sales teams to qualify opportunities, shape services, identify technical risks, and establish realistic client expectations.
• Support strategic client engagements, architecture workshops, technical escalations, and delivery-quality reviews.
• Maintain awareness of regional pipeline, delivery capacity, technology demand, and skills requirements to help align opportunities with available practice capabilities.

Requirements:

• Seven to ten years of experience in security operations, security architecture, SIEM engineering, data engineering, observability, consulting, or related fields.
• Demonstrated experience designing or leading SIEM, SOAR, security telemetry, data pipeline, observability, or security analytics engagements.
• Experience conducting client discovery, developing solution architectures, scoping professional-services engagements, and estimating engineering effort.
• Advanced understanding of SOC operating models, SIEM, SOAR, detection engineering, automation, security telemetry, data pipelines, and observability.
• Experience identifying technical assumptions, dependencies, delivery risks, acceptance criteria, and scope boundaries.
• Working knowledge of cloud architecture, APIs, authentication, networking, data formats, schemas, integration patterns, and access-control concepts.
• Ability to review technical queries, scripts, transformations, detection logic, automation workflows, and architecture documentation.
• Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related field, or equivalent professional and military experience.
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Security Operations Engineer will engage in the development of security telemetry pipelines, SIEM detection content, and security automation while providing 'Wow Them' service to clients, internal customers, and co-workers.

Key responsibilities:

• Configure and support the ingestion of security telemetry into SIEM platforms using agents, APIs, syslog, and native integrations.
• Implement parsing, field extraction, enrichment, and normalisation logic using formats such as regex, JSON, key-value data, CEF, and Windows Event Logs.
• Develop, test, map, and tune SIEM detection rules while helping reduce false positives and identify detection coverage gaps.
• Support the configuration, maintenance, troubleshooting, and optimisation of SIEM and SOAR platforms, integrations, and workflows.
• Participate in client discovery sessions and assist with documenting current-state architectures, data flows, SOC processes, and technical findings.
• Contribute to reusable implementation patterns, work instructions, detection content, technical documentation, and service-delivery standards.
• Maintain awareness of SIEM, SOAR, XDR, observability, and emerging AI-enabled Security Operations technologies.
• Execute assigned technical work across multiple client environments while managing priorities, dependencies, and delivery commitments.
• Communicate technical issues, risks, progress, and scope considerations to technical leads, project managers, and client stakeholders.

Requirements:

• Two to five years of experience in security operations, SIEM engineering, detection engineering, or a related field.
• Hands-on experience implementing or supporting at least one enterprise SIEM platform.
• Experience working with log data, security telemetry, parsing, normalisation, and data-source onboarding.
• Exposure to detection engineering, SOC investigation workflows, APIs, integrations, and security automation.
• Basic scripting experience with Python, PowerShell, or a similar language.
• Familiarity with SIEM query languages such as SPL, KQL, Lucene, or SQL-like languages.
• Bachelor's degree in cybersecurity, information technology, computer science, or a related field, or equivalent professional and military experience.

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Security Data and Analytics Engineer must demonstrate strong data engineering, technical troubleshooting, and client communication skills. The engineer must lead through influence and apply sound business and financial awareness when making decisions involving data volume, processing cost, platform capacity, project scope, and client value.

Key areas of focus include:

• Establishing reliable and reusable data pipelines.
• Improving data quality, accessibility, and processing efficiency.
• Supporting security, observability, analytics, and operational use cases.

Responsibilities:

• Configure and support data ingestion from applications, infrastructure, cloud services, security tools, and business systems.
• Develop and maintain pipelines that collect, route, filter, enrich, transform, mask, aggregate, and deliver data to supported destinations.
• Implement parsing, field extraction, schema mapping, timestamp handling, data-type conversion, and normalization for structured and unstructured data.
• Validate data completeness, consistency, accuracy, timeliness, and destination delivery while troubleshooting malformed, duplicated, delayed, or missing data.
• Contribute to reusable pipeline patterns, parsers, transformation logic, validation routines, data dictionaries, and implementation standards.
• Participate in data architecture assessments and document source inventories, data flows, dependencies, ownership, quality issues, and recommendations.
• Maintain awareness of data pipeline, analytics, log-management, observability, cloud, and emerging AI-enabled data technologies.
• Execute technical work across multiple client environments while managing delivery priorities, dependencies, and source-system coordination.
• Communicate data-quality issues, technical risks, progress, and scope considerations to technical leads, project managers, and client stakeholders.
• Support regional delivery priorities and collaborate with SecOps engineers when data pipelines support SIEM, detection, investigation, or automation requirements.

Requirements:

• Two to five years of experience in data engineering, log management, observability, analytics engineering, platform engineering, or a related field.
• Hands-on experience with at least one data pipeline, analytics, log-management, or observability platform.
• Experience onboarding data sources and troubleshooting ingestion, transformation, processing, or destination-delivery issues.
• Experience working with structured and unstructured data formats such as JSON, XML, CSV, key-value data, syslog, or CEF.
• Understanding of APIs, authentication, certificates, service accounts, network connectivity, and integration concepts.
• Basic scripting experience with Python, PowerShell, JavaScript, or a similar language.
• Familiarity with SQL, platform-specific query languages, or data transformation languages.
• Bachelor’s degree in data engineering, information technology, computer science, cybersecurity, or a related field, or equivalent professional and military experience.

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

Responsibilities:

• Provide effective network security implementation and consulting services for multiple unique customers and environments
• Implement and manage SASE technologies from ZScaler, Netskope, Cato or Palo Alto
• Implement and manage firewall platforms from Palo Alto, Fortigate, Check Point or Cisco
• Develop high-level network security documentation including as-builts, recommendations, implementation guides, network diagrams
• Embrace emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes

Qualifications:

• 3 to 5 years of Network Security Engineering experience in enterprise environments
• Experience in a consultative or professional services role preferred
• Experience working with deploying and integrating ZScaler, Netskope, Cato or Palo Alto solutions in enterprise environments
• Zscaler, Netskope, Cato or similar SASE tool certifications preferred
• Hands on firewall experience with Palo Alto, Fortigate, CheckPoint, Cisco ASA-Firepower
• Experience deploying firewall technologies in one of the three major public clouds; AWS, Azure or GCP
• SD-WAN experience deploying technologies such as HP-Silverpeak, Palo Alto Prisma-Cloudgenix, Cisco-Viptela including full SASE integration is a plus
• Broad experience with foundational network and security concepts
• Experience authoring security runbooks, policy, and best practice documentation
• Ability to confidently lead projects and be the trusted network security voice in customer conversations

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

Responsibilities:

• Implement and configure SailPoint IIQ and ISC solutions, including identity lifecycle management, access certifications, access requests, provisioning, and password management
• Build and maintain application onboarding: connectors, aggregation, correlation, and account/entitlement mapping
• Develop rules, workflows, forms, and transforms (BeanShell/Java for IIQ; transforms, rules, and workflows for ISC)
• Design and support IIQ-to-ISC migrations, including assessment, gap analysis, and cutover planning
• Integrate SailPoint with source systems such as Active Directory, Entra ID, Okta, HR platforms (Workday, SuccessFactors), ServiceNow, SAP, databases, and SaaS applications
• Work with client stakeholders to gather requirements, run design sessions, and translate business needs into technical designs
• Write clear technical documentation, including design documents, configuration guides, test plans, and runbooks
• Support UAT, deployment, and hypercare, and troubleshoot issues across environments
• Follow SailPoint best practices for configuration management, version control, and promotion across dev/test/prod
• Mentor junior engineers and contribute to reusable accelerators, templates, and internal knowledge

Requirements:

• 5+ years of hands-on experience implementing SailPoint IdentityIQ and/or Identity Security Cloud
• Working knowledge of both platforms, with depth in at least one
• Strong understanding of IAM/IGA concepts: joiner/mover/leaver, RBAC, role mining, SoD, certifications, and least privilege
• Experience with IIQ development (Java, BeanShell, XML artifacts) or ISC configuration (transforms, rules, REST APIs, VA management)
• Experience with connectors and integration patterns (LDAP/AD, JDBC, delimited file, web services/REST, SCIM)
• Solid SQL and scripting skills, plus familiarity with JSON, XML, and REST APIs
• Strong written and verbal communication, with the ability to explain technical concepts to non-technical audiences
• Comfortable working independently in a remote, distributed team
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

We are seeking a Network Security Engineer to join our team of skilled cybersecurity professionals. As a Network Security Engineer, you will support the design, build, and sustainment of network-based cyber defence capabilities within the organisation.

Key Responsibilities:

• Participate in the integration, operation, and sustainment of a suite of enterprise-class cybersecurity technologies.
• Perform planning and implement policy changes on next-generation firewalls.
• Assist in the analysis and design of a worldwide network security architecture.
• Administer configuration changes on enterprise load balancers.
• Work on focused special projects independently and within a group.
• Participate in the investigation and documentation of security-related incidents.
• Implement corrective measures in response to emerging network security threats.
• Brief senior contract leadership and government stakeholders on the status of the enterprise network security posture.

Requirements:

• An active Top Secret with SCI clearance (Polygraph preferred) is required prior to consideration for this role.
• Related technical experience in network security technologies such as Juniper SRX, Palo Alto Strata, F5 Load Balancer (ASM is a plus), Cisco FTD/ASA, Gigamon, FireEye, and RSA Netwitness.
• DOD 8570 IAT Level II certification (Security+ minimum to start).
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Benefits:

• 100% onsite at multiple government sites throughout the D.C. metro area.
• Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA.
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans.
• 12 corporate holidays and a Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option.

Job Data by YubHub.

Responsibilities:

• Design and implement identity architecture, hybrid sync, Conditional Access, MFA/passwordless, and identity governance
• Integrate applications via SSO, enterprise app registrations, and SCIM provisioning
• Investigate and remediate identity risks using Entra ID Protection
• Design and implement sensitivity labels, DLP, and retention policies across M365
• Support eDiscovery, Insider Risk Management, and communication compliance
• Configure device compliance, configuration profiles, and app deployments across platforms

Requirements:

• Bachelor's degree preferred
• 2-5 years in IT administration, identity management, or security operations
• Hands-on production experience with Microsoft Entra ID and on-premises Active Directory
• Knowledge of core authentication protocols: SAML, OAuth 2.0/OIDC, Kerberos, LDAP
• Experience implementing Microsoft Purview and comfort supporting Intune and Defender XDR
• Basic PowerShell scripting for automation and reporting

Benefits:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

In this senior role, you will serve as the primary technical advisor to enterprise clients shaping solutions, scoping engagements, and ensuring delivery is executed with precision, transparency, and measurable impact.

Responsibilities:

• Presales Leadership: Serve as the technical advisor throughout the sales cycle partnering with Account Executives to identify opportunities, run client-facing demos and workshops, and translate security requirements into differentiated Microsoft solutions.
• Solution Design & Scoping: Own the creation of Statements of Work (SOWs), Requests for Proposal (RFP) responses, level-of-effort estimates, and pre-sales solution architectures across Entra ID, M365, and Azure.
• Technical Oversight & Delivery: Oversee delivery teams to ensure quality, consistency, and alignment with client objectives from scoping through go-live, managing escalations against scope and delivery realities.
• Client & Executive Management: Build and maintain executive-level relationships, translating technical outcomes into business value and fostering long-term partnerships.
• Architectural Leadership: Assist the design, implementation, and lifecycle management of the practice’s Microsoft security services and reference architectures.
• Identity & Zero Trust: Architect Zero Trust across cloud and hybrid environments using Entra ID Conditional Access, MFA, Identity Governance, PIM, and continuous verification.
• Data Security & Compliance: Establish enterprise-wide data protection, insider risk, DLP, and compliance frameworks using Microsoft Purview.
• Threat Protection & SecOps: Design and operationalize the Microsoft Defender suite and Microsoft Sentinel (SIEM/SOAR), including Defender for Cloud, for unified detection and response.
• Endpoint & Modern Workplace: Define secure, user-friendly device and application management strategies with Microsoft Intune across enterprise environments.
• Integration & Automation: Design integrations across cloud platforms, SaaS applications, and security tooling, and build automation (PowerShell, KQL, Graph API, Bicep/Terraform) to streamline operations.
• Mentorship & Thought Leadership: Mentor engineers and delivery teams and act as a subject-matter expert contributing to client roadmaps, executive briefings, and industry discussions.
• Governance & Resiliency: Define governance models, lifecycle policies, and high-availability and monitoring strategies to ensure sustainable, resilient security practices.

Requirements:

• BS/BA and 7+ years of IT experience, with 6+ years focused on Microsoft security architecture, administration, and delivery across Microsoft 365, Entra ID, and Azure.
• Proven track record leading enterprise-scale deployments, migrations, and modernization projects across M365, Entra ID, and Azure (IaaS, PaaS, and SaaS).
• Deep expertise in Entra ID: Conditional Access, MFA, Identity Governance, Privileged Identity Management (PIM), and cross-platform identity integration.
• Strong command of Microsoft 365 security and compliance, including Microsoft Purview (DLP, Insider Risk, eDiscovery, Information Protection), Compliance Center, and EOP.
• Hands-on expertise across the full Microsoft Defender suite - Defender for Endpoint, Identity, Office 365, Cloud Apps, and Defender for Cloud, plus Microsoft XDR.
• Experience designing and operationalizing Microsoft Sentinel (SIEM/SOAR) for unified detection and response across M365 and Azure.
• Proficiency with Microsoft Intune for endpoint management, device compliance, and application protection.
• Strong understanding of Azure security and governance: Azure Policy, Key Vault, RBAC, Secure Landing Zones, WAF, APIM, and Zero Trust principles.
• Hands-on automation and scripting: PowerShell, KQL, Microsoft Graph API, and ARM/Bicep or Terraform.
• Solid grasp of cloud concepts - hybrid/multi-cloud architectures, virtualization, containers, encryption, data security, business continuity, and identity/access management.
• Experience with lifecycle management - provisioning, governance, cost optimization, and decommissioning across M365 and Azure.
• Demonstrated presales experience: SOWs, RFP responses, solution design, and client-facing workshops in partnership with Account Executives.

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The ideal candidate will be able to work with minimal oversight to drive the growth of GuidePoint Security. The Specialist will be responsible for connecting marketing activities to revenue outcomes by working cross-functionally with sales leadership and other partners.

Responsibilities:

• Work with marketing leadership to help execute the region's marketing plan
• Drive the development and execution of assigned regional marketing campaigns and events from concept through post-event analysis, with minimal direction from leadership
• Own sponsorship coordination for events, including partner outreach, negotiation, execution, and post-event deliverable fulfillment
• Develop and execute campaign performance reporting; track KPIs in Marketo, identify trends, and recommend optimizations based on data
• Translate sales priorities and account-based selling strategies into targeted marketing programs that support pipeline growth
• Produce and oversee the creation of marketing assets, ensuring brand consistency and message alignment across channels
• Facilitate lead funnel management and proactively flag gaps or bottlenecks to leadership with recommended solutions
• Build and strengthen relationships with vendor/partner marketing contacts to expand co-marketing opportunities
• Serve as a go-to resource for junior team members on tools, processes, and best practices
• Collaborate with marketing leadership to inform the region's marketing plan with insights from campaign performance and field feedback
• Other duties as assigned

Requirements:

• Bachelor's degree preferred
• Experience using Marketo and Salesforce required
• 3+ years of experience in marketing, event management, communications, business, or a related field
• Experience with G Suite and spreadsheet skills
• Customer service mindset
• Ability to measure and report the performance of marketing campaigns
• Demonstrated excellence with written communications, project, and time management
• Demonstrated willingness to learn and use AI-enabled tools

Travel Requirements:

• Travel up to 50% for local events within the North Central Region
• This role is based in Chicagoland, with travel primarily throughout Illinois, Minnesota, Wisconsin, the Dakotas, and Iowa
• Must be willing to come into the Hinsdale office as needed, typically 1-2 days per week

Physical Requirements:

• Sedentary work
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day

Benefits:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

As an intern at GuidePoint Security, you will work closely with industry-leading subject matter experts to provide first-class cyber security services. Interns will complete in-house training programs, while working on projects to enhance their security knowledge and skills.

Responsibilities and expectations:

• Work a majority of hours between 11am-4pm EST Monday through Friday, ranging from 25-29hrs/wk
• Attend the mandatory in-person onboarding in Tampa, FL from January 11 - January 14, 2027 (all expenses paid)
• Have a personal computing device and access to high-speed internet during working hours

Requirements:

• Be physically located within the United States during the entire duration of the internship
• Be available for full-time hire no later than September 2027
• Be able to attend the mandatory in-person onboarding hosted in Tampa, FL
• Have a basic understanding of information technology, networking, operating systems and security
• Have a genuine passion for information security
• Be motivated and eager to learn new skills
• Demonstrate a willingness to learn and use AI-enabled tools

This position is not available for candidates living in the following states: Alaska, California, Hawaii, New Mexico, New York, Oregon, Washington and Wyoming.

Interns will gain experience through:

• Hands-On Technical Development
• Real-World Security Response
• Collaborative Project Work
• Team and Position Shadowing
• Partner-led Vendor Training and Certifications

Perks (for full-time employment):

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Fortinet Network Security Engineer will be required to demonstrate strong troubleshooting, communication, and documentation skills, lead by influence, and strong business/financial acumen to drive the use of progressive network security programs that will align the delivery with business objectives and priorities.

Responsibilities:

• Design, implement, and support network security solutions using Fortinet technologies (FortiGate, FortiManager, FortiAnalyzer, FortiSwitch).
• Configure and manage firewall policies, VPNs (IPSec/SSL), SD-WAN, and UTM features.
• Utilize FortiManager for centralized management and policy deployment across multiple FortiGate devices.
• Use FortiAnalyzer for event correlation, log analysis, and reporting.
• Perform regular health checks, upgrades, and policy audits on Fortinet equipment.
• Support networking infrastructure, including switching, VLANs, static and dynamic routing (OSPF, BGP), and subnetting.
• Troubleshoot network and security issues across multiple clients or environments.
• Collaborate with clients and internal teams to recommend and implement security best practices.
• Document configurations, diagrams, and standard operating procedures.

Requirements:

• 2+ years of hands-on experience with Fortinet security technologies (FortiGate, FortiManager, FortiAnalyzer, FortiSwitch).
• Solid understanding of core networking concepts: subnetting, NAT, routing protocols (OSPF, BGP), switching, and VLANs.
• Experience with firewall policy creation, security profiles, and VPN configurations.
• Strong troubleshooting, analytical, written, and verbal communication skills.
• Basic Fortinet certification required prior to hire (NSE 4 or higher preferred).

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Principal DFIR Consultant will be responsible for:

• Technical Leadership & Engagement Execution: serving in the Oversight role on complex or high-severity engagements, leading critical investigations, and conducting advanced technical execution
• Practice Development & Mentorship: designing and maintaining DFIR investigation methodologies, mentoring staff, and contributing to business development
• Client & Business Development: building trusted relationships with key clients, supporting pre-sales activities, and representing GuidePoint Security externally

Requirements include:

• 8+ years of hands-on DFIR experience
• 10+ combined years of IT and information security experience
• Demonstrated experience in a Lead or senior technical role on high-severity engagements
• Expert-level proficiency across multiple DFIR disciplines
• Exceptional written and verbal communication skills

Preferred experience includes:

• Prior consulting or professional services experience at a leading DFIR or cybersecurity firm
• Advanced proficiency with scripting and tooling
• Deep experience with EDR, NDR, XDR, SIEM, and commercial/open-source forensic platforms
• Cloud incident response expertise

Benefits include:

• Remote workforce
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Practice Lead, PAM will be required to demonstrate strong technical leadership, solution architecture, and delivery management skills, lead by influence, and strong business/financial acumen to drive the use of progressive PAM delivery and managed services programs.

Responsibilities:

• Own the overall Privileged Access Management (PAM) practice strategy, vision, roadmap, and growth
• Define and maintain the practice’s service offerings, delivery methodologies, reference architectures, standards, and best practices
• Provide strategic and technical leadership across PAM engagements
• Lead the evaluation, design, and implementation of PAM solutions
• Provide subject matter expertise across leading PAM platforms
• Develop technology-agnostic PAM architectures and solution recommendations
• Establish and mature PAM capabilities across people, process, and technology
• Lead PAM maturity assessments and develop target-state architectures
• Oversee complex PAM implementations and migrations
• Drive adoption of modern PAM capabilities
• Develop and maintain PAM reference architectures, reusable accelerators, implementation frameworks, and delivery standards
• Provide technical governance and oversight for large-scale PAM programs
• Partner with IAM, Cybersecurity, Cloud, Infrastructure, Application, DevOps, Network, Risk, Compliance, and Audit teams
• Lead technical teams consisting of PAM architects, consultants, engineers, and analysts
• Support pre-sales, solutioning, proposals, RFP/RFI responses, SOW development, effort estimation, and client presentations
• Build and maintain strong relationships with PAM technology vendors and strategic partners
• Monitor the PAM technology landscape and evaluate emerging technologies
• Define and track practice KPIs, delivery metrics, quality standards, utilization, revenue, profitability, and customer satisfaction
• Establish quality assurance and governance processes
• Act as a senior trusted advisor to clients and internal stakeholders

Requirements:

• 12+ years of experience in cybersecurity, Identity and Access Management (IAM), Privileged Access Management (PAM), or related security disciplines
• 7+ years of experience in PAM, with demonstrated expertise across multiple enterprise PAM platforms
• Strong hands-on and architectural experience with one or more leading PAM platforms
• Demonstrated experience designing and implementing enterprise PAM architectures and operating models
• Experience leading large-scale PAM transformation, implementation, migration, and modernization programs
• Strong understanding of PAM capabilities
• Strong understanding of IAM, Zero Trust, identity governance, MFA, RBAC/ABAC, SSO, and identity lifecycle management
• Experience integrating PAM platforms with Active Directory/LDAP, SIEM, ITSM, MFA, cloud platforms, databases, servers, network devices, applications, and DevOps toolchains
• Strong understanding of security frameworks and regulatory requirements
• Proven experience leading technical teams and multidisciplinary security programs
• Demonstrated ability to communicate complex technical concepts to executives, security leaders, architects, engineers, and business stakeholders

Preferred Experience and Education:

• Professional certifications in PAM/IAM or cybersecurity
• Certifications or advanced training in Delinea and/or BeyondTrust technologies
• Experience with CyberArk Conjur, Delinea Secret Server/DevOps Secrets Vault, BeyondTrust Password Safe
• Experience with AWS, Azure, and/or GCP privileged access and identity security
• Strong experience with PAM automation and APIs
• Experience developing PAM managed services or operational support models
• Experience building or growing a PAM professional services/consulting practice

Benefits:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan

Job Data by YubHub.

The individual will be responsible for the hands-on evaluation, implementation, and operation of leading cyber defense tools. By applying in-depth defense strategies to large and complex networks, you will help identify vulnerabilities, prioritize response actions, and develop effective countermeasures to protect critical data from malicious actors.

Roles and Responsibilities:

• Deployment or daily maintenance of ForeScout CounterACT appliances
• Network engineering duties, including physical or logical such as installation and activation of ports, configuration of switches, and LANS, VLANS, and network FW, or appliances or network administration services such as Active Directory, Guests LANS, and domain management
• Knowledge of multi-domain architectures, including data center, WAN, and LAN in virtualized architectures

Required Experience and Education:

• TS/SCI clearance with the ability to obtain a counter-intelligence polygraph
• 3+ years of experience performing systems administration for Windows or Linux, including performing basic troubleshooting and installation or configuration, monitoring system performance or availability, and performing security upgrades
• HS diploma or GED and 7+ years of experience with supporting IT projects and activities, Associate’s degree and 5+ years of experience supporting IT projects and activities, Bachelor’s degree and 3+ years of experience supporting IT projects and activities, or Master’s degree and 1+ years of experience supporting IT projects and activities
• A DoD 8570 IAT Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP certification within 30 days of start date
• Ability to obtain a DoD 8570 Cybersecurity Service Provider – Infrastructure Support Certification (CSSP-IS), including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, prior to start date on the contract

Preferred Experience and Education:

• ForeScout Certified Administrator (FSCA) and/or ForeScout Certified Engineer (FSCE) certifications
• Knowledge of federal information security policies, standards, procedures, directives, frameworks, federal security authorizations, assessment, and risk management processes for enterprise systems
• Ability to install and deploy ForeScout in a multidomain customer environment
• Ability to integrate cybersecurity data using enterprise or custom tools data aggregation and analysis tools, including Splunk
• Ability to provide support in a Tier II IT operations and maintenance role, including ticket work information updates, issue responses, and remediation
• Ability to be a self-starter, work without considerable direction, and work with a team
• Possession of excellent verbal and written communication skills, including for coordinating efforts and establishing customer relations

Travel Requirements:

• This position requires 100% onsite support in Reston, VA OR Washington, D.C.

Physical Requirements:

• Sedentary work
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Load Balancer / WAF Engineer will design, deploy, and manage cloud-based security platforms, including WAF, DDoS mitigation, bot protection, and CDN configuration. They will work closely with application, DevOps, and infrastructure teams to ensure secure and resilient traffic flow to internet-facing assets.

Key responsibilities include:

• Designing, deploying, and managing cloud-based security platforms
• Building and managing custom rules to enforce security policies and traffic optimization
• Collaborating with cross-functional teams to ensure secure traffic flow
• Optimizing configurations for latency, performance, and availability
• Supporting incident response efforts involving DDoS events or WAF bypass attempts
• Documenting configurations and providing operational runbooks
• Conducting WAF and edge security assessments
• Assisting in migration from or integration with on-premises platforms

Requirements:

• 2 to 4 years of experience managing cloud WAF/DDoS platforms in enterprise environments
• Deep familiarity with Cloudflare and/or Akamai edge protection services
• Experience building custom page rules, rate limiting policies, or traffic filtering logic
• Strong knowledge of core networking concepts (TCP/IP, DNS, HTTP/S, load balancing, NAT, routing)
• Hands-on experience with on-premises application delivery controllers such as F5 BIG-IP

Preferred qualifications:

• Familiarity with cloud platforms (AWS/GCP/Azure) and edge integration patterns
• Experience automating WAF/DNS/DDoS configurations via API or Terraform
• Certifications related to Cloudflare, Akamai, F5, or network security
• Experience with API security protections, client fingerprinting, and bot mitigation strategies

Benefits include:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

Responsibilities:

• Assist in designing, deploying, configuring, and optimizing Illumio Core and Illumio Edge
• Architect and implement Zero Trust Segmentation policies, including application dependency mapping and labeling frameworks
• Develop Illumio workflows, runbooks, dashboards, and segmentation models for enterprise workloads and critical applications
• Integrate Illumio with SIEM, SOAR, CMDB, and other enterprise automation pipelines
• Conduct traffic flow analysis using Illumio VEN telemetry and build policy recommendations
• Troubleshoot system performance, VEN installation issues, policy conflicts, and platform health
• Partner with application owners to onboard workloads, validate segmentation plans, and support change management processes
• Perform lifecycle management, including upgrades, health checks, and policy governance
• Collaborate with security architects to align Illumio policy models with broader Zero Trust and NIST 800-207 strategies

Requirements:

• Active TS/SCI clearance; willingness to take a polygraph exam
• 5+ years in cybersecurity, cloud security, or infrastructure engineering
• 3+ years of expertise in Linux/Windows systems, virtualization, and cloud environments
• 2+ years of experience developing and deploying solutions for highly regulated mission-critical environments
• 1+ year experience with infrastructure automation tools and REST APIs, scripting, or automation frameworks

Preferred Experience and Education:

• Experience deploying and managing Illumio Adaptive Security Platform (ASP) in enterprise environments
• Experience with CMDB systems, SIEM and SOAR tools, or vulnerability management platforms
• Knowledge of Zero Trust principles, micro-segmentation, and lateral movement mitigation

Benefits:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Director will report to the SVP of Offensive Security and own the practice, including the team, service catalog, delivery quality, and P&L. The goal is to spend most of your time with engineers and clients, and be the senior escalation point when technical or client issues get complicated.

Responsibilities:

• Lead and grow the OT team of managers, engineers, and operations staff while fostering an environment that supports long-term retention.
• Build a mentorship program that pairs experienced OT engineers with those who are new to OT or client-facing services delivery.
• Standardize how the practice runs, including shared templates, delivery playbooks, and a clear path from scoping through closeout for each service.
• Own the practice's financials, including bookings, revenue, delivery margin, utilization, and operating cost.
• Support a growing service catalog, including OT assessments, architecture and segmentation, OT penetration testing, platform implementation and tuning, managed OT vulnerability services, and IoT security services.
• Make deployment and operations services the obvious add-on when a client buys an OT platform.
• Support regional sales leaders and account executives on OT opportunities.
• Manage the OT lab and represent the practice in the OT security community through select speaking, writing, and standards work.

Requirements:

• BS/BA + 7-10 years of experience or MS/MA + 5-12 years of experience.
• 5+ years leading people managers on OT/IoT security delivery or consulting teams.
• Experience developing engineers into consultants, presales contributors, or leaders.
• CISSP, GICSP, or GRID, or equivalent experience.

Preferred Experience:

• A recognized presence in the OT/ICS security community.
• Hands-on work in industrial environments.
• Working knowledge of OT frameworks or regulations, such as ISA/IEC 62443, NIST SP 800-82, NERC CIP, or the TSA security directives.
• Experience deploying or tuning OT visibility platforms and working with technology partners.

Benefits:

• Remote workforce primarily.
• Group Medical Insurance options.
• Group Dental Insurance.
• 12 corporate holidays and a Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option.

Job Data by YubHub.

Responsibilities:

• Hands-on technical development
• Real-world security response
• Collaborative project work
• Team and position shadowing
• Partner-led vendor training and certifications

Requirements:

• Separating from active-duty service within the next 18 months or a Military Spouse who has been accepted into the SpouseWorks program
• Eligible to conduct a fellowship through DoD Skillbridge, Army Career Skills Program, Hiring Our Heroes, or SpouseWorks
• Basic knowledge of networking, common security tools and practices, and a passion for information security
• Preference given to those currently serving in IT or cyber positions

Benefits:

• Remote workforce primarily
• Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA
• Group Dental Insurance: 100% of premium for employees and 75% for family plans
• 12 corporate holidays and Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The ideal candidate will have 3+ years of presales experience and a strong background in Application Security and/or AI security concepts, secure software development, and modern DevSecOps practices.

Key responsibilities include:

• Partnering with Account Executives and senior AppSec & AI engineers to drive new and continued business
• Performing technical qualification, discovery, and positioning for AppSec and AI presales opportunities
• Articulating AppSec and AI risks, controls, and architectural tradeoffs to technical and security stakeholders
• Aligning customer AI aspirations with foundational AppSec realities
• Learning new AppSec and AI technologies and articulating their value proposition

The role requires strong communication and troubleshooting skills, as well as the ability to build technical proof points and demonstrate solutions to technical and executive stakeholders.

In terms of benefits, GuidePoint offers a range of perks, including:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

You will gain experience through hands-on technical development, real-world security response, collaborative project work, team and position shadowing, and partner-led vendor training and certifications.

Responsibilities:

• Work closely with subject matter experts to provide cyber security services
• Complete in-house training programs
• Gain experience through various projects and activities

Requirements:

• Separation from active-duty military service within the next 18 months
• An active security clearance (Top Secret or higher)
• Eligibility to conduct an internship/fellowship through DoD Skillbridge, Army Career Skills Program, or Hiring Our Heroes
• Basic knowledge of networking, common security tools and practices, and a passion for information security
• Preference is given to those currently serving in IT, intelligence, or cyber positions

Following separation, fellows will work on-site at one of several locations, including St. Louis, MO; Bowling, VA; Chantilly, VA; Quantico, VA; Reston, VA; Springfield, VA; Washington DC.

Benefits:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

In this role, you will gain hands-on experience in three core areas: certification and technical foundations, presales and client engagement, and technical delivery and writing, and vendor knowledge. You will be mentored by experienced practitioners on real work, not simulations.

Responsibilities:

• Build a certification foundation with company-sponsored exam vouchers, including Security+, Network+, CySA+, and cloud certifications
• Complete hands-on lab work to strengthen skills in networking, operating systems, cloud, and security
• Participate in CTF platforms such as HackTheBox and TryHackMe to build practical offensive and defensive skills
• Gain exposure to SIEM, vulnerability scanning, and endpoint security tools in lab and real-world settings under mentorship
• Shadow senior consultants on real client engagements, gaining early exposure to professional security consulting
• Attend internal presales and delivery meetings to learn how GuidePoint scopes, sells, and delivers solutions
• Practice explaining technical concepts to non-technical audiences in client-facing settings under mentorship
• Support the preparation of presales materials, demos, and technical discussions alongside the Heartland team
• Practice technical writing, including executive summaries and findings reports
• Build vendor-specific product knowledge aligned to GuidePoint's technology partnerships
• Research and document how partner solutions map to common client security challenges

Qualifications:

• Pursuing or recently completed a Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field
• Foundational knowledge of networking, including TCP/IP, DNS, DHCP, HTTP/S, subnetting, VLANs, firewalls, and routing basics
• Exemplifying leadership tendencies, such as leading student organisations or industry clubs
• Comfort navigating both Windows and Linux, with command-line proficiency
• Understanding of core security concepts, including the CIA triad, authentication vs. authorisation, encryption basics, and common attack vectors
• Basic understanding of at least one major cloud provider (AWS, Azure, or GCP) and the shared responsibility model
• A habit of self-directed learning, shown through home labs, CTFs, blogs, or personal projects
• Strong communication skills, with the ability to explain technical concepts to non-technical audiences
• Coachable and open to feedback
• A self-starter who looks for work without being told, and has a collaborative, team-oriented mindset
• Professional maturity: punctual, reliable, responsive, and presentable in client-facing settings

Internship Details and Expectations:

• Part-time, remote paid internship ($20/hr) that runs for 12 weeks
• Optional in-person onboarding in Tampa FL during the first week
• Potential for full-time employment at the end of the internship
• Located near Tulsa, OK, or be willing to relocate there for follow-on full-time hire
• Physically located within the United States for the entire internship
• Work 20-29 hrs/wk during standard business hours supporting the Central Time Zone
• Have a personal computing device and high-speed internet access during working hours

Job Data by YubHub.

The primary focus will be designing and maintaining routing, filtering, and transformation logic using Cribl Stream and Cribl Edge. The ideal candidate will be passionate about logging, SIEM architecture, and solving complex data ingestion challenges.

Responsibilities:

• Build, maintain, and optimise high-throughput data pipelines using Cribl Stream and Cribl Edge to ensure efficient data routing, masking, and transformation.
• Normalize incoming log sources to standardised schemas (e.g., CIM, ECS) before routing to downstream SIEM platforms, analytics tools, and storage.
• Implement complex routing logic, data masking, enrichment, and replay workflows, utilising custom JavaScript functions and Regex patterns directly within Cribl pipelines.
• Monitor system health, assist in managing worker topology, and troubleshoot bottlenecks or failures in the data flow.
• Utilise scripting (Python, Bash) and infrastructure-as-code tools (Ansible, Terraform) to automate deployment and configuration management.
• Maintain clear and accurate technical documentation, runbooks, and standard operating procedures for the observability infrastructure.

Requirements:

• Active TS/SCI clearance; willingness to take a polygraph exam.
• 3–5 years of experience in Information Technology, focusing on logging, observability, or SIEM engineering.
• 2–5 years of hands-on experience operating and managing data pipelines with Cribl Stream and/or Cribl Edge in a production environment.
• 2+ years of experience administering or engineering enterprise SIEM environments, including a strong understanding of log forwarding, indexing, data collection, search architecture, source types, and ingestion-time parsing.
• Education: HS diploma OR GED and 7+ years of experience with supporting IT projects and activities; Associate’s degree and 5+ years of experience supporting IT projects and activities; Bachelor’s degree and 3+ years of experience supporting IT projects and activities; Master’s degree and 1+ years of experience supporting IT projects and activities.
• Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support (CSSP-IS) Certification, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND certification within 30 days of offer accept.
• Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP certification within 45 days of CSSP-IS date (or offer accept if candidate already has CSSP-IS Cert).
• Active Cribl Certification (e.g., Cribl Certified Observability Engineer - CCOE).

Preferred Experience and Education:

• Relevant enterprise SIEM administrator or engineering certifications.
• Understanding of data security fundamentals, including encryption, RBAC, and data masking strategies.
• Strong fundamentals in Linux/Unix administration and working knowledge of transport protocols (HTTP, TCP, TLS) and data formats (JSON, Syslog).
• Regex: Strong proficiency in writing complex Regular Expressions (Regex) for pattern matching, data extraction, and log parsing.
• JavaScript: Solid proficiency using JavaScript within Cribl’s native execution environment to write custom functions, execute advanced data transformations, and manipulate JSON/event payloads inside pipelines.
• Log Schema Formats: Solid understanding of log normalisation concepts and schema alignment, specifically Common Information Model (CIM) or similar frameworks (e.g., ECS, OCSF).
• Systems & Protocols: Strong fundamentals in Linux/Unix administration and working knowledge of transport protocols (HTTP, TCP, TLS) and data formats (JSON, Syslog).
• Excellent problem-solving abilities, strong attention to detail, and the ability to collaborate effectively in a team environment.

Travel Requirements:

• This position requires 100% onsite support in Reston, VA OR Washington, D.C. location.

Physical Requirements:

• Sedentary work.
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day.
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day.

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions).
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans); High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans).
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans.
• 12 corporate holidays and a Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option.

Job Data by YubHub.

Roles and Responsibilities

• Assist in defining organizations' desired state and risk thresholds and analyze actual state information to assess compliance.
• Work with leaders to advise on codifying strategic objectives into doctrine and procedures.
• Assist with evaluation of computer applications, software, or specialized utility programs.
• Recommend tools and capabilities based on research of the current environment and knowledge of various on-premises, cloud-based, and hybrid resources.
• Implement cloud security architectures, tools, and processes.
• Work with IC clients to ensure standards are met with security requirements.

Required Experience and Education

• Active TS/SCI clearance; willingness to take a polygraph exam.
• 5+ years of hands-on experience building and administering cloud environments.
• Knowledge of Infrastructure code concepts such as Terraform, CloudFormation, or Bicep.
• Experience with developing and evaluating security documentation.
• Experience with security architecture evaluations, guidance development, and troubleshooting.
• Experience with the Risk Management Framework (RMF).
• Experience with working in an Agile development environment.
• Education: HS diploma or GED and 7+ years of experience, Associate's degree and 5+ years of experience, Bachelor's degree and 3+ years of experience, or Master's degree and 1+ years of experience.
• Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support (CSSP-IS) Certification.
• Ability to obtain a DoD 8570 IAT Level III Certification.

Preferred Experience and Education

• Experience with the software development life cycle (SDLC).
• Possession of excellent team leadership, development, and client relationship skills.
• Possession of excellent interpersonal skills.
• Possession of excellent verbal and written communication skills.

Benefits

• Remote workforce primarily.
• Group Medical Insurance options.
• Group Dental Insurance.
• 12 corporate holidays and a Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option

Job Data by YubHub.

You will work with the NE AI and AppSec teams as part of the NE DevSecOps team, contributing to the Security Innovation and Technology Lab (SITL), GuidePoint's internal multi-cloud research and evaluation environment spanning AWS, Azure, and Google Cloud Platform.

Your responsibilities will include:

• Cloud Infrastructure & IaC
• Assisting in designing and deploying multi-cloud lab environments (AWS, Azure, GCP) using Terraform and Ansible under mentorship
• Contributing to CI/CD pipeline development using GitHub Actions to provision, configure, and tear down lab environments
• Writing, testing, and maintaining reusable IaC modules in a version-controlled environment
• Supporting environment builds for security tool POC and POV engagements from requirements through teardown
• Maintaining version-controlled lab documentation and runbooks to ensure repeatability across the SITL team

• Security Tool Evaluation & Agentic Automation
• Supporting the execution of security tool evaluations across SITL categories
• Assisting in developing agentic harnesses that exercise vendor products against client-defined test cases
• Helping document test cases derived from client requirements and real-world use cases
• Contributing to POC and POV findings reports and participating in client walkthrough sessions under mentorship

You will need:

• Hands-on experience with at least one IaC tool (Terraform, Ansible, CloudFormation, or equivalent)
• Current enrolment or recent graduation with a degree in computer science, engineering, or a related field
• Exposure to scripting or programming (Python, Bash, or similar) and interest in automation and infrastructure
• Enthusiasm for cloud infrastructure, DevOps practices, and security tool evaluation
• Strong written and verbal communication skills

This is a part-time, remote paid internship ($20/hr) that runs for 12 weeks, with potential for full-time employment at the conclusion of the internship.

Job Data by YubHub.

This early-career role focuses on assisting with security assessments, architecture reviews, compliance mapping, and cloud-native control implementation in AWS environments. You will work alongside senior consultants on diverse client engagements while providing “Wow Them” service to clients and internal teammates.

The Associate Cloud Security Engineer - AWS will be expected to demonstrate foundational AWS security skills, a strong willingness to learn, and effective communication abilities. This role offers hands-on mentorship, exposure to diverse client environments, and a clear path to professional growth within a leading cybersecurity consultancy.

Responsibilities:

• Support delivery teams by assisting with cloud security assessments, documentation, and client deliverable preparation under the guidance of senior consultants
• Participate in client meetings, workshops, and discovery sessions to develop consulting and communication skills
• Assist with AWS security assessments to help identify misconfigurations, operational risks, and compliance gaps
• Help document findings, recommendations, and remediation steps for client deliverables
• Support the development of security roadmaps, gap analyses, architecture diagrams, and other deliverables
• Assist with AWS security configurations including IAM policies, CloudTrail, GuardDuty, Security Hub, and Config
• Contribute to internal methodologies, templates, and reusable assessment frameworks
• Actively participate in knowledge sharing and mentorship opportunities within the team

Requirements:

• 1 year of related experience
• AWS Certified Cloud Practitioner certification (required)
• Minimum of 1 year of hands-on experience with AWS cloud services (internships, lab environments, and project-based experience count)
• Foundational understanding of AWS IAM including roles, policies, and MFA configuration
• Familiarity with AWS security services such as CloudTrail, GuardDuty, Security Hub, and AWS Config
• Exposure to Infrastructure as Code tools (Terraform, CloudFormation, or CDK)
• Understanding of core network security concepts including VPCs, security groups, and NACLs
• Basic scripting ability (Python preferred; Bash or PowerShell also acceptable)
• Awareness of multi-account AWS environment concepts
• Strong written and verbal communication skills

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

In this role, you will gain hands-on experience across three core areas: AppSec tool management, manual code review, and AI harness development. You will work under direct mentorship from experienced practitioners on real work, not simulations.

Prior directly related experience is not required, but technical aptitude and genuine curiosity about application security are essential. Currently enrolled, or recently graduated with a degree in computer science, software engineering, or a related engineering field is required, or equivalent demonstrated by significant hands-on experience with multiple programming languages.

You will work with the NE AI and AppSec teams as part of the NE DevSecOps team, building practical skills in tooling, code analysis, and AI-enabled security automation. You will also participate in limited client-facing engagements under mentorship, gaining early exposure to professional security consulting.

Responsibilities:

• AI Harness Development:
• Build and iterate on AI-assisted security harnesses under mentorship, including prompt design, tool integration, and output validation
• Develop AI-driven workflows for security reporting, findings documentation, and evidence collection
• Research and evaluate emerging AI models and frameworks applicable to application security workflows
• Contribute to prototype builds that integrate LLM APIs into AppSec tooling and testing pipelines
• Participate in agentic pentesting tool evaluations, documenting findings and supporting harness refinement
• AppSec Tool Management:
• Operate and configure SAST, DAST, SCA, IAST, and RASP tools under mentorship, gaining hands-on experience with each tool category
• Triage and validate findings from automated security tools, distinguishing true positives from false positives
• Support tool configuration, tuning, and integration tasks within CI/CD pipelines and SDLC workflows
• Assist in evaluating and benchmarking emerging AppSec tools, including agentic pentesting platforms
• Participate in client-facing tool discussions and shadowed engagements under mentorship
• Manual Code Review:
• Review application source code for common vulnerability classes including injection flaws, authentication weaknesses, and insecure data handling
• Perform manual code review under mentorship across multiple languages, applying OWASP and secure coding standards
• Document findings with supporting evidence, risk context, and remediation guidance
• Collaborate with the AppSec team to correlate manual review findings with automated tool output
• Shadow client code review engagements and contribute to findings documentation under mentorship

Internship Details and Expectations: This is a part-time, remote paid internship ($20/hr) that runs for 12 weeks, with potential for full-time employment at the conclusion of the internship. Interns are expected to:

• Be physically located within the United States during the entire duration of the internship
• Work 25-29hrs/wk Monday-Friday supporting the Eastern Time Zone
• Have a personal computing device and access to high-speed internet during working hours

Job Data by YubHub.

Responsibilities:

• Implement, operationalise, and troubleshoot SAST platforms within client environments
• Design and integrate automated security testing into CI/CD pipelines
• Author and adapt custom SAST rules and triage, validate, and guide remediation of identified vulnerabilities
• Advise client development teams on OWASP Top 10, threat modelling, and secure coding practices throughout the SDLC
• Leverage AI-assisted tooling to accelerate rule development, triage, and remediation guidance
• Contribute to reusable pipeline patterns, rule libraries, and delivery accelerators for the AppSec practice
• Deliver engagements for clients across the Northeast/Mid-Atlantic region, with occasional on-site presence as needed

Requirements:

• Proficiency with SAST tools such as Semgrep, Snyk, CodeQL, Checkmarx, Veracode
• Understanding of CI/CD pipeline tools and processes
• Experience in software engineering, ideally full stack software development
• Strong scripting and automation experience using one or more programming languages
• Solid working knowledge of application security fundamentals including OWASP Top 10, threat modelling, and implementing secure coding practices throughout the SDLC

Benefits:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Application Security Engineer will engage in developing automated security testing capabilities, custom detection rules, and secure pipeline patterns while providing excellent service to clients and/or internal customers or co-workers. The ideal candidate will demonstrate strong software engineering, security automation, and client communication skills, lead by influence, and possess strong business/financial acumen to drive progressive DevSecOps and shift-left security programs.

Responsibilities:

• Implement, operationalise, and troubleshoot SAST platforms within client environments
• Design and integrate automated security testing into CI/CD pipelines
• Author and adapt custom SAST rules and triage, validate, and guide remediation of identified vulnerabilities
• Advise client development teams on OWASP Top 10, threat modelling, and secure coding practices throughout the SDLC
• Leverage AI-assisted tooling to accelerate rule development, triage, and remediation guidance
• Contribute to reusable pipeline patterns, rule libraries, and delivery accelerators for the AppSec practice
• Deliver engagements for clients across the Northeast/Mid-Atlantic region, with occasional on-site presence as needed

Requirements:

• Proficiency with SAST tools such as Semgrep, Snyk, CodeQL, Checkmarx, Veracode, etc.
• Understanding of CI/CD pipeline tools and processes
• Experience in software engineering, ideally full-stack software development
• Strong scripting and automation experience using one or more programming languages
• Solid working knowledge of application security fundamentals, including OWASP Top 10, threat modelling, and implementing secure coding practices throughout the SDLC
• Excellent written and verbal communication skills

Preferred Experience and Education:

• Experience writing or adapting custom SAST rules
• Familiarity with additional Application Security tools
• Familiarity with API Security tools
• Practical hands-on experience validating vulnerabilities and proficiency with Burp Suite
• Strong working knowledge of Secure Development Lifecycles and experience triaging and remediating technical vulnerabilities

Benefits:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

The Application Security Engineer will engage in the development of secure software development lifecycle (SSDLC) programs, DevSecOps pipeline integrations, and security assessments of AI-enabled and agentic applications while providing 'Wow Them' service to clients and/or internal customers or co-workers.

The North Central Application Security Practice is responsible for helping clients build, scale, and mature secure software development programs. The team assesses applications, embeds security into engineering workflows, and advises development and security leaders across the organization.

Responsibilities:

• Run and tune client SAST, DAST, SCA, secrets, and IaC scanning tools; triage results, eliminate false positives, and deliver prioritized, actionable remediation guidance
• Design and implement security tool integrations into CI/CD pipelines, source control, IDEs, and ticketing systems
• Partner with development teams on remediation, secure coding guidance, and developer enablement to embed security throughout the SDLC
• Assess and harden software supply chain controls, including SBOM generation, dependency and container image scanning, artifact signing, and pipeline/runner security
• Perform threat modeling and security architecture reviews for cloud-native, microservice, container, and Infrastructure-as-Code environments
• Leverage AI-assisted and agentic tooling to accelerate testing and reporting, and advise clients on the secure adoption of AI coding assistants
• Help clients mature AppSec programs by defining metrics, vulnerability management SLAs, and roadmaps aligned to frameworks such as OWASP SAMM, BSIMM, and NIST SSDF

Requirements:

• 1–3+ years of experience in Application Security, DevSecOps, or software development with a security focus
• Hands-on experience with SAST, DAST, and SCA tools and integrating them into CI/CD pipelines
• Proficiency with manual testing tools such as Burp Suite Pro and a strong understanding of the OWASP Top 10 and OWASP API Security Top 10 and their mitigation strategies
• Strong working knowledge of secure development lifecycles and experience guiding remediation of vulnerabilities identified by application security tools
• Ability to review source code in one or more languages
• Working knowledge of cloud platforms, containers, and Git-based development workflows

Benefits:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

As an Application Security Engineer, you will play a critical role in helping GuidePoint Security's clients make better decisions and minimise risk. You will be responsible for implementing, operationalising, and troubleshooting Static Application Security Testing (SAST) tools, understanding Continuous Integration / Continuous Delivery (CI/CD) pipeline tools and processes, and having strong scripting and automation experience.

Responsibilities:

• Implement, operationalise, and troubleshoot SAST tools such as Semgrep, Snyk, CodeQL, Checkmarx, Veracode, etc.
• Understand CI/CD pipeline tools and processes, including GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI, etc.
• Have experience in software engineering, ideally full stack software development, including modern technologies and application architectures
• Strong scripting and automation experience using one or more programming languages
• Solid working knowledge of application security fundamentals, including the OWASP Top 10, threat modelling, and implementing secure coding practices throughout the Software Development Lifecycle (SDLC)

Preferred qualifications:

• Experience writing or adapting custom SAST rules (Semgrep or CodeQL)
• Familiarity with additional Application Security tools, such as Interactive (IAST), Dynamic (DAST) and API security, SCA, etc.
• Familiarity with API Security tools, such as NoName, Traceable, Salt, Cequence
• Practical hands-on experience validating vulnerabilities and proficiency with Burp Suite
• Strong working knowledge of Secure Development Lifecycles and experience triaging and remediating technical vulnerabilities identified by web application scanning tools

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

Responsibilities:

• Conduct secure configuration reviews and security assessments of enterprise AI platforms against established control domains
• Lead threat modeling exercises specific to AI workloads, covering prompt injection, model inversion, data poisoning, and supply chain risks
• Assess AI coding tools and development environments for sandbox isolation, plugin allowlisting, secrets access, and network egress controls
• Advise client teams on securely integrating SaaS AI services and APIs into enterprise applications
• Evaluate and recommend controls for data ingestion pipelines, RAG architectures, and vector databases to prevent unauthorised data exposure
• Conduct shadow AI discovery engagements to inventory unsanctioned AI tool usage and assess associated data exposure risks
• Evaluate security controls and guardrails across AI platforms, including identity and access management, DLP integration, and SIEM and logging configurations
• Design, build, and deploy AI agent workflows, including use-case design, agent architecture, and integration with security tooling and automation platforms
• Perform security architecture reviews for organisations deploying AI agents
• Develop and deliver engagement artifacts, including secure configuration review reports, prioritised findings registers, and reference architectures
• Contribute to the development of long-term AI security strategies for clients
• Collaborate with stakeholders, including business stakeholders, AI/ML engineers, IT operations, and information security teams
• Continuously track emerging AI security research, adversarial techniques, regulatory developments, and vendor security advisories

Requirements:

• 3+ years of experience in security engineering with a significant focus on cloud security and/or application security
• Hands-on experience implementing, managing, securing, and supporting agentic AI solutions within an enterprise context
• Familiarity with major cloud service provider AI-focused services
• Solid understanding of generative AI concepts, Large Language Models, context engineering, agentic tool usage, and foundational AI/ML principles
• Operational experience in the usage of agentic coding assistants
• Understanding of AI-specific security challenges
• Ability to produce professional client-facing deliverables
• Strong written and verbal communication skills

Preferred Experience and Education:

• Certifications such as AWS Certified AI Practitioner or Azure AI Engineer Associate
• Understanding or experience with model fine-tuning techniques
• Experience with policy as code languages or Infrastructure as Code tools
• Experience designing and implementing agentic AI architectures that balance security and autonomy
• Familiarity with MCP client/server architecture and associated security risks
• Experience with AI security tooling categories
• Prior experience in a consulting, professional services, or managed services delivery model with direct client engagement

Benefits:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off programme
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

General Description

You will work closely with peers across multiple domains, including AppSec, Cloud Security, and Vulnerability Management, to deliver holistic and secure solutions adhering to industry best practices. This role offers the exciting opportunity to contribute to our growing AI security practice.

Roles and Responsibilities

• AI Security Architecture & Assessment: Advise on and assess the security posture of AI/ML systems, including LLMs, GenAI pipelines, and model serving infrastructure , identifying vulnerabilities, attack surfaces, and gaps against industry frameworks.
• Threat Modeling for AI Systems: Lead threat modeling exercises specific to AI workloads, covering adversarial inputs, prompt injection, model inversion, data poisoning, and supply chain risks across SaaS, self-hosted, and local AI deployments.
• Secure AI Integration Guidance: Advise internal teams on securely integrating SaaS AI services and APIs into enterprise applications, including safe handling of credentials, outputs, and user data.
• Data Security & Privacy Controls: Evaluate and recommend controls for data ingestion pipelines, RAG architectures, and vector databases to prevent unauthorized data exposure, leakage through model outputs, or non-compliant data processing.
• Collaboration & Stakeholder Engagement: Serve as a trusted security advisor bridging business stakeholders, AI/ML engineers, IT operations, and information security teams on all matters related to AI risk and security.
• Stay Current on AI Threat Landscape: Continuously track emerging AI security research, adversarial techniques, regulatory developments, and vendor security advisories to keep client guidance relevant and proactive.
• Security Documentation & Standards: Produce and maintain security architecture documentation, risk assessments, control frameworks, and guidelines tailored to the organization's AI environment.
• Strategic AI Security Roadmap: Contribute to the development of a long-term AI security strategy, including prioritized remediation roadmaps, capability maturity assessments, and investment recommendations.
• Security Awareness & Education: Develop and deliver training and awareness content for technical and non-technical stakeholders on AI-specific risks, responsible AI usage, and secure development practices for AI-powered applications.

Required Experience

• 5+ years of experience in security engineering with a significant focus on cloud security and/or AppSec
• Hands-on experience implementing, managing, securing, and supporting Agentic AI solutions within an enterprise context
• Familiarity with major cloud service provider AI-focused services such as AWS Bedrock, AWS SageMaker, Azure AI Foundry, or Google Vertex
• Proficiency in at least one relevant programming language, preferably Python
• Solid understanding of generative AI concepts, Large Language Models (LLMs), context engineering, agentic tool usage, and foundational AI/ML principles
• Deep knowledge and real operational experience in the usage of Agentic Coding assistants like Claude Code, Open Code, Cursor, or Codex
• Strong written and oral communication and interpersonal skills, with the ability to explain complex technical concepts to both technical and non-technical audiences
• Demonstrated experience applying security principles to AI implementations, including data protection, access controls, and threat modeling for AI systems
• Understanding of AI-specific security challenges including prompt injection, data poisoning, supply chain security, and model extraction attacks
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Preferred Qualifications

• Certifications such as AWS Certified AI Practitioner/AWS Certified Machine Learning Engineer, Azure AI Engineer Associate, Claude Certified Architect
• Understanding or experience with model fine-tuning techniques
• Familiarity with red teaming of agentic systems
• Experience with policy as code languages like Cedar or Rego and Infrastructure as Code (IaC) tools like AWS CloudFormation, Terraform, OpenTofu, or equivalent technologies
• Experience designing and implementing agentic AI architectures that balance security and autonomy
• Familiarity with MCP client/server architecture vs. agentic skills and the associated security risks of each.

Benefits

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

Responsibilities:

• Define and implement evaluation frameworks to measure the accuracy, reliability, and consistency of agentic AI harnesses
• Design and run structured evals against harness outputs to detect regressions, output drift, and behavioral degradation over time
• Build and maintain benchmark datasets and ground-truth corpora used to evaluate harness quality
• Analyze eval results, identify failure modes, and collaborate with the NE AI and AppSec teams to drive iterative improvements
• Research and apply prompt evaluation techniques and LLM benchmarking methodologies relevant to security-specific harnesses
• Instrument agentic harnesses with telemetry to capture latency, token usage, error rates, and output quality signals
• Analyze telemetry data to identify patterns, surface anomalies, and generate actionable insights for harness tuning
• Support model and prompt tuning efforts based on eval and telemetry findings, documenting changes and measuring their impact
• Contribute to building an internal AI governance pipeline: defining standards, logging outputs, flagging quality issues, and maintaining an audit trail for harness behavior

Qualifications:

• Currently enrolled, or recently graduated with a degree or substantial coursework in data science, statistics, computer science, engineering, or a related field
• Proficiency or strong interest in Python, with exposure to data manipulation libraries (pandas, numpy) or LLM APIs
• Genuine curiosity about large language models, agentic systems, and how AI performs (and fails) in applied contexts
• Strong analytical and written communication skills, with an ability to translate data findings into clear, actionable observations
• Technical aptitude and comfort working with ambiguity in a fast-moving, practitioner-led environment

Internship Details and Expectations:

• Part-time, remote paid internship ($20/hr) that runs for 12 weeks, with potential for full-time employment at the conclusion of the internship
• Expected to work 25-29hrs/wk Monday-Friday supporting the Eastern Time Zone
• Must be physically located within the United States during the entire duration of the internship

Job Data by YubHub.

Role and Responsibilities:

• Consistently meet sales and profitability goals
• Position, configure and quote product and service solutions to clients
• Participate in industry organisations such as ISSA, ISACA, OWASP etc.
• Manage leads and opportunities through Salesforce and other CRM tools
• Accurately and consistently report sales forecasts and opportunity funnels
• Participate in creation, editing and closure of services proposals
• Work with GuidePoint Security vendors to understand and position their technologies
• Participate in field marketing to generate interest and provide information to the client prospect community
• Represent GuidePoint Consultants to clients and articulate areas of expertise
• Set proper expectations and maintain open communication with clients and vendors
• Effectively leverage supporting resources in the sales process
• Professionally develop and present sales presentations to large groups and executive level clients

Position Requirements:

• Minimum 5 years outside sales experience in the IT space required
• Current enterprise security space experience preferred
• Strong, established relationships with key accounts in the territory required
• Experience with Salesforce.com
• Strong group presentation skills
• Verifiable history of exceeding sales goals and generating leads
• Demonstrated ability of lead generation and opening new accounts
• Experience selling professional services, security audits and assessments a plus
• Bachelors degree preferred
• Network security vendor related certifications strongly preferred
• Demonstrates a willingness to learn and use AI-enabled tools

Why GuidePoint? GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security.

Benefits:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

Role and Responsibilities:

• Consistently meet sales and profitability goals
• Position, configure and quote product and service solutions to clients
• Participate in industry organizations such as ISSA, ISACA, OWASP etc.
• Manage leads and opportunities through Salesforce and other CRM tools
• Accurately and consistently report sales forecasts and opportunity funnels
• Participate in creation, editing and closure of services proposals
• Work with GuidePoint Security vendors to understand and position their technologies
• Participate in field marketing to generate interest and provide information to the client prospect community
• Represent GuidePoint Consultants to clients and articulate areas of expertise
• Set proper expectations and maintain open communication with clients and vendors
• Effectively leverage supporting resources in the sales process
• Professionally develop and present sales presentations to large groups and executive level clients

Position Requirements:

• Minimum 5 years outside sales experience in the IT space required
• Current enterprise security space experience preferred
• Strong, established relationships with key accounts in the territory required
• Experience with Salesforce.com required
• Strong group presentation skills a must
• Verifiable history of exceeding sales goals and generating leads
• Demonstrated ability of lead generation and opening new accounts
• Experience selling professional services, security audits and assessments a plus
• Bachelors degree preferred
• Network security vendor related certifications strongly preferred
• Demonstrates a willingness to learn and use AI-enabled tools

Benefits:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.

Role and Responsibilities:

• Consistently meet sales and profitability goals.
• Position, configure and quote product and service solutions to clients.
• Participate in industry organisations such as ISSA, ISACA, OWASP etc.
• Manage leads and opportunities through Salesforce and other CRM tools.
• Accurately and consistently report sales forecasts and opportunity funnels.
• Participate in creation, editing and closure of services proposals.
• Work with GuidePoint Security vendors to understand and position their technologies.
• Participate in field marketing to generate interest and provide information to the client prospect community.
• Represent GuidePoint Consultants to clients and articulate areas of expertise.
• Set proper expectations and maintain open communication with clients and vendors.
• Effectively leverage supporting resources in the sales process.
• Professionally develop and present sales presentations to large groups and executive level clients.

Position Requirements:

• Minimum 3 years outside sales experience in the IT space required.
• Current enterprise security space experience preferred.
• Strong, established relationships with key accounts in the territory required.
• Experience with Salesforce.com required.
• Strong group presentation skills a must.
• Verifiable history of exceeding sales goals and generating leads.
• Demonstrated ability of lead generation and opening new accounts.
• Experience selling professional services, security audits and assessments a plus.
• Bachelors degree preferred.
• Network security vendor related certifications strongly preferred.

Benefits:

• Remote workforce primarily.
• Group Medical Insurance options.
• Group Dental Insurance.
• 12 corporate holidays and a Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option.

Job Data by YubHub.

Responsibilities:

• Consistently meet sales and profitability goals
• Position, configure and quote product and service solutions to clients
• Participate in industry organisations such as ISSA, ISACA, OWASP etc.
• Manage leads and opportunities through Salesforce and other CRM tools
• Accurately and consistently report sales forecasts and opportunity funnels
• Participate in creation, editing and closure of services proposals
• Work with GuidePoint Security vendors to understand and position their technologies
• Participate in field marketing to generate interest and provide information to the client prospect community
• Represent GuidePoint Consultants to clients and articulate areas of expertise
• Set proper expectations and maintain open communication with clients and vendors
• Effectively leverage supporting resources in the sales process
• Professionally develop and present sales presentations to large groups and executive level clients

Requirements:

• Minimum 5 years outside sales experience in the IT space required
• Current enterprise security space experience preferred
• Strong, established relationships with key accounts in the territory required
• Experience with Salesforce.com required
• Strong group presentation skills a must
• Verifiable history of exceeding sales goals and generating leads
• Demonstrated ability of lead generation and opening new accounts
• Experience selling professional services, security audits and assessments a plus
• Bachelors degree preferred
• Network security vendor related certifications strongly preferred

Benefits:

• Remote workforce primarily
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Job Data by YubHub.