GuidePoint Security

AI Engineer

• Contribute to the authoring and deployment of agentic harnesses within existing agentic platforms
• Assist in prototyping and iterating on agentic harnesses and LLM-integrated workflows
• Define and implement benchmarks to evaluate the performance, reliability, and accuracy of agentic pipelines and workflows, supporting continuous improvement and quality assurance
• Research and evaluate emerging AI tools, models, and platforms, and surface relevant findings to the team
• Support the identification and development of AI-powered automations that improve efficiency across service delivery, operations, and sales functions
• Participate in workflow assessments to understand current-state processes and identify opportunities for agentic automation
• Contribute to internal tools, integrations, and AI-assisted workflows in active use across the Northeast region
• Serve as a hands-on resource for regional teams, building their capability to independently operate and maintain agentic harnesses
• Other duties as assigned

Associate Applied AI Engineer

Application Engineer

• Run client SAST, DAST, and SCA tools, review outputs and provide recommendations
• Implement integrations for tools into pipelines, ticketing systems, etc.
• Collaborate with developers to provide secure design guidance and remediation strategies
• Familiarity with CI/CD systems (i.e. GitHub) and integrating software security tools into the development workflow
• Strong understanding of web application security principles and best practices
• Manage, maintain and operate application security tooling, including configuration, tuning, and automation

Application Security Engineer

• GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk.
• By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

Senior Application Security Engineer

Project Manager

• Partner with executive leaders to translate corporate objectives into a comprehensive, multi-year IT strategic plan.
• Define, maintain, and publish the organization's IT Roadmap, ensuring cross-functional initiatives are prioritized based on resource capacity, financial return, and technical dependency.
• Establish a unified process to intake, evaluate, score, and approve new technology and product proposals.
• Oversee the day-to-day operations of the IT PMO, enforcing uniform methodologies (Agile, Scrum, Waterfall, Hybrid) across the portfolio.
• Lead IT continuous improvement by institutionalizing post-project retrospective reviews into IT processes; responsible for monitoring and maximizing key cost, schedule, and performance metrics.
• Modernize and manage enterprise PMO software applications (i.e., Jira, Confluence) to enable clear portfolio visibility.
• Direct the Business Analysis function to guarantee user requirements are precisely defined, verified, and trace directly back to business value.
• Manage IT project deliverables with an IT Product Development framework, overseeing digital products from discovery through deployment and feature refinement.
• Direct the IT Quality Assurance framework to implement automated and manual software validation.
• Establish frameworks for the quantitative and qualitative measurement of IT projects to evaluate delivery efficiency, ROI, and technical health.
• Coach and mentor direct reports and share knowledge of best practices.

Director, Information Technology Project Management Office

Security Engineer

• Deliver world-class cyber security assessment and advisory services across multiple Compliance offerings while ensuring customer satisfaction (up to 15% travel to U.S. locations is required).
• Work effectively as a team member on large engagements.
• Remain current on technical knowledge and industry developments and incorporate into service delivery.
• Achieve and maintain relevant cyber security and audit certifications.
• Demonstrate GuidePoint’s Core Values at all times:
• Take Charge and Complete Our Mission
• Challenge Ourselves and Have Fun Doing It
• Wow Them
• No Jerks

Security Consultant, Compliance

Social Media Manager

• Execute the social media program aligned to brand and marketing priorities
• Own day-to-day management of corporate social channels
• Develop social content strategies aligned to events, partnerships, product launches, thought leadership, and key business initiatives
• Partner cross-functionally to maintain an integrated social content calendar
• Monitor brand mentions, industry conversations, social trends, and audience activity to identify timely content and engagement opportunities
• Own social media reporting, including tracking performance, analyzing results, and providing insights to improve content effectiveness and audience engagement
• Support executive visibility and employee advocacy initiatives through social content development and coordination
• Contribute to broader brand, PR, and internal communications efforts as needed

Social Media, Communications Specialist

• Deliver world-class cyber security assessment and advisory services across multiple Compliance offerings while ensuring customer satisfaction (up to 15% travel to U.S. locations is required).
• Work effectively as a team member on large engagements.
• Remain current on technical knowledge and industry developments and incorporate into service delivery.
• Achieve and maintain relevant cyber security and audit certifications.
• Contribute to practice and offering development.
• Provide presales support for Compliance opportunities when requested.
• Publish content and/or perform speaking engagements to demonstrate thought leadership.
• Demonstrate GuidePoint’s Core Values at all times:
• Take Charge and Complete Our Mission
• Challenge Ourselves and Have Fun Doing It
• Wow Them
• No Jerks

Senior Cyber Security Consultant – Compliance

• GuidePoint Security provides trusted cybersecurity expertise, solutions and services
• Enabling organizations to identify threats, optimize resources and integrate solutions that mitigate risk
• Collaborate and provide mentorship and guidance at every opportunity

Security Engineer – SIEM/SOAR

• Design and maintain end-to-end data security architecture across Microsoft Azure, Microsoft Fabric, Azure Synapse Analytics, Azure Data Lake Storage (ADLS Gen2), and Databricks Lakehouse Platform.
• Define and enforce enterprise data classification, labeling, and handling standards aligned with Microsoft Purview Information Protection.
• Develop reference architectures and security blueprints for data ingestion, transformation, storage, and consumption layers.
• Lead threat modeling sessions for data pipelines and analytics workloads, identifying and mitigating risks proactively.
• Establish a Zero Trust data security model across all data platforms and integration points.
• Architect and govern data security controls within Microsoft Fabric, including workspace-level and item-level permissions, sensitivity labels, and OneLake security.
• Design role-based access control (RBAC) and attribute-based access control (ABAC) strategies across Azure Data Factory, Azure Synapse, Azure Databricks, and Azure SQL.
• Implement and operationalize Microsoft Purview for data catalog governance, data lineage, and automated sensitivity classification across hybrid and multi-cloud data estates.
• Configure and manage Azure Private Endpoints, VNet integration, and network security groups for data services to eliminate public exposure.
• Oversee encryption strategies including Azure Key Vault integration, customer-managed keys (CMK), and data-at-rest / data-in-transit encryption standards.
• Partner with identity teams to enforce Entra ID Conditional Access policies, Privileged Identity Management (PIM), and managed identities for data service authentication.
• Lead the implementation and tuning of Microsoft Defender for Cloud data security posture management (DSPM) capabilities.
• Architect and implement Unity Catalog as the enterprise-wide data governance layer across Databricks workspaces, including metastore design, catalog/schema/table-level permissions, and row/column-level security.
• Design Databricks workspace security including network isolation (no-public-IP, vNet injection, private link), cluster policies, and IP access lists.
• Define and enforce Databricks credential passthrough, service principal governance, and OAuth integration with Azure Entra ID.
• Implement dynamic data masking and column-level security policies within Unity Catalog to protect PII, PHI, and sensitive financial data.
• Establish Delta Lake security patterns including table ACLs, fine-grained access control, and audit logging strategies via Databricks system tables.
• Oversee the security of Databricks workflows, notebooks, and job clusters, including secrets management integration with Azure Key Vault-backed secret scopes.
• Conduct security reviews of MLflow models and Feature Store configurations to address data leakage risks in ML pipelines.
• Ensure data platform compliance with relevant regulatory frameworks including GDPR, CCPA, HIPAA, SOC 2 Type II, and PCI-DSS where applicable.
• Design and maintain audit trail and data access logging architectures across Microsoft and Databricks platforms.
• Conduct regular security risk assessments, gap analyses, and maturity evaluations of the data security program.
• Develop and maintain security runbooks, policies, and standards documentation for data platform operations.
• Coordinate with legal, compliance, and privacy teams to respond to data subject access requests (DSARs) and regulatory inquiries.
• Serve as the primary security advisor to data engineering, analytics engineering, and BI teams throughout the development lifecycle.
• Lead security architecture review boards for new data initiatives, third-party data integrations, and major platform changes.
• Develop and lead a structured mentoring program for junior and mid-level engineers and architects, providing one-on-one coaching, career guidance, and skills development roadmaps tailored to each individual’s growth goals.
• Conduct regular knowledge-sharing sessions, lunch-and-learns, and internal workshops to upskill teams on evolving data security threats, tooling, and compliance requirements across the Microsoft and Databricks ecosystems.
• Partner with engineering managers and HR to define data security competency frameworks, leveling guides, and certification pathways that support talent development and retention across the data platform organization.
• Establish and maintain a community of practice around data security, fostering peer learning, documentation culture, and cross-team collaboration on shared security challenges and architectural patterns.
• Collaborate with SecOps and SOC teams to build data-specific detection rules, incident response playbooks, and forensic investigation capabilities.
• Present security posture, risk findings, and remediation roadmaps to executive leadership and board-level stakeholders.

Senior Technical Data Security Architect

• Driving identity security initiatives like generating "metrics-that-matter" within existing identity platforms like Okta or Ping
• Extracting data and reports from the Databricks platform

Junior Identity Security Metrics Consultant, Databricks Analyst

• Responsible for implementation and enhancement of Active Directory solutions
• Gather and Document technical requirements and design
• Act as subject matter expert for client discussions

Senior Security Architect – Active Directory

Sales Operations Manager

• Use Salesforce.com to generate quotes, track opportunities and process orders.
• Promptly respond to internal and external inquiries.
• Suggest creative pricing and payment solutions balancing customer need and pricing policies.
• Serve as a liaison between customers, vendors, and GuidePoint outside Sales Executives.
• Develop and retain product and industry knowledge, vendor resources, and GuidePoint Security service offerings.
• Develop and maintain relationship with GuidePoint key vendors and customers.
• Attend regional forecast calls and perform pipeline analysis to ensure forecast accuracy.
• Leverage resources and relationships to bring value to customers.
• Serve as a liaison between GuidePoint outside Account Executives, Accounting and Contracts Departments to process and track orders.
• Work with the team to analyze information and make decisions that benefit GuidePoint Security.
• Demonstrate the ability to manage multiple tasks with shifting priorities and tight deadlines.
• Work closely with other GuidePoint teams to better streamline processes and information as well as ensuring customer deliverables.

Sales Operations Specialist

• Manage a portfolio of internal Information Technology projects that support scalability, automation, operational efficiency, and business transformation initiatives.
• Lead internal IT projects through the full lifecycle, including discovery, requirements gathering, planning, execution, risk management, stakeholder communication, and closeout.
• Facilitate project intake, prioritization, and planning activities in partnership with IT leadership and business stakeholders.
• Partner with IT leadership, technical teams, business stakeholders, and vendors to define scope, success criteria, timelines, dependencies, and resource requirements.
• Establish and maintain project governance practices, including status cadence, decision tracking, escalation paths, and stakeholder accountability.
• Develop and maintain project plans, schedules, status reports, RAID logs, decision records, and required project documentation using tools such as Jira and Confluence.
• Monitor project progress, manage scope, track milestones, and proactively resolve risks, issues, blockers, and dependencies to keep initiatives on schedule and within budget.
• Provide regular executive and stakeholder reporting on project health, delivery timelines, risks, decisions, resource constraints, and key performance indicators.
• Coordinate cross-functional resources and workstreams, ensuring clear ownership, accountability, and communication.
• Support deployment of IT solutions, systems, automation capabilities, process improvements, and operational enhancements in partnership with technical teams.
• Support change management activities, including stakeholder readiness, communications, adoption planning, and post-implementation review.
• Develop and refine project management methodology, governance processes, templates, and standard operating documentation.
• Lead lessons-learned activities and identify opportunities to improve delivery practices, streamline processes, increase transparency, and enhance operational maturity.
• Other duties as assigned.

Consultant

• Serve in the Oversight role on complex or high-severity engagements, reviewing findings before client calls, providing technical depth, anticipating client questions, and ensuring quality of analysis and deliverables.
• Step in as engagement Lead on the most complex or sensitive investigations (ransomware, APT, nation-state, insider threat), setting the standard for client communication and investigative rigor.
• Conduct advanced host forensics, network analysis, malware reverse engineering/triage, cloud forensics, threat actor attribution, and intelligence-driven investigation.
• Serve as a trusted surge resource for the team during high-volume periods, providing senior-level coverage across concurrent engagements.
• Design, document, and maintain DFIR investigation methodologies, playbooks, and SOPs that raise the quality floor for the entire practice.
• Actively mentor Senior Consultants and Analysts; provide guidance on technical challenges, client management, and professional development. Help develop the next generation of DFIR leads.
• Lead internal training sessions, write technical blog posts and research, document lessons learned, and contribute to the team's collective knowledge base.
• Identify gaps in current tooling and processes; design and build automation, scripts, or integrations that improve investigative efficiency across the team.
• Participate in candidate screening, technical interviews, and skills assessment to help build a high-quality team pipeline.
• Build deep, trusted relationships with key clients and stakeholders; serve as a credible senior voice during high-stakes incidents.
• Support pre-sales activities including technical scoping, proposal development, SOW review, and client presentations for DFIR, Compromise Assessment, and IR Advisory engagements.
• Represent GuidePoint Security externally through conference presentations, webinars, publications, and engagement with the broader DFIR community.

Principal DFIR Consultant

• Review Existing FireMon Rule Audit Reports and findings with Customer Team (Hit Counts, Unused Rules, etc)
• Determine Process for Rule Owner Identification and Cleanup
• Review of Firewall Rules
• For each rule, determine current asset owner and document
• For each rule, validate if the firewall rule is still required for all assets covered by rule (consult owners)
• For each rule, if rules contain assets that are no longer in production or policy that is no longer required document finding and schedule change control to remove/clean up rule from existing firewall policy
• Leverage existing Firewall Management Tools for Discovery and Maintenance/Cleanup
• Determine and Document Process for Validating Rules with Customer Team Members