Role and Responsibilities:

• Manage the Security Solutions Salesforce Certinia Cases queue by overseeing the intake and workflow of service requests submitted through Salesforce's case management system. Monitor cases as they are initially assigned to the queue that matches the service offering, and re-assign ownership to individual service agents to work the case. 
• Create and maintain list views to manage the total workload and queue of cases, ensuring efficient tracking of workload and turnaround time. 
• Ensure cases move efficiently through the workflow and are assigned to appropriate service agents for resolution, while monitoring which internal users receive case email notifications.
• Assist with scoping activities, proposal development, and RFI/P responses under the guidance of senior consultants.
• Use internal tools and processes to generate service quotes, help scope and track opportunities, and process and close opportunities.
• Promptly responding to internal and external inquiries for professional services.
• Understand and suggest ongoing process improvements for the presales service lifecycle. • Interface with Technical leaders, practice delivery leads, and Sales Support Specialists on a daily basis in a fast pace, engaging environment.
• Document pre-sales processes, contribute content, methodologies, and documentation to help the practice grow.
• Be able to manage multiple streams of work in an organized and timely manner.
• Serve as a liaison between Customers, Vendors, and GuidePoint outside Sales Executives and Service Leaders
• Document and maintain processes and procedures for presales workflow steps.
• Develop and maintain relationships with GuidePoint key Vendors and Customers.
• Attend regional/national forecast calls and perform pipeline analysis to ensure forecast accuracy.
• Serve as a liaison between GuidePoint Service Leaders, Contracts and Proposal Departments, and vendors (as required) to process, track and manage service opportunities.
• Work with the team to analyze information and make decisions that benefit GuidePoint Security.

 Experience and Education:

• Associate Degree or equivalent from two-year college with four-year degree in a relevant area of study or technical school preferred
• Knowledge of Information Systems concepts required, past Cyber Security operations, services or proposal writing experience strongly desired.
• Must be self-motivated
• Must have outstanding attention to detail and commitment to follow-through
• Entry-level experience with Identity and Access Management (IAM) concepts, tools, or platforms preferred
• Familiarity with IAM principles such as provisioning, de-provisioning, role-based access control (RBAC), and single sign-on (SSO) is a plus
• Technical sales, professional service or consulting and technical writing experience preferred 
• Ability to work well in a team environment
• Prior experience with task management/ Kanban tools and Customer Relationship Management (CRM) software is required.
• Experience with Jira and/or Salesforce preferred
• Strong ability to multitask and understand processes quickly and efficiently
• An unwavering positive attitude, a strong drive for results, and the ability to deal with ambiguity are a must

How to Apply:

We're looking for someone who demonstrates exceptional attention to detail from the very start. Please submit your resume and a cover letter that highlights your experience with process improvement and quality assurance. To help us identify candidates who share our commitment to thoroughness, please include the phrase "Process Excellence" in your cover letter when describing your approach to operational improvement.

The Senior Security Consultant- Security Solutions will collaborate across GuidePoint sales and service teams and provide thought leadership for customers, partners, and internal partners. This role will act as a pivotal bridge between our sales and delivery teams. The role involves fielding new opportunities, accurately scoping projects, and representing our delivery capabilities to clients. You will leverage your technical expertise and consultative approach to drive business growth and ensure client satisfaction.

Role and Responsibilities

• Pre-Sales
  • Provide expert guidance on the GuidePoint Security Information Assurance services portfolio including but not limited to Threat and Attack Simulation (TAS), Application Security, and Operational Technology services.
  • Collaborate with sales teams to identify client needs, develop tailored solutions, and contribute to proposal development.
  • Accurately report opportunities and forecast for service-related engagements.
• Client Engagement and Revenue Growth
  • Drive revenue and profitability by expanding our customer base and deepening engagements with existing clients.
  • Lead strategic planning sessions and workshops with executive teams to align security solutions with business objectives.
  • Understand and articulate complex technical information to both technical and non-technical audiences.
• Internal Collaboration and Development
  • Enable and educate field Account Executives to engage strategically with their customers.
  • Support partners and sales campaigns by developing services and programs that can be leveraged company wide.
  • Contribute to practice development and enhancement of service offerings.
• Continuous Learning and Thought Leadership
  • Stay at the forefront on the information security industry by perpetually strengthening relevant skills and knowledge.
  • Incorporate industry developments into service delivery and client solutions.
  • Travel up to 20% may be required to support clients.

Qualifications

• Experience
  • Minimum of 8 years of combined experience in cybersecurity, with at least 3 years in a pre-sales or solutions consulting role and 5 years in network and application penetration testing.
  • Proven experience in a client-facing consultative role with strong pre-sales capabilities.
  • Prior experience leading strategic planning and workshops with executive teams.
• Technical Expertise
  • Strong understanding of Penetration Testing methodologies such as NIST SP 800-115, OSSTMM, and OWASP Testing Guide
  • Ability to assess organizational maturity and provide strategic recommendations to senior leadership
• Skills
  • Exceptional communication skills, both written and verbal.
  • Ability to distill complex problems into clear, actionable insights for audiences ranging from technical teams to C-level executives.
  • Strong organizational skills with the ability to manage multiple projects simultaneously.
• Certifications and Education
  • Bachelor’s degree in computer science, Information Security, or a related field preferred.
  • Relevant industry certifications such as CISSP, CISA, CISM, CRISC, CBCP, GIAC are preferred.
• Personal Attributes
  • Self-motivated with a passion for personal and professional growth.
  • Ability to work independently and collaboratively within a team.
  • Flexibility and adaptability in a fast-paced environment.

Summary

GuidePoint Security offers an inclusive set of strategic Application Security services, including Application Threat Modeling, Application Architecture Reviews, and AppSec/DevSecOps Program Assessments. As a Senior Application Security Consultant within Strategic Services, you’ll deliver these offerings to clients across various industries.

You’ll join GuidePoint’s elite team to perform engagements, communicate with clients, deliver comprehensive reports, and provide remediation guidance. You’ll also contribute to evolving our service offerings in response to emerging threats and client needs.

We’re ideally seeking candidates who have transitioned from software development into application security, bringing practical coding experience and an in-depth understanding of secure software development practices.

Role Requirements

• Willingness to travel up to 10%
• Delivering Application Security services, including Application Threat Modeling, Application Architecture Reviews, and AppSec/DevSecOps Program Assessments
• Author comprehensive assessment deliverables tailored to both technical and managerial audiences detailing technical execution, deficiencies, business impact, and remediation strategies
• Understanding of application security landscape, tools, methodologies, and frameworks such as OWASP SAMM, OWASP DSOMM, NIST SSDF, SLSA, NIST AI RMF, and MITRE ATLAS
• Deep understanding of application security issues, mitigation strategies, and common security controls
• Ability to analyze and understand complex application architectures
• Experience working directly within development teams and integrating security into the SDLC
• Assist with Practice development, improving offerings, and mentoring team members
• Contribute to marketing initiatives via research, speaking, writing, and tool development
• Foster client relationships through support, information, and guidance while managing concurrent client engagements
• Demonstrates a startup mentality with a highly driven, high-performance approach to work

Education, Credentials, and Experience

• Comprehensive hands-on experience using generative AI in automated workflows
• Direct hands-on experience in application security service offerings, including application threat modeling, architecture reviews, and AppSec/DevSecOps program assessments
• Experience with application security controls, architectures, requirements, and industry standards
• Development and/or application architecture design background with understanding of secure implementation practices for cryptography, input validation techniques to prevent injection attacks, and exception management
• Operational DevSecOps experience
• Development experience in JavaScript, shell, Python, Java, C++, PHP, or C#, with ability to translate security requirements into technical implementations
• Excellent writing, communication, and time management skills
• Minimum of 6 years of experience in Application Security and/or Software Development, with at least 3 years in Application Security
• Minimum of 2 years of experience in consulting services or internal security roles requiring effective communication with both technical teams and executive leadership
• Bachelor’s degree in a relevant discipline or equivalent experience

We are seeking a highly skilled Cloud Security Consultant with deep expertise in AWS to lead the design, assessment, and governance of secure cloud environments for our clients. This role is central to delivering security consulting engagements, including architecture design, risk assessments, compliance mapping, and cloud-native control implementation. The ideal candidate will combine technical excellence in AWS and multi-cloud platforms with strong client advisory skills, helping organizations enhance their security posture, implement scalable guardrails, and adopt modern DevSecOps and CNAPP practices. This position also involves mentoring junior staff, contributing to internal methodologies, and supporting pre-sales and solutioning efforts within a fast-growing consultancy environment.

Roles and Responsibilities:

• Provide oversight for delivery teams, ensuring quality, consistency, and alignment with client objectives while fostering knowledge transfer and consistent execution
• Manage and resolve client escalations, balancing client satisfaction with project scope and delivery constraints
• Present findings and recommendations to executive stakeholders, lead technical workshops, and facilitate security strategy sessions
• As an individual contributor, provide consulting services on customer engagements and deliver security outcomes. Tasks may include:
  • Design secure cloud architectures and reference models for AWS and multi-cloud environments
  • Conduct in-depth cloud security assessments to identify security misconfigurations, architecture and cloud operational risks, and compliance gaps
  • Assist clients with continuous compliance and audit readiness in cloud environments
  • Conduct AWS security workshops, technical interviews, and stakeholder briefings
  • Prepare and present client deliverables including security roadmaps, process improvements, gap analyses, architecture diagrams, cloud security strategies, and custom deliverables based on client needs
• Contribute to internal methodologies, templates, and reusable assessment frameworks
• Mentor junior consultants and support knowledge sharing within the consultancy
• Assist with scoping and pre-sales activities including proposals and statements of work (SOWs)
• Collaborate with internal pre-sales teams to identify use-cases and opportunities for third-party security tooling (e.g., CNAPP, secrets management, data security, cloud detection and response, NHI [Non-Human Identity], etc.)

Requirements:

Experience & Technical Proficiency

• Minimum of 5 years designing AWS architecture and operating AWS workloads at scale
• AWS knowledge must include networking, data security, identity and access management, automation, and extensive hands-on with Amazon’s cloud-native security tooling services
• Demonstrated knowledge of emerging security patterns and best practices for AI/ML workloads in AWS, including securing SageMaker environments, implementing guardrails for generative AI services (Bedrock), and applying data protection controls for model training and inference pipelines
• Strong knowledge of IAM patterns (RBAC, ABAC), federated access, permission boundaries, SCPs, and RCPs
• Proficiency in Infrastructure as Code (Terraform, CloudFormation, CDK) and secure coding practices
• Experience with CIEM, CSPM, or CWPP tools
• Familiarity with DevSecOps practices and integrating security into CI/CD pipelines
• Scripting and automation skills (e.g., Python, Bash, or PowerShell)
• Experience securing Kubernetes environments, including Amazon EKS and other managed Kubernetes platforms, with knowledge of pod security, RBAC, network policies, and container security best practices

Preferred:

• Minimum of 2 years of that experience must be as an internal IT/Security team member (not in a consulting capacity), demonstrating understanding of organizational ownership, operational realities, and internal stakeholder dynamics
• Working knowledge of the Cloud Security Alliance (CSA) Cloud Control Matrix (CCM)
• Skilled in cloud infrastructure threat modeling, risk analysis, and mapping controls to frameworks (e.g., NIST, CIS, MITRE ATT&CK)

Leadership and Collaboration

• Ability to lead technical workshops, discovery sessions, and architecture reviews with clients
• Comfortable advising both technical and non-technical stakeholders on cloud security strategy
• Skilled in producing high-quality deliverables and communicating complex concepts clearly
• Experience mentoring junior staff or guiding cross-functional teams on cloud security best practices
• Collaborative mindset with a strong consulting presence and client service orientation

Education & Certifications

• Bachelor’s or equivalent experience in Cybersecurity, Computer Science, Engineering, or related field.
• Preferred certifications:
  • CISSP, CCSP, CCSK
  • AWS Cloud certifications: AWS Certified Security – Specialty, AWS Certified Solutions Architect – Professional
  • Other CSP Certifications: Microsoft Certified: Azure Security Engineer Associate, Google Professional Cloud Security Engineer
• Ongoing commitment to professional development and staying current with cloud and security trends and certifications.