General Description

GuidePoint Security is seeking a skilled AI Security Engineer to join our growing AI Security Services team. You will be assisting customers in the design, implementation, security, and operational management of generative AI security solutions. You will work closely with peers across multiple domains including AppSec, Cloud Security, and Vulnerability Management to deliver holistic and secure solutions adhering to industry best practices. This role offers the exciting opportunity to contribute to our growing AI security practice.

Roles and Responsibilities

• AI Security Architecture & Assessment: Advise on and assess the security posture of AI/ML systems, including LLMs, GenAI pipelines, and model serving infrastructure — identifying vulnerabilities, attack surfaces, and gaps against industry frameworks (e.g., OWASP LLM Top 10, MITRE ATLAS).
• Threat Modeling for AI Systems: Lead threat modeling exercises specific to AI workloads, covering adversarial inputs, prompt injection, model inversion, data poisoning, and supply chain risks across SaaS, self-hosted, and local AI deployments.
• Secure AI Integration Guidance: Advise internal teams on securely integrating SaaS AI services and APIs (e.g., OpenAI, Azure OpenAI, Bedrock) into enterprise applications, including safe handling of credentials, outputs, and user data.
• Data Security & Privacy Controls: Evaluate and recommend controls for data ingestion pipelines, RAG architectures, and vector databases to prevent unauthorized data exposure, leakage through model outputs, or non-compliant data processing.
• Collaboration & Stakeholder Engagement: Serve as a trusted security advisor bridging business stakeholders, AI/ML engineers, IT operations, and information security teams on all matters related to AI risk and security.
• Stay Current on AI Threat Landscape: Continuously track emerging AI security research, adversarial techniques, regulatory developments, and vendor security advisories to keep client guidance relevant and proactive.
• Security Documentation & Standards: Produce and maintain security architecture documentation, risk assessments, control frameworks, and guidelines tailored to the organization's AI environment.
• Strategic AI Security Roadmap: Contribute to the development of a long-term AI security strategy, including prioritized remediation roadmaps, capability maturity assessments, and investment recommendations.
• Security Awareness & Education: Develop and deliver training and awareness content for technical and non-technical stakeholders on AI-specific risks, responsible AI usage, and secure development practices for AI-powered applications.

Required Experience

• 5+ years of experience in security engineering with a significant focus on cloud security and/or AppSec
• Hands-on experience implementing, managing, securing, and supporting Agentic AI solutions within an enterprise context
• Familiarity with major cloud service provider AI-focused services such as AWS Bedrock, AWS SageMaker, Azure AI Foundry, or Google Vertex
• Proficiency in at least one relevant programming language, preferably Python
• Solid understanding of generative AI concepts, Large Language Models (LLMs), context engineering, agentic tool usage, and foundational AI/ML principles
• Deep knowledge and real operational experience in the usage of Agentic Coding assistants like Claude Code, Open Code, Cursor, or Codex
• Strong written and oral communication and interpersonal skills, with the ability to explain complex technical concepts to both technical and non-technical audiences
• Demonstrated experience applying security principles to AI implementations, including data protection, access controls, and threat modeling for AI systems
• Understanding of AI-specific security challenges including prompt injection, data poisoning, supply chain security, and model extraction attacks

Preferred Qualifications

• Certifications such as:
• AWS Certified AI Practitioner/AWS Certified Machine Learning Engineer
• Azure AI Engineer Associate
• Claude Certified Architect
• Understanding or experience with model fine-tuning techniques
• Familiarity with red teaming of agentic systems
• Experience with policy as code languages like Cedar or Rego and Infrastructure as Code (IaC) tools like AWS CloudFormation, Terraform, OpenTofu, or equivalent technologies
• Experience designing and implementing agentic AI architectures that balance security and autonomy
• Familiarity with MCP client/server architecture vs. agentic skills and the associated security risks of each

Senior Security Engineer – Firewall Configuration Specialist

Role and Responsibilities:

• Palo Alto & Checkpoint (Cloud) Firewall Configuration and Engineering:
• Design, implement, and manage firewall policies across Palo Alto and Checkpoint (Cloud) virtual firewalls
• Configure and optimize firewall rules to meet business and security requirements
• Implement security best practices for firewall configurations and policy management
• Prisma Access Deployment and Management:
• Configure and manage Prisma Access for secure remote access and cloud-delivered security services
• Implement and optimize Prisma Access policies and configurations
• Integrate Prisma Access with existing security infrastructure
• Centralized Firewall Management:
• Utilize Strata Cloud Manager for centralized firewall management and configuration
• Leverage Palo Alto Networks Panorama for policy deployment and management across multiple firewalls
• Manage Checkpoint Cloud configurations through centralized management platforms
• Day-to-Day Firewall Operations:
• Process and implement firewall change requests following change control procedures
• Troubleshoot firewall connectivity and policy issues
• Perform firewall configuration updates and enhancements
• Collaborate with network and security teams on firewall-related projects
• Firewall Management Tools:
• Utilize Strata Cloud Manager and FireMon Security Manager for configuration management
• Leverage existing tools for policy deployment and operational efficiency

Required Experience, Skills, Certifications:

• 5+ years of Network Security experience (Enterprise network experience preferred)
• Strong/Expert Level Palo Alto and Checkpoint (Cloud) firewall configuration/engineering experience
• Hands-on experience with Prisma Access configuration and deployment
• User Experience with Palo Alto Networks Panorama for centralized management
• Palo Alto Networks Certified Cybersecurity Associate (PCCSA) or higher certification
• Strong Routing and Switching knowledge with Firewall integration
• Experience managing Large Firewall Deployments (50+ Firewalls)
• User Experience with Splunk for log analysis and troubleshooting

Nice to have:

• Strata Cloud Manager experience (strong plus)
• FireMon Security Manager and Other Modules
• Tufin or Similar Firewall Automation Experience
• Azure Networking Experience
• Experience with Palo Alto Networks Automation Tools (e.g., Palo Alto Networks Automation API, Terraform)
• Integration experience with Palo Alto Networks and other security solutions (e.g., Threat Prevention, URL Filtering, DNS Security)
• Experience with firewall rule optimization and cleanup projects

Required Experience:

• Proficiency with the implementation, operationalization, and troubleshooting of Black Duck and Checkmarx
• Understanding of Continuous Integration / Continuous Delivery (CI/CD) pipeline tools and processes (e.g. GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI, etc.)
• Experience in software engineering, ideally full stack software development, including modern technologies and application architectures
• Strong scripting and automation experience using one or more programming languages
• Solid working knowledge of application security fundamentals including the OWASP Top 10, threat modeling, and implementing secure coding practices throughout the Software Development Lifecycle (SDLC)
• Excellent written and verbal communication skills

Preferred:

• Proficiency with the implementation, operationalization, and troubleshooting of other Static Application Security Testing (SAST) tools such as Semgrep, CodeQL, Veracode, etc.
• Experience writing or adapting custom SAST rules (Semgrep or CodeQL)
• Familiarity with additional Application Security tools (e.g. Interactive (IAST), Dynamic (DAST) and API security, SCA, etc.)
• Familiarity with API Security tools (e.g., NoName, Traceable, Salt, Cequence)
• Practical hands-on experience validating vulnerabilities and proficiency with Burp Suite
• Strong working knowledge of Secure Development Lifecycles and experience triaging and remediating technical vulnerabilities identified by web application scanning tools
• Understanding of automated security testing approaches and tools
• Experience in building and operating security tools within CI/CD pipelines
• Experience with proactive integration of security into the development process
• Past experience as an application security practitioner or software engineer

Educational & Professional Credentials:

• Bachelor’s degree in a relevant discipline or equivalent experience
• 3-5 years of security engineering experience in the Information Security industry

Security Engineers at GuidePoint Security are experienced professionals who are autonomous, experienced, self-driven security fanatics. Our Security Engineers are materially involved in the complete security technologies opportunity lifecycle, from pre-sales through delivery and have the freedom and control over how engagements are scoped and delivered. Our unique position as both a Value-Added Reseller (VAR) AND a professional services organization also requires our Security Engineers to continually expand their knowledge and experience with the latest cutting-edge information security technologies. This helps satisfy our Security Engineers desire to constantly expand their knowledge and better meet the needs of our clients.

Note: This is a remote position but applicants in the eastern time zone are highly preferred. Must live in the U.S. to be considered.

Responsibilities

• Provides effective network security implementation and consulting services for multiple unique customers and environments
• Implement and manage SASE technologies from ZScaler and potentially other vendors like Netskope or Palo Alto
• Implement and manage firewall platforms from Palo Alto, Fortigate, Check Point or Cisco
• Develop high-level network security documentation including as-builts, recommendations, implementation guides, network diagrams

Qualifications

• 3 to 5 years of Network Security Engineering experience in enterprise environments
• Experience in a consultative or professional services role preferred
• Experience working with deploying and integrating ZScaler (Netskope, Palo Alto, iBoss, HP-Axis a plus)
• MUST be ZDTA or ZDTE certified
• Hands on firewall experience with Palo Alto, Fortigate, CheckPoint, Cisco ASA-Firepower
• Experience deploying firewall technologies in one of the three major public clouds; AWS, Azure or GCP
• SD-WAN experience deploying technologies such as HP-Silverpeak, Palo Alto Prisma-Cloudgenix, Cisco-Viptela including full SASE integration is a plus
• Broad experience with foundational network and security concepts
• Experience authoring security runbooks, policy, and best practice documentation
• Ability to confidently lead projects and be the trusted network security voice in customer conversations

NOTE: Only candidates living in Northern Virginia will be considered as this is a client facing presales role with 15-25% travel anticipated supporting customers in this market.

Overview:

The Sr. Security Architect will collaborate with Account Executives to drive new business within the Mid-Atlantic region by providing architectural security guidance and solution recommendations. The Senior Security Architect will be instrumental in working with the engineering team to design new offerings that will be made available to the regional customer base. This position will be 100% focused on cyber-security solutions and provide the ability to evaluate and recommend new security solutions within the space.

Roles and Responsibilities:

• Focus on driving new and continued business by working with Account Executives within territory.
• Be part of a team that helps provide direction for engineering cyber-security solutions offerings.
• Provide business and security program recommendations for prospects/customers' targeted outcomes.
• Learn new cyber technologies and be able to articulate the value proposition for adoption and integrations across the cybersecurity landscape.
• Participate in Sales and Marketing events to make customers, prospects, and partners aware of GuidePoint and their offerings
• Participate in industry events, conferences, and forums
• Develop and drive services technology adoption within the existing customer base.
• Develop Statements of Work and Proposals for GuidePoint engineering services offerings.
• Report to the VP of Security Architecture within the Mid-Atlantic region.

Position Requirements:

• Minimum 5 years in an enterprise level security consultative, vendor, or operational role building and assessing Information Security architectures and programs
• Proficiency in multiple security technologies, including network security and architecture, NGFW, Cloud Security, Data Security, Vulnerability & Risk Management, Proxy, EDR, IAM, SIEM & Analytics, AI Security
• Proficiency in operating systems including Windows, OSX, and Linux
• A good listener to work with clients to understand issues/gaps in their security programs and works alongside them to provide solutions
• Proactively research and engage emerging vendors and technologies to understand how they may be used to solve our clients challenges
• Experience working with teams to create new service offerings and supporting collateral
• Excellent soft skills with the ability to articulate complex technical content to both technical and non-technical audiences
• Proactively works to mature the business, including improving existing offerings and creating new offerings
• Author comprehensive business and technical collateral to support the business that is proficiently tailored to both technical and managerial audiences
• Security Architects work from remote/virtual when not visiting client locations
• Position will require 15-25% travel for client meetings, QBRs, CKO, etc.
• Expectations for this role is 85% Presales Engineering/Sales and 15% Consultation and delivery

Technical Requirements:

• Deep proficiency in multiple security technologies, including network security, NGFW, cloud security, Data Security, SASE/SSE, Identity solutions, SIEM/Analytics, AI Security, etc.
• Deep expertise architecting and designing enterprise scale security solutions
• MSSP/MDR sales/solution experience is desired
• Strong networking and security troubleshooting
• Deep proficiency in various client and server operating systems (Windows, Nix, OSX, etc.)
• Working technical knowledge of advanced security concepts (Zero trust, defense in depth, etc.)
• Proficiency in various client and server operating systems (Windows, Nix, OSX, etc.)
• Working technical knowledge of advanced security concepts (Zero Trust, Defense in Depth, etc.)

Preferred Experience:

• Proven experience with cyber security technologies including Zero Trust architectures, Data Security solutions, NAC solutions, Palo Alto Networks, Cisco Security solutions, Check Point, CrowdStrike, Splunk, and AWS/Azure/GCP, Cloud Security solutions,
• Previous cyber-security presales engineering experience is a must

Educational & Professional Credentials:

• Bachelor’s degree in a relevant discipline or equivalent experience

NOTE: Only candidates living in the Philadelphia Metro will be considered as this is a client facing presales role with 15-25% travel anticipated supporting customers in this market.

Overview:

The Sr. Security Architect will collaborate with Account Executives to drive new business within the Mid-Atlantic region by providing architectural security guidance and solution recommendations. The Senior Security Architect will be instrumental in working with the engineering team to design new offerings that will be made available to the regional customer base. This position will be 100% focused on cyber-security solutions and provide the ability to evaluate and recommend new security solutions within the space.

Roles and Responsibilities:

• Focus on driving new and continued business by working with Account Executives within territory.
• Be part of a team that helps provide direction for engineering cyber-security solutions offerings.
• Provide business and security program recommendations for prospects/customers' targeted outcomes.
• Learn new cyber technologies and be able to articulate the value proposition for adoption and integrations across the cybersecurity landscape.
• Participate in Sales and Marketing events to make customers, prospects, and partners aware of GuidePoint and their offerings
• Participate in industry events, conferences, and forums
• Develop and drive services technology adoption within the existing customer base.
• Develop Statements of Work and Proposals for GuidePoint engineering services offerings.
• Report to the VP of Security Architecture within the Mid-Atlantic region.

Position Requirements:

• Minimum 5 years in an enterprise level security consultative, vendor, or operational role building and assessing Information Security architectures and programs
• Proficiency in multiple security technologies, including network security and architecture, NGFW, Cloud Security, Data Security, Vulnerability & Risk Management, Proxy, EDR, IAM, SIEM & Analytics, AI Security
• Proficiency in operating systems including Windows, OSX, and Linux
• A good listener to work with clients to understand issues/gaps in their security programs and works alongside them to provide solutions
• Proactively research and engage emerging vendors and technologies to understand how they may be used to solve our clients challenges
• Experience working with teams to create new service offerings and supporting collateral
• Excellent soft skills with the ability to articulate complex technical content to both technical and non-technical audiences
• Proactively works to mature the business, including improving existing offerings and creating new offerings
• Author comprehensive business and technical collateral to support the business that is proficiently tailored to both technical and managerial audiences
• Security Architects work from remote/virtual when not visiting client locations
• Position will require 15-25% travel for client meetings, QBRs, CKO, etc.
• Expectations for this role is 85% Presales Engineering/Sales and 15% Consultation and delivery

Technical Requirements:

• Deep proficiency in multiple security technologies, including network security, NGFW, cloud security, Data Security, SASE/SSE, Identity solutions, SIEM/Analytics, AI Security, etc.
• Deep expertise architecting and designing enterprise scale security solutions
• MSSP/MDR sales/solution experience is desired
• Strong networking and security troubleshooting
• Deep proficiency in various client and server operating systems (Windows, Nix, OSX, etc.)
• Working technical knowledge of advanced security concepts (Zero trust, defense in depth, etc.)
• Proficiency in various client and server operating systems (Windows, Nix, OSX, etc.)
• Working technical knowledge of advanced security concepts (Zero Trust, Defense in Depth, etc.)

Preferred Experience:

• Proven experience with cyber security technologies including Zero Trust architectures, Data Security solutions, NAC solutions, Palo Alto Networks, Cisco Security solutions, Check Point, CrowdStrike, Splunk, and AWS/Azure/GCP, Cloud Security solutions,
• Previous cyber-security presales engineering experience is a must

Educational & Professional Credentials:

• Bachelor’s degree in a relevant discipline or equivalent experience

The ideal Territory Account Executive will pro-actively network, cold call, and sell to multiple contacts within an organization, including "C" levels. This person will manage and develop relationships with customers and provide a consultative sales approach that delivers the highest level of account management services. The Territory Account Executive should share the goals and concerns of the client and understand the technology partner and products available to meet their goals and solve their challenges. This is a territory based role focusing on growing existing accounts and adding new mid-market accounts in Maryland/DMV. This position is virtual/remote with regional travel required. Base salary $50-$100K plus commissions.

Role and Responsibilities:
• Consistently meet sales and profitability goals.
• Position, configure and quote product and service solutions to clients.
• Participate in industry organizations such as ISSA, ISACA, OWASP etc.
• Manage leads and opportunities through the companies Salesforce and other CRM tools.
• Accurately and consistently report sales forecasts and opportunity funnels
• Participate in creation, editing and closure of services proposals.
• Work with GuidePoint Security vendors to understand and position their technologies, understand and articulate their value proposition to clients.
• Participate in field marketing to generate interest and provide information to the client prospect community to include driving attendance to such events and activities
• Represent GuidePoint Consultants to clients and be able to articulate our areas of expertise
• Set proper expectations and maintain open communication with clients and vendors through the lifecycle of the sales process.
• Effectively leverage supporting resources in the sales process with the spirit of teamwork and cooperation.
• Professionally develop and present sales presentations to large groups and executive level clients.

Position Requirements:
• Minimum 5 years outside sales experience, preferably in cybersecurity or infrastructure and services.
• Current enterprise security space experience preferred
• Strong, established relationships with key accounts in the territory required
• Requires experience with Salesforce.com
• Strong group presentation skills a must
• Verifiable history of exceeding sales goals and generating leads
• Demonstrated ability of lead generation and opening new accounts
• Experience selling professional services, security audits and assessments a plus
• Bachelors degree preferred
• Network security vendor related certifications strongly preferred

The ideal Account Executive will pro-actively network, cold call, and sell to multiple contacts within an organization, including "C" levels. This person will manage and develop relationships with customers and provide a consultative sales approach that delivers the highest level of account management services.  The Account Executive should share the goals and concerns of the client and understand the technology partner and products available to meet their goals and solve their challenges.  This position is virtual/remote with regional travel required. 

Role and Responsibilities:

• Consistently meet sales and profitability goals.
• Position, configure and quote product and service solutions to clients.
• Participate in industry organizations such as ISSA, ISACA, OWASP etc.
• Manage leads and opportunities through the companies Salesforce and other CRM tools.
• Accurately and consistently report sales forecasts and opportunity funnels
• Participate in creation, editing and closure of services proposals.
• Work with GuidePoint Security vendors to understand and position their technologies, understand and articulate their value proposition to clients.
• Participate in field marketing to generate interest and provide information to the client prospect community to include driving attendance to such events and activities
• Represent GuidePoint Consultants to clients and be able to articulate our areas of expertise
• Set proper expectations and maintain open communication with clients and vendors through the lifecycle of the sales process.
• Effectively leverage supporting resources in the sales process with the spirit of teamwork and cooperation.
• Professionally develop and present sales presentations to large groups and executive level clients. 

 Position Requirements:

• Minimum 5 years outside sales experience in the IT space required (preference for experience in Information Security)
• Current enterprise security space experience preferred
• Strong, established relationships with key accounts in the territory required
• Requires experience with Salesforce.com
• Strong group presentation skills a must
• Verifiable history of exceeding sales goals and generating leads
• Demonstrated ability of lead generation and opening new accounts
• Experience selling professional services, security audits and assessments a plus
• Bachelors degree preferred
• Network security vendor related certifications strongly preferred

The ideal Business Development Representative will work in conjunction with sales and marketing to discover, develop, and deliver qualified prospects to the Account Executive Team. This person will also help Account Executives manage and develop relationships with customers and provide a consultative sales approach that delivers the highest level of account management services. This person should share the goals and concerns of the client and understand the technology partner and products available to meet their goals and solve their challenges.

***Please note - we are prioritizing candidates currently located in PA, NJ, DE, VA, MD, DC, or NC.

Roles and Responsibilities:

• Work with Account Executives and BDR Team to develop targeted outreach plan to include: prospect/customer lists per account, Focus OEM and Use Cases, Messaging per account, and areas and ways to help increase business opportunities
• Sync with Account Executives regularly to provide updates on outreach efforts, successes, and areas of improvement
• Follow-up, qualify, engage, and manage leads and opportunities via Salesforce.com and Marketo
• Learn OEM technologies and understand and articulate their value proposition to clients
• Assist marketing in driving attendance to GuidePoint events and activities
• Represent GuidePoint Consultants to clients and articulate our areas of expertise
• Create email and call shells for individual/event-based outreach; to include targeted messaging, registration links, OEM information etc
• Take notes during prospect meetings and enter into Salesforce.com to capture wants/needs of prospects/customers for Sales team to track
• Present metrics on successes and ROI within business development efforts to leaders

Required Experience:

• Bachelors degree preferred.
• Minimum 5 years inside sales experience in the IT space required (preference for experience in Information Security).
• Experience with Salesforce.com required.
• Network security vendor related certifications preferred.
• Current enterprise security space experience preferred.
• Strong, established relationships with key accounts in the territory preferred.
• Verifiable history of exceeding sales goals and generating leads.
• Demonstrated ability of lead generation and opening new accounts.
• Experience selling professional services, security audits and assessments a plus.
• Must possess good communication skills and ability to interact with all levels or organization.

Travel Requirements:

• Up to 10% regional travel as needed.

Physical Requirements:

• Sedentary work
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day

The ideal Account Manager (AM) works on a team with and for an Account Executive (AE), assisting them in sales lifecycle responsibilities and ensuring customer retention and growth.

Responsibilities:

• Serve as the dedicated Account Manager for a specified Account Executive, helping this individual maintain and grow their specific business within their accounts.
• Day to day responsibilities to include:
  • Respond to Customer inquiries in a timely fashion and move to resolution
  • Serve as a liaison between Customers, Vendors, and GuidePoint resources for this specified AE
  • Develop and retain Product and Industry knowledge, Vendor Resources, and GuidePoint Security Service offerings
  • Develop and maintain relationship with GuidePoint key Vendors and Account Executive’s Customers
  • Leverage Vendor resources and relationships to bring value to Customers
• Improve more frequent calls and higher touch for AE’s customer base
• Manage open opportunities in existing accounts with guidance from AE
• Identify whitespace opportunities with customers and vendors
• Represent GPS AE at customer meetings as needed
• With AE guidance, close renewal, upsell and net new sales cycles
• Proactive support for upcoming renewals, identifying upsell and proactive support for existing business
• Collaborate on promoting marketing communication to account base with targeted follow up
• Focus on driving and selling GPS Professional Services Engagements across targeted account base
• Assist AE in forecast management and internal strategic reporting
• If required should have ability to leverage salesforce.com to generate quotes, track open opportunities and renewal opportunities
• All other duties as assigned

Experience Requirements:

• Proven success in Inside Sales
• Cyber Security experience required
• Must have outstanding attention to detail and commitment to follow-through
• Ability to work well within a team
• Strong ability to multitask
• An unwavering positive attitude, strong drive for results, and the ability to deal with ambiguity
• Strong written and verbal communication skills. Ability to communicate clearly and concisely via email, phone, and written documents
• Ability to work flexible work schedule required
• Requires experience in Salesforce.com and Microsoft office
• Bachelor’s Degree is preferred