Business Analyst, TAS

General Description

This role owns the day-to-day, non-technical operations of GuidePoint Security’s Threat & Attack Simulation (TAS) practice — a ~35-person offensive security team within Professional Services. It exists to keep the practice running smoothly so that technical leaders and consultants can stay focused on client delivery rather than administrative overhead.

Reporting to the Practice Director, this role is the practice’s operational backbone — owning reporting and metrics, team onboarding and tooling, the practice’s operating cadence, and continuous process improvement. This is distinct from project management and from the scoping/SOW function: the role does not run engagements or own the quoting process but makes the whole practice run more efficiently around those functions. The ideal candidate is highly organized, process-driven, data-fluent, and comfortable operating alongside a specialized technical team without needing to perform the technical work themselves.

About the Team

Threat & Attack Simulation (TAS) is GuidePoint Security’s offensive security practice, delivering adversary-emulation services such as penetration testing, red teaming, and breach-and-attack simulation (BAS) to help clients find and fix exposures before real attackers do. The team of roughly 35 consultants operates as part of GuidePoint’s Professional Services organization, with delivery and financials tracked in Certinia / Salesforce PSA. As the practice grows, the operational load — reporting, onboarding, tooling, and operating cadence — has outpaced what the technical leadership can absorb alongside client work, which is exactly the gap this role fills.

Roles and Responsibilities:  

Reporting & Metrics

• Produce reliable recurring metrics — utilization, backlog, pipeline, bookings, and revenue.
• Prepare materials for QBRs, leadership updates, and the weekly practice update.
• Build and maintain dashboards and reports that give leadership a clear, trustworthy read on practice health.
• Pull and synthesize operational data from Salesforce / Certinia into decision-ready summaries for the Practice Director.

Onboarding & Tooling

• Run new-hire onboarding and ramp logistics — accounts, access, equipment, and scheduling.
• Administer licenses, tooling, and lab resources in coordination with internal IT/security.
• Maintain tooling and access records so the team has what it needs to deliver.

Practice Operations & Cadence

• Run the practice’s operating rhythm — recurring team meetings, all-hands, and offsite logistics.
• Maintain internal documentation and the team knowledge base so information is easy to find.
• Track operational budget and spend visibility and support leadership with ad-hoc operational analysis.

Process Improvement

• Document and standardize operational processes so the practice scales cleanly.
• Identify and remove recurring administrative friction for consultants and leadership.
• Partner with PSOS, PMO, sales, and finance to smooth the hand-offs between their functions and the practice — improving the flow, not owning their work.

Required Experience and Education: 

• 3+ years in operations or business operations (consulting or professional-services environment preferred).
• Exceptional organizational skills and attention to detail across many concurrent workstreams.
• Strong written and verbal communication; comfortable coordinating across technical and business stakeholders.
• Strong with metrics, reporting, and spreadsheets/dashboards — able to turn operational data into clear summaries.
• Proficiency with CRM / PSA tooling and reporting (Salesforce and/or Certinia a strong plus).
• Experience documenting and improving operational processes.
• Comfortable operating alongside a specialized technical cybersecurity team (technical delivery experience is not required).
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Preferred Experience and Education

• Experience in a professional services, consulting, or agency delivery environment.
• Familiarity with cybersecurity engagements — penetration testing, red teaming, or offensive security.
• Hands-on experience with Salesforce and/or Certinia PSA (reporting, dashboards, records).
• Experience with business-operations or data-reporting tooling (BI dashboards, advanced Excel/Sheets).
• Experience supporting a distributed or remote technical team.

Travel Requirements:

• Up to 10% travel

Physical Requirements:

• Sedentary work
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day