Security Engineer- Corporate Information Security- Remote (Anywhere in the U.S.)

General Description

We are looking for a curious, technically strong Security Engineer to join our Corporate Information Security (CIS) team, focused on threat detection, threat intelligence, threat hunting and event triage. You will help operate and continuously improve an automation and agentic first security operations, one where routine analysis is increasingly handled by well-designed automation and AI agents, so that engineers can focus on higher order tasks. You will provide “Wow Them” service to internal customers and coworkers across the business.

The Security Engineer, CIS will be required to demonstrate strong event triage, and threat hunting capabilities, alongside a solid understanding of networks and systems fundamentals. An engineer with a strong bias toward automating the boring stuff. You should bring a genuine curiosity about attack mechanics and have some hands-on experience automating and safely leveraging LLMs and AI coding agents to build tooling.

About Corporate Information Security (CIS)

CIS is responsible for protecting GuidePoint’s people, data, and systems. We partner with technical groups across the company to design, build and deploy first class security controls and processes. We also are responsible for detection and response for the enterprise, turning threat intelligence into action, and build the automation that enables the team to defend at scale.

What sets us apart:

• Strong communication and collaboration: We effectively drive security efforts across the company with excellent cross-functional collaboration and clear communication that turns security from a roadblock into an enabler.
• Technical fundamentals: we value people who understand what’s happening under the hood, not just which button to click.

Roles and Responsibilities: 

• Investigate and prioritize alerts, separate signal from noise, and drive incidents to resolution or escalation. Then optimize the process to be less manual in the future.
• Proactively search for adversary activity and develop and tune high-fidelity detections.
• Translate intel into detections, hunts, and response actions that measurably reduce risk.
• Build tooling and automation code with AI coding agents, applying sound engineering judgment to review, test, and safely deploy what they produce.
• Contribute to detection-as-code and runbooks, improving coverage, quality, and repeatability over time.
• Partner with peers and internal customers to share knowledge, document your work, and continuously raise the bar for the team.
• Participate in a rotating on-call schedule to support incident response outside of standard business hours.

Required Experience and Education:

• High School diploma + 5 years of relevant experience, OR Bachelor’s degree (BS/BA) + 2 years of relevant experience, OR Master’s degree (MS/MA).
• Experience triaging events with a strong focus on technical accuracy, root cause analysis and timely escalation.
• A solid grasp of how attacks work and common attack vectors, TCP/IP and core networking, and authentication and authorization concepts.
• Some hands-on experience already building automation or tooling with LLMs / AI agents applied thoughtfully and safely.
• Scripting skills (e.g. Python) applied to security operations or other business workflow automation.
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Preferred Experience and Education

• Incident handling certifications such as GCIH or GCFA. 
• Experience with EDR, SIEM, DLP and other security technologies.
• Experience with OpenCode, Claude Code, Amazon Quick and other agentic assistant and coding agents.

Travel Requirements:

• Up to 5% travel

Physical Requirements:

• Sedentary work
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day