Teams at GuidePoint Security

Leads complex digital forensics and incident response engagements, including ransomware, APT, nation-state, insider threat, host and network forensics, malware triage, cloud investigations, and threat attribution. Provides technical oversight, client leadership, methodology development, mentorship, tooling improvements, pre-sales support, and external thought leadership. Participates in on-call coverage and supports high-severity incident surges.

Leads end-to-end Cisco Duo MFA and access management engagements, including architecture, deployment, integrations, migrations, automation, device trust, security reviews, documentation, and client handoff. Supports Okta and Ping Identity projects, contributes to presales activities, owns technical delivery, mentors junior engineers, and manages client communication. The role integrates identity platforms with VPNs, cloud services, applications, directories, endpoint management tools, and enterprise infrastructure.

Designs and builds security orchestration and automation workflows for SOC processes, including alert triage, incident response, case management, integrations, scripting, error handling, and secure execution. The role translates client requirements into automation build plans, integrates SIEM, EDR/XDR, ticketing, threat intelligence, and email security tools, and may apply AI, cloud security, detection engineering, and automation-as-code practices.