Business Analyst, TAS

Responsibilities

This role manages the non-technical operations of the Threat & Attack Simulation practice, including reporting, metrics, and team onboarding. It focuses on process improvement and administrative efficiency to support technical consultants and leadership.

Requirements

Candidates must have at least 3 years of experience in operations or business operations, preferably in a consulting environment. Strong proficiency in data reporting, CRM tools like Salesforce, and excellent organizational skills are required.

Skills

• Business operations
• Data analysis
• Reporting
• Metrics
• Process improvement
• Salesforce
• Certinia
• Project management
• Communication
• Organizational skills
• Dashboarding
• Operational strategy
• Stakeholder management
• Documentation
• Cybersecurity awareness

Benefits

• Group Medical Insurance
• Group Dental Insurance
• Flexible Time Off
• Mobile phone allowance
• Home internet allowance
• Retirement plan
• Pet benefit

About this role

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.
General Description
This role owns the day-to-day, non-technical operations of GuidePoint Security’s Threat & Attack Simulation (TAS) practice — a ~35-person offensive security team within Professional Services. It exists to keep the practice running smoothly so that technical leaders and consultants can stay focused on client delivery rather than administrative overhead.

Reporting to the Practice Director, this role is the practice’s operational backbone — owning reporting and metrics, team onboarding and tooling, the practice’s operating cadence, and continuous process improvement. This is distinct from project management and from the scoping/SOW function: the role does not run engagements or own the quoting process but makes the whole practice run more efficiently around those functions. The ideal candidate is highly organized, process-driven, data-fluent, and comfortable operating alongside a specialized technical team without needing to perform the technical work themselves.
About the Team
Threat & Attack Simulation (TAS) is GuidePoint Security’s offensive security practice, delivering adversary-emulation services such as penetration testing, red teaming, and breach-and-attack simulation (BAS) to help clients find and fix exposures before real attackers do. The team of roughly 35 consultants operates as part of GuidePoint’s Professional Services organization, with delivery and financials tracked in Certinia / Salesforce PSA. As the practice grows, the operational load — reporting, onboarding, tooling, and operating cadence — has outpaced what the technical leadership can absorb alongside client work, which is exactly the gap this role fills.
Roles and Responsibilities:
Reporting & Metrics
Produce reliable recurring metrics — utilization, backlog, pipeline, bookings, and revenue.
Prepare materials for QBRs, leadership updates, and the weekly practice update.
Build and maintain dashboards and reports that give leadership a clear, trustworthy read on practice health.
Pull and synthesize operational data from Salesforce / Certinia into decision-ready summaries for the Practice Director.
Onboarding & Tooling
Run new-hire onboarding and ramp logistics — accounts, access, equipment, and scheduling.
Administer licenses, tooling, and lab resources in coordination with internal IT/security.
Maintain tooling and access records so the team has what it needs to deliver.
Practice Operations & Cadence
Run the practice’s operating rhythm — recurring team meetings, all-hands, and offsite logistics.
Maintain internal documentation and the team knowledge base so information is easy to find.
Track operational budget and spend visibility and support leadership with ad-hoc operational analysis.
Process Improvement
Document and standardize operational processes so the practice scales cleanly.
Identify and remove recurring administrative friction for consultants and leadership.
Partner with PSOS, PMO, sales, and finance to smooth the hand-offs between their functions and the practice — improving the flow, not owning their work.
Required Experience and Education:
3+ years in operations or business operations (consulting or professional-services environment preferred).
Exceptional organizational skills and attention to detail across many concurrent workstreams.
Strong written and verbal communication; comfortable coordinating across technical and business stakeholders.
Strong with metrics, reporting, and spreadsheets/dashboards — able to turn operational data into clear summaries.
Proficiency with CRM / PSA tooling and reporting (Salesforce and/or Certinia a strong plus).
Experience documenting and improving operational processes.
Comfortable operating alongside a specialized technical cybersecurity team (technical delivery experience is not required).
Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.
Preferred Experience and Education
Experience in a professional services, consulting, or agency delivery environment.
Familiarity with cybersecurity engagements — penetration testing, red teaming, or offensive security.
Hands-on experience with Salesforce and/or Certinia PSA (reporting, dashboards, records).
Experience with business-operations or data-reporting tooling (BI dashboards, advanced Excel/Sheets).
Experience supporting a distributed or remote technical team.
Travel Requirements:
Up to 10% travel
Physical Requirements:
Sedentary work
Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day
We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.

Why GuidePoint?

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,300 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and exp...

About GuidePoint Security

IT Services and IT Consulting · 1,001-5,000 employees · headquartered in Reston, Virginia · founded 2011