Solutions Engineer
Confirmed on the employer's own hiring board on Sep 25, 2026. First seen by Alion on Sep 25, 2026.
About GhostEye
Most security programs tell companies whether they appear compliant. GhostEye tells them whether they can withstand a real attack. We're building the always-on red team for modern enterprises. GhostEye emulates the attacks adversaries use today, including help-desk vishing, deepfaked executives, MFA fatigue, and the technical payloads that follow. We identify what is actually exploitable, help customers close the gaps, and retest until the fixes hold.
Our founder previously led red-team work at BlackRock and conducted offensive cyber operations at MITRE.
About the role
You can't sell continuous red team with slides. The demo is an attack, and the proof is what we find. That makes this role different from most solutions engineering jobs: the pilot engagement is both the sales process and real work, and you'll be running it.
This is our first GTM hire and it exists because technical conversations currently stop at the founder. You'll take them over. Discovery calls with security teams, scoping, pilot engagements, findings presentations, and every architecture and data handling question a buyer's engineers throw at you.
You'll work directly with the founder and our security researchers. There's no playbook here yet. You'll write it.
What you'll own
Technical discovery. Getting inside a prospect's environment and constraints well enough to scope an engagement that tests something real. Which controls they think are working, which people are exposed, what they're actually afraid of.
Pilot engagements. Running the first engagement with a new customer, alongside our researchers. Scoping, authorization, execution, and results. This is where deals are won, and it's real security work rather than a canned demo.
Findings presentations. Walking a CISO and their team through what happened, what it means, and what to do about it. Getting in is the easy part. A findings readout that a security team acts on instead of filing is the hard part, and it's what makes them renew.
Security reviews and procurement. Vendor risk assessments, security questionnaires, architecture reviews, and the diligence enterprises run on anyone touching their environment. We're a security company, so the bar for us is higher. Own this end to end.
The technical sales motion. Demo environments, engagement playbooks, technical collateral, and clear positioning against traditional pentest firms and AEV platforms. Build the thing that lets the next person do this without you.
The feedback loop into product. You'll be closer to customers than anyone. What they ask for, what confuses them, and what they won't buy should reach our engineers and researchers quickly and specifically.
What we're looking for
- Real, hands-on security depth. Offensive or defensive. You've done the work, not just sold it, and you can hold a technical conversation with a skeptical security engineer.
- You're good in front of customers. You can present to a CISO and debate architecture with their staff engineer in the same hour.
- You can run an engagement, not just demo software. Comfortable with scoping, authorization boundaries, and being responsible for what happens in someone else's environment.
- You write well. Findings reports and remediation guidance are the deliverable, and a report nobody acts on is a failed engagement.
- Excellent ethics and judgment on authorization, customer safety, and responsible disclosure. You'll say no to customers sometimes, and we'll back you.
- You've worked somewhere without a playbook and built one.
Nice to have
- Solutions engineering or sales engineering at a security vendor
- Consulting or pentest firm background, where you delivered and faced clients at the same time
- OSCP, OSEP, CRTO, GPEN, or similar
- Fluency with MITRE ATT&CK and how security teams frame coverage
- Experience owning security questionnaires, SOC 2, or vendor risk on the answering side
- Social engineering or human-layer security work
- Having sold or delivered against traditional pentest firms and AEV platforms, and knowing where each actually wins
What success looks like in 90 days
- Running technical discovery independently, with the founder out of the room
- Owning pilot engagements end to end alongside our researchers
- Security questionnaire and vendor review process documented and off the founder's desk
- Demo environment and engagement playbook built and in use
- A structured channel from customer conversations into our product and research roadmap