Solutions Engineer

GhostEye; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

GhostEye is seeking a hands-on GTM security engineer to run pilot engagements and technical discovery with enterprise customers. You’ll own scoping, authorization, execution, and results, and present findings to security teams, working directly with the founder and researchers.

This is our first GTM hire, and you’ll help write the playbook. You’ll turn test results into clear security narratives, feed lessons back to product, and partner with sales to move deals forward.

Qualifications

• Hands-on security depth in offensive or defensive roles.
• Ability to present to a CISO and staff engineers.
• Experience running engagements end to end.
• Strong writing of findings and remediation guidance.
• High ethical standards and judgment on authorization.
• Experience building playbooks without a prior one.

Responsibilities

• Conduct technical discovery in customer environments.
• Lead pilot engagements from scope to results.
• Draft security findings and remediation guidance.
• Run security reviews and vendor risk questionnaires.
• Develop demo environments and engagement playbooks.
• Provide feedback loop to product and research.

Skills

Security domain depth

Customer facing

Engagement leadership

Technical storytelling

Reporting & remediation

Job description

About GhostEye

Most security programs tell companies whether they appear compliant. GhostEye tells them whether they can withstand a real attack. We're building the always-on red team for modern enterprises. GhostEye emulates the attacks adversaries use today, including help-desk vishing, deepfaked executives, MFA fatigue, and the technical payloads that follow. We identify what is actually exploitable, help customers close the gaps, and retest until the fixes hold.

About GhostEye

Most security programs tell companies whether they appear compliant. GhostEye tells them whether they can withstand a real attack. We're building the always-on red team for modern enterprises. GhostEye emulates the attacks adversaries use today, including help-desk vishing, deepfaked executives, MFA fatigue, and the technical payloads that follow. We identify what is actually exploitable, help customers close the gaps, and retest until the fixes hold. Our founder previously led red-team work at BlackRock and conducted offensive cyber operations at MITRE.

About The Role

You can't sell continuous red team with slides. The demo is an attack, and the proof is what we find. That makes this role different from most solutions engineering jobs: the pilot engagement is both the sales process and real work, and you'll be running it. This is our first GTM hire and it exists because technical conversations currently stop at the founder. You'll take them over. Discovery calls with security teams, scoping, pilot engagements, findings presentations, and every architecture and data handling question a buyer's engineers throw at you. You'll work directly with the founder and our security researchers. There's no playbook here yet. You'll write it.

What you'll own

• Technical discovery. Getting inside a prospect's environment and constraints well enough to scope an engagement that tests something real. Which controls they think are working, which people are exposed, what they're actually afraid of.


• Pilot engagements. Running the first engagement with a new customer, alongside our researchers. Scoping, authorization, execution, and results. This is where deals are won, and it's real security work rather than a canned demo.


• Findings presentations. Walking a CISO and their team through what happened, what it means, and what to do about it. Getting in is the easy part. A findings readout that a security team acts on instead of filing is the hard part, and it's what makes them renew.


• Security reviews and procurement. Vendor risk assessments, security questionnaires, architecture reviews, and the diligence enterprises run on anyone touching their environment. We're a security company, so the bar for us is higher. Own this end to end.


• The technical sales motion. Demo environments, engagement playbooks, technical collateral, and clear positioning against traditional pentest firms and AEV platforms. Build the thing that lets the next person do this without you.


• The feedback loop into product. You'll be closer to customers than anyone. What they ask for, what confuses them, and what they won't buy should reach our engineers and researchers quickly and specifically.

What we're looking for

• Real, hands-on security depth. Offensive or defensive. You've done the work, not just sold it, and you can hold a technical conversation with a skeptical security engineer.


• You're good in front of customers. You can present to a CISO and debate architecture with their staff engineer in the same hour.


• You can run an engagement, not just demo software. Comfortable with scoping, authorization boundaries, and being responsible for what happens in someone else's environment.


• You write well. Findings reports and remediation guidance are the deliverable, and a report nobody acts on is a failed engagement.


• Excellent ethics and judgment on authorization, customer safety, and responsible disclosure. You'll say no to customers sometimes, and we'll back you.


• You've worked somewhere without a playbook and built one.

Nice to have

• Solutions engineering or sales engineering at a security vendor


• Consulting or pentest firm background, where you delivered and faced clients at the same time


• OSCP, OSEP, CRTO, GPEN, or similar


• Fluency with MITRE ATT&CK and how security teams frame coverage


• Experience owning security questionnaires, SOC 2, or vendor risk on the answering side


• Social engineering or human-layer security work


• Having sold or delivered against traditional pentest firms and AEV platforms, and knowing where each actually wins

What success looks like in 90 days

• Running technical discovery independently, with the founder out of the room


• Owning pilot engagements end to end alongside our researchers


• Security questionnaire and vendor review process documented and off the founder's desk


• Demo environment and engagement playbook built and in use


• A structured channel from customer conversations into our product and research roadmap