Coalfire

Events

• Support end-to-end planning of RAMPCon, including timelines, logistics, and coordination across marketing, sales, and delivery teams
• Assist with vendor coordination, registration management, and attendee communications
• Help build and maintain run-of-show documents and internal trackers to keep everything on schedule
• Update and manage RAMPCon website content (agenda, speakers, event details)
• Ensure accuracy, consistency, and alignment with Coalfire brand standards
• Partner with internal teams to implement updates quickly and efficiently
• Draft and schedule social media content (primarily LinkedIn) to drive event awareness and engagement
• Support email campaign execution, including copy edits and list coordination
• Assist in tracking engagement and performance metrics
• Help manage registration data and campaign lists
• Support reporting on event performance, including registrations and engagement
• Jump in on additional marketing initiatives as needed—this is a team sport

Event Marketing Intern

Cloud Engineer

• Lead Exciting Cloud Projects: Take charge of large-scale cloud engagements, whether starting from scratch (greenfield) or improving existing setups (brownfield).
• Be the Go-To Expert: Provide both subject matter expertise and project management skills, serving as the main point of contact for our engagement teams.
• Ensure Compliance: Design and operate compliance monitoring activities to meet internal security policies and applicable laws.
• Shape Cloud Strategies: Contribute to cloud program management, service delivery models, and strategic planning.
• Create Impactful Reports: Develop and review reports and presentations for both technical and executive audiences.
• Mentor and Grow Talent: Provide mentorship and coaching to help staff enhance their technical and consulting skills.
• Manage Risks and Progress: Keep stakeholders informed about progress and expected outcomes while managing risks effectively.
• Stay Ahead of Trends: Leverage industry knowledge to identify and address engagement and client service issues.
• Collaborate Closely: Work with engagement managers to co-lead and own multiple parts of the engagement delivery.
• Deliver Quality Services: Ensure high-quality work products are delivered within expected timeframes and budgets.
• Engage with Clients: Develop client cloud and security strategies, perform reviews of cloud configurations, and document requirements clearly.
• Design Compliant Solutions: Assist in designing Federal and Defense compliant cloud infrastructure and solutions.
• Advise on Technology Stacks: Provide guidance on AWS, Azure, and GCP platforms.
• Build Relationships: Work with prospective clients to identify opportunities, scope engagements, and build strong relationships.

Senior Consultant, Cloud Services – Core Consulting

Security Engineer

• Assume the role of ISSO for information systems and third-party services identified as High Value Assets (HVA) by the agency;
• Perform technical security impact analysis for all changes to the information system;
• Provide the guidance and oversight necessary to ensure the completeness and accuracy of documentation related to the Primary Responsibility or the Supporting Role assigned to the System Owner, Information Owner or Steward;
• Ensure the implementation and maintenance of security controls in accordance with the Security Plan (SP) and Peace Corps policies and procedures;
• Ensure the assigned FISMA systems maintain their ATO through independent security assessment and authorization;
• Review all deliverables and RMF packages for accuracy;
• Have oversight responsibility to ensure proper access controls have been implemented and managed;
• Ensure audit logs are reviewed at an agreed upon frequency, where the frequency may increase if warranted by incident or situational awareness;
• Be responsible for conducting assessments of controls for their system to ensure the controls have been implemented properly and are still effective where the risk posture is documented in a system risk assessment report;
• Ensure documents provided to auditors are what was requested and approved for release;
• Ensure that new vulnerabilities are evaluated by the respective subject matter expert and corrective action implemented;
• Collaborate with the ISSE in conducting security impact assessments on changes to their respective FISMA systems;

Senior Information System Security Officer – Hybrid

Director

• Manages a team of 6-10 individuals, including consultants and managers. Responsible for career development, performance management, and hiring decisions.
• Develop team expertise in assessment skills, technical acumen, and consulting skills.
• Key member of the account management team, for one or several key client accounts. Jointly responsible, along with the Account Director and sales representatives, for revenue growth as the service delivery expert.
• Supports the sales process with inputs to scoping, contract language, and subject expertise.
• Establish strong relationships with account stakeholders.
• Accountable for project success metrics like staff utilization and delivery excellence. Monitors and drives progress for multiple projects across the team's book of business.
• Through continuous professional development, maintains personal credibility as a FedRAMP expert, and becomes an expert on the client's business and product as it relates to security and compliance.

Director, FedRAMP Assessment

Account Executive

• In addition to hunting new prospects, you will also work with a select grouping of existing DivisionHex customers that represent immediate opportunity to build and grow programmatic offensive and defensive security offerings
• Create and drive business development initiatives that align with our current and future Cybersecurity portfolio service offerings in order to achieve sales bookings quota
• Responsible for creating and executing a quarterly business development plan and process, including coordination of all necessary internal and external resources to identify and secure business opportunities
• Prepare quarterly reviews on business prospects and market conditions to ensure resources are aligned with business goals
• Partner with our pre-sales solution architects for account planning and client engagement
• Build working relationships cross-functionally with project management team, delivery team, and marketing to ensure coordination of efforts and good communication between all parties
• Establish a repeatable process for deal review, approval, and lead deal execution
• Support building market awareness with clients in your territory both internally and externally for our Cybersecurity offerings
• Make an impact to Account Management, including Account planning, Client procurement, Meeting follow-up, Pipeline development, Opportunity pursuit, Contract negotiation, Risk management, Proposal and Statement of Work (SOW) development, and Revenue goals
• Develop strong and lasting relationships with client executives, effectively engage new business and position the account for follow on security engagements
• Develop and maintain contact with top decision makers at key clients; organize and lead pursuit teams; participate and lead aspects of the proposal development process; contribute to the development of proposal pricing strategies
• Lead client-facing management security strategy and planning sessions and formal proposal presentations
• Develop business with new buyers and business units within existing accounts

Consultant

• Lead audits/assessments full cycle including audit plan preparation, review of documentation and evidence, evaluation of procedures, and client interviews.
• Prepare, review and approve assessment reports.
• Manage priorities, tasks and hours on projects in conjunction with the project manager to achieve delivery utilization targets.
• Manage quality throughout the entirety of the engagement, while providing direct coaching and revisions to work products.
• Ensure quality products and services are delivered on time.
• Escalate client and project issues to management in a timely manner to inform and engage the necessary resources to address the issue.
• Provide mentorship to team members in areas of audit, assessment, technical review and writing.
• Interface with clients through entire engagement, interacting will all levels of client organizations. Establish and maintain positive collaborative relationships with clients and stakeholders.
• Continuous professional development in maintaining industry specific certifications. Maintains strong depth of knowledge in the practice area.
• Collaborate with project managers, quality management, sales and other delivery team members to drive customer satisfaction and meet project deliverables.
• Establish account relationships and identifies upsell and cross sell opportunities and escalates to sales.
• Travel 25-50%
• Ability to be successful when working remotely.

Senior Consultant, PCI QSA

Artificial Intelligence

• The Consultant is expected to leverage their technical and business experience with the following areas of responsibility:
• Develop engagement methodologies to enhance our client privacy offerings
• Serve as a Privacy, Risk, and AI Thought Leader on engagements including assessment plan preparation, review of technical plans, documentation and evidence, evaluation of procedures, and client interviews.
• Support and guide information security, privacy, and risk discussions with technical and non-technical groups
• Identify enterprise information security, privacy and compliance related problems and challenges; research and develop technical solutions to rectify them
• Perform information risk, security and related compliance assessments, including testing of related controls
• Review AI Risk and Governance programs and provide recommendations for strengthening AI security
• Develop and operationalize enterprise information security and privacy programs and related components
• Prepare and review advisory or assessment findings and recommendations reports
• Assess cyber-related policy, procedures, legislation, and implementation directives
• Assess and remediate compliance with industry regulations and frameworks across multiple industries that are relevant to cybersecurity (e.g. NIST CSF, NIST Privacy, CIS, CCPA, GDPR)
• Continuous professional development in maintaining industry specific certifications to maintain a strong depth of knowledge in the practice area.

Privacy Risk and AI Consultant

• Manage a defined set of enterprise accounts with the goal of expanding Coalfire’s presence across services and capabilities
• Develop deep relationships with existing clients to understand evolving business needs and identify upsell/cross-sell opportunities
• Achieve a minimum renewal rate of 90% across assigned accounts through proactive engagement and exceptional client service
• Lead outbound prospecting and demand generation efforts to acquire new enterprise clients (net-new logos)
• Qualify and follow up on inbound leads in collaboration with marketing and business development teams
• Build and execute multi-touch sales strategies that leverage personalized messaging, consultative conversations, and high-value engagements
• Develop and maintain strategic account plans, including stakeholder mapping, opportunity prioritization, and pursuit strategies
• Drive the full sales cycle from initial discovery and solution positioning to proposal development, pricing, negotiation, and close
• Collaborate with internal teams (delivery, marketing, legal) to align resources and deliver a seamless buyer journey
• Serve as a trusted advisor to enterprise clients, engaging in high-level cybersecurity and compliance strategy discussions
• Lead client presentations, workshops, and proposal meetings with executive-level stakeholders
• Stay current on industry trends, regulatory changes, and emerging technologies to provide informed recommendations
• Maintain accurate pipeline and forecast data in Salesforce, ensuring visibility into deal progress and revenue projections
• Prepare and present quarterly business reviews and account updates to leadership
• Establish and follow a repeatable process for deal review, lead qualification, and pipeline progression

Account Executive – Compliance Sales

Program Manager

• Develop, maintain, and communicate customer-facing multi‑year security and compliance roadmaps.
• Consult with clients and Advisory leaders to align program objectives with business, security, and compliance priorities.
• Translate strategic objectives into actionable program plans, workstreams, milestones, dependencies, and KPIs.
• Identify opportunities for program expansion and continuous improvement based on evolving client needs.
• Lead recurring program governance meetings (monthly, quarterly, and as required).
• Produce and deliver executive‑level dashboards, program status reports, KPIs, risks, issues, and financial updates.
• Establish and maintain program governance frameworks, communication cadences, escalation protocols, and decision logs.
• Ensure alignment across all active workstreams, Coalfire service lines, and customer stakeholders.
• Oversee multiple concurrent projects and workstreams within the program, ensuring they stay aligned with program goals.
• Partner closely with Project Managers, Engagement Leads, and Advisory SMEs to ensure quality, consistency, and on‑time delivery.
• Coordinate staffing needs across projects by working with Resource Deployment Managers.
• Monitor program health, budget performance, scope alignment, and delivery quality across all workstreams.
• Identify cross‑project risks, resource conflicts, and dependencies; drive mitigation and resolution strategies.
• Facilitate timely escalation to Advisory leadership and client stakeholders when necessary.
• Ensure adherence to Coalfire methodologies and quality standards throughout program execution.
• Serve as the primary point of contact for senior client stakeholders across the entire program.
• Establish, manage, and communicate expectations for all program participants at every level.
• Drive a consistent, high‑quality customer experience across all touchpoints.
• Provide direction and structure to project teams, shaping how workstreams interact and deliver value.
• Promote operational excellence and offer input to enhance program and project management practices.
• Contribute to internal continuous improvement initiatives and best‑practice development for Advisory Services.
• Maintain company‑defined billable utilization targets.

Program Manager – Advisory Services

• Perform security reviews, identify gaps in security architecture, and develop a Security Assessment Plan and Security Assessment Report.
• Utilize the examine, interview, and test methodology to determine if control implementation meets Federal and Agency requirements.
• Plan and conduct security authorization reviews and assurance case development for initial installation of systems and networks.
• Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).
• Provide weekly updates on assessment status.
• Review authorization and assurance documents to confirm that the level of risk is within acceptable limits for each software application, system, and network.
• Verify that application software/network/system security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations.
• Participate in Risk Governance process to provide security risks, mitigations, and input on other technical risks.
• Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.
• Ensure that security design and cybersecurity development activities are properly documented (providing a functional description of security implementation) and updated as necessary.
• Assess the effectiveness of security controls.
• Assess all the configuration management (change configuration/release management) processes.

Security Controls Assessor – Hybrid

• Delivering and leading healthcare‑focused governance, risk, compliance, and resilience advisory services under the guidance of Principal Consultants and Directors.
• Supporting healthcare organizations by conducting assessments, developing documentation, facilitating workshops, and delivering actionable recommendations aligned to healthcare regulatory and cybersecurity requirements.
• Independently executing defined portions of healthcare advisory engagements, applying established methodologies, contributing to high‑quality client deliverables, monitoring project health, and budget while continuing to deepen their healthcare domain expertise.

Senior Consultant, Healthcare Advisory

QA Engineer

• Advises clients on technical security or compliance activities
• Manages priorities and tasks to achieve delivery utilization targets.
• Operates with professionalism both internally and with clients.
• Ensures quality products and services are delivered on time.
• Continues to develop professional skills with relevant industry specific certifications. Maintains strong depth of knowledge in the practice area.
• Collaborates with project managers, quality management, sales, and other delivery team members to drive customer satisfaction and meet project deliverables.
• Develop processes, procedures, and methodologies to enhance testing processes and experience
• Assist with report generation and quality assurance processes
• Develop client relationships
• Assist in the scoping of prospective engagements, leading engagements from initial stages through implementation and remediation
• Manage project escalations of current testing being conducted
• Mentor and develop less experienced staff
• Contribute to the Penetration Testing Team overall success by managing your team to meet various business objectives and metrics

Compliance Security Penetration Tester

DevOps Engineer

• Hands-on engineering work, including developing new deployments, automation scripts, and tooling to meet client deliverables focused on vulnerability management, infrastructure updates, and compliance requirements.
• Develop and maintain Infrastructure-as-Code (IaC), utilizing Coalfire standard modules for Terraform, Ansible, and CI/CD pipelines across projects.
• Partner with Technical Managers and engagement leads to evaluate risks, prioritize issues, and develop actionable mitigation plans across an SRE team’s portfolio of M&O clients.
• Contribute to technical playbooks, standards, and frameworks for operational excellence in managed services delivery.
• Own the patch management strategy for assigned environments, ensuring regulatory compliance and timely remediation of vulnerabilities.
• Oversee Identity and Access Management (IAM), implementing and enforcing security best practices to protect sensitive data and ensure proper access controls.
• Perform cloud administration and system administration tasks, such as provisioning resources, optimizing performance, and troubleshooting infrastructure issues.
• Adhere to established quality standards for engineering deliverables, aligning with internal protocols, compliance regulations, and project deadlines.
• Identify and communicate potential risks, working with relevant stakeholders to incorporate mitigation strategies that meet regulatory and client expectations.
• Contribute to day-to-day agile project management tasks, including tracking progress, providing updates, and ensuring assigned activities are completed on schedule.
• Mentor junior engineers, review their work, and help mature engineering practices.

Senior Site Reliability Engineer

• Lead a variety of GRC framework engagements (such as environment scoping, gap analysis, training workshops, policy and procedure development) for framework compliance.
• Assess the security and compliance of client firms against regulatory and industry requirements and standards, and against security best practice frameworks.
• Provide quality control and peer review to other members of the delivery staff.
• Work closely with Project Managers, Directors and other Delivery team members to effectively manage project timelines and deliverables.
• Design, implement, and automate scalable compliance solutions.
• Lead interviews with client staff, analyze documents, and develop reports for clients.
• Mentor and develop team members to help grow the team and its capabilities.
• Engage outwardly into the community through blog posts, technical white papers, forum participation and conference speaking engagements.

Principal, Enterprise, Global, AI Compliance Advisory

• Maintain SIEM solutions (Splunk, Sentinel, ELK, LogRhythm, Sumo Logic) in cloud environments (AWS, Azure, GCP) to support FedRAMP continuous monitoring requirements
• Maintain and support SIEM platforms (Splunk, Sentinel, ELK, LogRhythm, Sumo Logic) in AWS, Azure, and GCP environments to support continuous monitoring and compliance requirements
• Manage and maintain log collection infrastructure including forwarders, collectors, and ingestion pipelines across hybrid environments
• Support SIEM performance tuning, storage management, retention settings, and licensing optimization under established operational guidelines
• Implement and maintain log retention and audit configurations aligned with FedRAMP and other compliance framework requirements
• Develop, tune, and maintain detection rules, correlation searches, and alerting logic to identify security events
• Create and maintain custom parsers and field extractions for complex or proprietary log sources
• Reduce false positives through ongoing rule tuning, baseline analysis, and detection improvement efforts
• Participate in peer reviews of detection rules and SIEM configuration changes
• Monitor SIEM alerts and investigate security events to support incident response and threat hunting activities
• Contribute to development and maintenance of detection and response playbooks and operational procedures
• Support troubleshooting of SIEM ingestion, parsing, and performance issues
• Work with infrastructure and application teams to onboard new log sources and improve security visibility
• Collect and organize SIEM control evidence and artifacts for audits and 3PAO assessment activities
• Ensure SIEM configurations support required controls such as audit review, log integrity, and time synchronization
• Create and maintain SIEM architecture, detection, and operational documentation and runbooks
• Provide technical support during client reviews and operational meetings as assigned
• Share knowledge and provide guidance to junior team members
• Contribute to process improvement and automation initiatives within SIEM and detection workflows