Coalfire

DevOps Engineer

• Hands-on engineering work, including developing new deployments, automation scripts, and tooling to meet client deliverables focused on vulnerability management, infrastructure updates, and compliance requirements.
• Develop and maintain Infrastructure-as-Code (IaC), utilizing Coalfire standard modules for Terraform, Ansible, and CI/CD pipelines across projects.
• Partner with Technical Managers and engagement leads to evaluate risks, prioritize issues, and develop actionable mitigation plans across an SRE team’s portfolio of M&O clients.
• Contribute to technical playbooks, standards, and frameworks for operational excellence in managed services delivery.
• Own the patch management strategy for assigned environments, ensuring regulatory compliance and timely remediation of vulnerabilities.
• Oversee Identity and Access Management (IAM), implementing and enforcing security best practices to protect sensitive data and ensure proper access controls.
• Perform cloud administration and system administration tasks, such as provisioning resources, optimizing performance, and troubleshooting infrastructure issues.
• Adhere to established quality standards for engineering deliverables, aligning with internal protocols, compliance regulations, and project deadlines.
• Identify and communicate potential risks, working with relevant stakeholders to incorporate mitigation strategies that meet regulatory and client expectations.
• Contribute to day-to-day agile project management tasks, including tracking progress, providing updates, and ensuring assigned activities are completed on schedule.
• Mentor junior engineers, review their work, and help mature engineering practices.

Senior Site Reliability Engineer

Artificial Intelligence

• Lead a variety of GRC framework engagements (such as environment scoping, gap analysis, training workshops, policy and procedure development) for framework compliance.
• Assess the security and compliance of client firms against regulatory and industry requirements and standards, and against security best practice frameworks.
• Provide quality control and peer review to other members of the delivery staff.
• Work closely with Project Managers, Directors and other Delivery team members to effectively manage project timelines and deliverables.
• Design, implement, and automate scalable compliance solutions.
• Lead interviews with client staff, analyze documents, and develop reports for clients.
• Mentor and develop team members to help grow the team and its capabilities.
• Engage outwardly into the community through blog posts, technical white papers, forum participation and conference speaking engagements.

Principal, Enterprise, Global, AI Compliance Advisory

Security Engineer

• Maintain SIEM solutions (Splunk, Sentinel, ELK, LogRhythm, Sumo Logic) in cloud environments (AWS, Azure, GCP) to support FedRAMP continuous monitoring requirements
• Maintain and support SIEM platforms (Splunk, Sentinel, ELK, LogRhythm, Sumo Logic) in AWS, Azure, and GCP environments to support continuous monitoring and compliance requirements
• Manage and maintain log collection infrastructure including forwarders, collectors, and ingestion pipelines across hybrid environments
• Support SIEM performance tuning, storage management, retention settings, and licensing optimization under established operational guidelines
• Implement and maintain log retention and audit configurations aligned with FedRAMP and other compliance framework requirements
• Develop, tune, and maintain detection rules, correlation searches, and alerting logic to identify security events
• Create and maintain custom parsers and field extractions for complex or proprietary log sources
• Reduce false positives through ongoing rule tuning, baseline analysis, and detection improvement efforts
• Participate in peer reviews of detection rules and SIEM configuration changes
• Monitor SIEM alerts and investigate security events to support incident response and threat hunting activities
• Contribute to development and maintenance of detection and response playbooks and operational procedures
• Support troubleshooting of SIEM ingestion, parsing, and performance issues
• Work with infrastructure and application teams to onboard new log sources and improve security visibility
• Collect and organize SIEM control evidence and artifacts for audits and 3PAO assessment activities
• Ensure SIEM configurations support required controls such as audit review, log integrity, and time synchronization
• Create and maintain SIEM architecture, detection, and operational documentation and runbooks
• Provide technical support during client reviews and operational meetings as assigned
• Share knowledge and provide guidance to junior team members
• Contribute to process improvement and automation initiatives within SIEM and detection workflows

Security Engineer, SIEM

Security Operations

• Act as the primary technical escalation point for complex operational issues across SIEM and continuous monitoring programs, ensuring quick and effective resolutions.
• Maintain and optimize critical security systems, including SIEM platforms (e.g., Splunk, ELK, SumoLogic, Sentinel), vulnerability management and scanning tools (e.g., Nessus, Qualys, Tenable), and Anti-Virus/EDR solutions (Trend Micro Deep Security Manager, Microsoft Defender, Crowdstrike).
• Oversee continuous monitoring activities for FedRAMP and other compliance programs, including vulnerability scanning, configuration management, security control validation, and compliance artifact generation.
• Monitor and improve the team's use of automation and monitoring tools to drive operational efficiency across both SIEM and vulnerability management workflows.
• Analyze and resolve system performance issues, ensuring compliance with FedRAMP, SOC, HIPAA, and other security/operational standards.
• Participate in incident response, threat hunting, and post-mortem analysis to identify root causes and prevent recurrence.
• Manage a team of engineers across SIEM operations and continuous monitoring (vulnerability management) functions, fostering a high-performing and engaged team culture.
• Mentor and support the professional growth of engineers through training, feedback, and career development planning.
• Assist with hiring, onboarding, and retention to ensure team stability and growth.
• Oversee day-to-day delivery of security services, ensuring operational consistency and high-quality outcomes for both SIEM and continuous monitoring programs.
• Track and optimize key metrics such as incident response times, vulnerability remediation rates, false positive reduction, operational efficiency, and compliance posture.
• Develop and refine processes for incident response, vulnerability remediation, continuous monitoring reporting, and compliance documentation.
• Work with cross-functional teams, including consulting teams, SREs, and professional services teams, to improve service delivery and client satisfaction.

Senior Technical Manager, Security Operations

Security Analyst

• Manage Plan of Action & Milestones (POA&Ms) lifecycle including creation, tracking, risk adjustment justification, and deviation requests in coordination with 3PAO assessors and federal stakeholders
• Collect, organize, and maintain security control evidence and artifacts for monthly continuous monitoring deliverables and assessment/authorization activities, ensuring alignment with FedRAMP, HITRUST, PCI, and similar frameworks
• Maintain accurate system inventory and authorization boundary documentation to ensure scanning scope aligns with approved system boundaries
• Analyze scan results for false positives, document justifications, and prepare deviation requests with supporting risk assessments
• Translate technical vulnerability findings into risk-based language for federal clients and authorization officials, presenting monthly status briefings as needed
• Collaborate with development, SRE, and infrastructure teams to integrate vulnerability management into CI/CD pipelines, cloud environments (AWS, Azure, GCP), and container/Kubernetes platforms
• Participate in change management processes to ensure continuous monitoring activities align with system changes and maintain compliance posture
• Support and maintain enterprise vulnerability management tools (such as Tenable, Nessus, Burp, Qualys, Rapid7, Wiz, Prisma, Microsoft Defender), ensuring timely updates and patches
• Run regular and on-demand scans across operating systems, databases, web applications, and containers, then work with technical teams to create tickets for remediation
• Track and document vendor dependencies, operational requirements, and open vulnerabilities, producing clear monthly reports and updates for clients
• Contribute to improving internal standards and processes, including maintaining documentation, training materials, and standard operating procedures

Vulnerability Analyst

Executive Assistant

• Manage complex calendars across multiple time zones for nine executives, ensuring proactive prioritization and alignment with strategic goals.
• Coordinate and schedule internal/external meetings, board-related sessions, customer meetings, candidate interviews, and cross-functional engagements.
• Prepare executives in advance of meetings, including compiling briefings, agendas, presentations, and relevant background materials.
• Handle correspondence on behalf of executives, including drafting communications, triaging requests, and tracking follow‑ups.
• Develop and maintain streamlined workflows across the leadership team to improve efficiency and reduce administrative bottlenecks.
• Plan and execute logistics for all executive travel; including leadership offsites, team meetings, and company-wide events.
• Assist with budget tracking, invoice processing, expense reporting, and purchase orders.
• Maintain organized digital filing systems and shared knowledge repositories.
• Serve as a liaison between executives and key internal/external stakeholders, ensuring clarity, responsiveness, and follow‑through.
• Partner with People, Finance, Legal, Communications, and other teams to support initiatives, timelines, and deliverables.
• Support cross-functional projects by gathering inputs, tracking milestones, and helping executives stay on schedule.
• Handle sensitive information with the highest level of discretion.
• Represent executives with professionalism, polish, and proactive communication - both internally and externally.
• Draft, edit, and proofread executive communications, presentations, and documents.
• Support organizational initiatives as assigned by the CPO, including culture programs, talent-related efforts, and strategic planning cycles.
• Conduct research, compile data, and produce reports or presentations as needed.

Executive Assistant, Multi-Executive Support

• Act as the primary technical escalation point for complex operational issues, ensuring quick and effective resolutions.
• Maintain and optimize critical systems, including SIEM platforms (e.g., Splunk, ELK, SumoLogic, Sentinel), Anti-Virus tools (Trend Micro Deep Security Manager, Microsoft Defender, Crowdstrike) and vulnerability management tools (e.g., Nessus, Qualys, Burp).
• Monitor and improve the team’s use of automation and monitoring tools to drive operational efficiency.
• Analyze and resolve system performance issues, ensuring compliance with security and operational standards.
• Participate in incident response and post-mortem analysis to identify root causes and prevent recurrence.
• Mentor and support the professional growth of engineers through training, feedback, and career development planning.
• Assist with hiring, onboarding, and retention to ensure team stability and growth.
• Oversee day-to-day delivery of security services, ensuring operational consistency and high-quality outcomes.
• Track and optimize key metrics such as incident response times, operational efficiency, and compliance posture.
• Develop and refine processes for incident response, vulnerability remediation, and compliance reporting.
• Work with cross-functional teams, including consulting teams, SREs, and professional services teams, to improve service delivery.

Principal, SecOps

Financial Planning and Analysis

• Lead annual global budgeting, long-range planning, and rolling forecast processes across the company
• Personally build, review, and own complex financial models supporting forecasting, scenario analysis, capacity planning, and investment decisions
• Drive rapid, accurate analysis under tight deadlines in support of executive and Board-level decision-making
• Identify key performance drivers, risks, and opportunities, and clearly communicate implications to leadership
• Manage offshore services financial models, incorporating headcount, utilization, labor costs, and delivery mix to support planning and profitability
• Serve as a trusted finance partner to Sales, Delivery, and Corporate leadership
• Translate complex financial data into actionable insights for non-finance stakeholders
• Support strategic initiatives by providing hands-on analytical support and decision frameworks
• Own sales capacity modeling, productivity analysis, and commissions planning
• Partner with Sales leadership to evaluate headcount plans, quota coverage, and go-to-market effectiveness
• Collaborate closely with the VP of Accounting on the monthly close process to ensure alignment between actuals, forecasts, and management reporting
• Own internal management reporting, dashboards, and KPIs used by executive leadership
• Prepare Board materials, reporting packages, and presentations in partnership with the CFO
• Lead, mentor, and develop a high-performing FP&A team of four, including two direct reports
• Manage multiple priorities while delivering accurate, timely, and decision-ready outputs