Coalfire

Assessor

• support assessing whether members of the DIB have adequately prepared for compliance with CMMC regulations
• evaluate an organization’s readiness for assessment
• collect and examine evidence
• observe, test and analyze results clearly and effectively
• score OSC practices and validate preliminary results
• generate preliminary report findings
• finalize findings for an assessment report and deliver recommended assessment results

CCA Assessor – CMMC Services

Account Executive

• Develop and drive business development initiatives that align with our current and future cybersecurity portfolio service offerings
• Responsible for creating and executing a quarterly business development plan and process, including coordination of all necessary internal and external resources to identify and secure business opportunities
• Prepare quarterly review on business prospects and market conditions to ensure revenue and resources are aligned with business goals
• Build working relationships cross-functionally with project management team, delivery team, and marketing to ensure coordination of efforts and good communication with all parties
• Establish a repeatable process for deal review, approval, and deal execution
• Support building market awareness internally and externally for our Cybersecurity portfolio service offerings
• Make an impact to Account Management, including account planning, client procurement, meeting follow-up, pipeline development, opportunity pursuit, contract negotiation, risk management, proposal and Statement of Work (SOW) development, and revenue goals
• Engage with clients in strategic discussions to provide best in class Cybersecurity / IT Strategy and industry guidance to maximize client’s long-term business objectives.
• Develop strong and lasting relationships with client executives, effectively engage new business and position the account for follow on security and risk advisory engagements.
• Develop and maintain contact with top decision makers at key clients; organize and lead pursuit teams; participate and lead aspects of the proposal development process; contribute to the development of proposal pricing strategies.
• Lead client-facing management Security Strategy and Planning sessions and formal proposal presentations.
• Maintain customer strategy and direction while collaborating with internal teams, leveraging sales tools such as Salesforce.
• Contribute to problem-solving sessions with the project team, consulting team, and client representatives on a regular basis.
• Develop business with new buyers and business units within existing accounts.
• Marketing Qualified Lead management from origination of lead through lead qualification to lead conversion to new opportunity

Account Executive – AI, Cloud, Compliance Advisory

• Work with team members in assessing whether members of the DIB have adequately prepared for compliance with CMMC regulations
• Participate in the team that will evaluate an organization’s readiness for assessment, which include the support and capability for tasks such as: collect and examine evidence, observe, test and analyze results, clearly and effectively score OSC practices, validate preliminary results, generate preliminary report findings, finalize findings for an assessment report and deliver recommended assessment results
• Ability to work independently and as a part of a team
• Professional and polished interpersonal and communication skills with team members and stakeholders

CMMC Certified Assessor, CCP

Manager

• Support the lifecycle management of cybersecurity and compliance offerings, including ideation, design, refresh, packaging, launch, enablement, sustainment, and retirement activities.
• Partner with offering leadership, practice leaders, and solution stakeholders to standardize services into repeatable components, tiers, variations, and SKU-ready structures that improve scalability and consistency.
• Own day-to-day coordination of offering initiatives, including intake tracking, status reporting, meeting preparation, follow-up actions, and documentation of decisions across offering governance forums and portfolio workstreams.
• Create and maintain go-to-market sales collateral, including proposal materials, datasheets, whitepapers, standard presentations, catalogs, and other enablement content that clearly articulates Coalfire's value to clients and the field.
• Perform competitive analysis and pricing support for Coalfire offerings to inform packaging, list pricing, margin targets, and growth strategies for enterprise-level clients.
• Support pre-sales activities, including client meetings, solutioning discussions, and cross-functional RFP responses, ensuring offerings are positioned clearly and scoped consistently.
• Stay current with emerging security threats, industry trends, and client demand patterns, and proactively recommend updates to offerings, messaging, and portfolio priorities.
• Partner with senior leadership and cross-functional teams to improve scoping, quoting, and contracting workflows, including cost case optimization, standard scope definitions, and SOW content inputs.
• Support the development of new threat-focused services, including initial research, offering design, pricing inputs, staffing assumptions, collateral development, partner coordination, and internal enablement.

Senior Offering Manager

Revenue Operations

• Own the MQL to opportunity handoff process — ensuring leads are routed correctly, followed up on promptly, and that no lead goes unactioned.
• Partner with marketing to define and maintain lead quality standards, MQL definitions, and conversion benchmarks; hold both sides accountable to agreed service levels.
• Monitor pipeline generation against targets on a weekly basis; identify gaps and hold teams accountable to commitments.
• Serve as the primary point of escalation when pipeline generation is at risk — proactively surfacing issues to Sales Leadership before they become forecast problems.
• Partner with the Director, Forecasting & Revenue Analytics to ensure top-of-funnel metrics connect to pipeline and bookings forecasts.
• Coordinate across marketing, offering management, and delivery to ensure the field has the tools and content needed to execute — including pricing, bid sheets, scoping tables, proposal templates, and value messaging.
• Own the relationship with Coalfire’s outsourced SDR vendor — including performance management, target setting, activity alignment, and contract oversight.
• Own and maintain Coalfire’s master GTM calendar — coordinating activity across marketing campaigns, events, offering launches, partner programs, SDR plays, AE activity, and training.
• Travel as required by leadership — generally less than 20%

Principal, Revenue Operations – GTM Execution

Security Engineer

• Assess the security posture and maturity of OT environments for clients across manufacturing, energy, utilities, and other critical infrastructure sectors
• Conduct stakeholder interviews, review OT documentation, evaluate security practices against industry frameworks, and develop maturity assessment reports with remediation recommendations
• Present findings and strategic guidance to clients while working with Project Managers, Directors, and Delivery teams to manage project scope and timelines

Operational Technology Security Consultant

Consultant

• Conduct hands-on compliance audits and testing of digital platforms for adherence to global regulations such as GDPR, CCPA, COPPA, DSA, DMA, UK OSA, and SC AADC
• Design and execute independent audit methodologies and testing protocols to assess user protection mechanisms, content moderation systems, and data handling practices
• Test privacy-by-design mechanisms, such as data collection, processing, retention, and deletion mechanisms to verify compliance with user consent and data minimization requirements
• Audit child safety protections and age verification mechanisms for COPPA compliance and child exploitation prevention measures
• Test content moderation systems and harmful content detection capabilities for effectiveness and fairness across user communities
• Audit algorithmic decision-making systems for discriminatory outcomes and test transparency and explainability in automated systems
• Present assessment findings, risk analysis, and strategic recommendations to clients and their leadership through executive briefings and detailed reports
• Support other security and privacy consulting engagements when necessary to maintain team capacity

Digital Privacy, Trust & Safety Consultant

Social Media Manager

• Own and manage Coalfire’s social media content calendar and publishing cadence across corporate priority channels.
• Create original content across formats, including social posts, campaign copy, short videos, motion snippets, executive content, event recaps, customer story highlights, webinar promos, and other digital brand assets.
• Write compelling, audience-first copy that turns complex cybersecurity, compliance, and AI topics into clear, engaging stories for executive and practitioner audiences.
• Capture and shape content ideas into strong narratives, hooks, and story arcs that help Coalfire stand out in-market and make technical subject matter more accessible and memorable.
• Edit video content for social and campaign use, including clipping webinars, interviews, event footage, demos, and thought leadership moments into polished, channel-ready assets.
• Develop or adapt visual assets such as social graphics, quote cards, carousels, simple motion graphics, thumbnails, and branded promotional materials in partnership with design or through light hands-on production.
• Partner with marketing leaders, designers, campaign owners, executives, and subject matter experts to develop channel-ready content and creative assets aligned to launches, campaigns, events, webinars, case studies, and research.
• Repurpose long-form content into high-performing multi-channel assets, extending the value of reports, blogs, webinars, presentations, podcasts, video, and event content.
• Manage day-to-day publishing, scheduling, and platform operations using social management tools such as Sprout Social or similar workflows already in use at Coalfire.
• Support and help scale Coalfire’s employee advocacy efforts by activating internal voices, shaping suggested messaging, and encouraging broader participation across the business.
• Monitor channel and content performance and produce clear, actionable reporting on engagement, audience growth, content performance, and social impact on website traffic, form fills, qualified leads, and broader business outcomes.
• Manage and engage in Coalfire’s internal social workflows, including coordination in the social Slack channel and collaboration with cross-functional stakeholders.
• Stay current on platform changes, content trends, storytelling formats, and creative best practices, then translate those insights into smarter recommendations for Coalfire’s brand and audience strategy.
• Protect brand integrity by ensuring all external communications align with Coalfire brand guidelines, social media guidance, and confidentiality expectations.

Social Media Manager – Content Creator

• Working independently and collaboratively with a team to both lead and support
• Perform penetration testing on applications with complex technology stacks from both a:
• Blackbox perspective
• Whitebox perspective
• Dynamically flex your skills when assessing emerging or custom technologies.
• Contextualize vulnerabilities and assess realistic impact to a client accounting for mitigating and aggravating factors.
• Manage priorities and tasks to achieve utilization targets.
• Operate with professionalism both internally and with clients.
• Ensure quality reports and services are delivered efficiently and on time.
• Maintains strong depth of knowledge in the practice area.
• Collaborate with project managers, quality management, sales and other delivery team members to drive customer satisfaction and meet project deliverables.

Senior Consultant, Mobile Application Security

• Working independently and collaboratively with a team to both lead and support
• Perform penetration testing on applications with complex technology stacks from both a blackbox and whitebox perspective.
• Dynamically flex your skills when assessing emerging or custom technologies.
• Contextualize vulnerabilities and assess realistic impact to a client accounting for mitigating and aggravating factors.
• Manage priorities and tasks to achieve utilization targets.
• Operate with professionalism both internally and with clients.
• Ensure quality reports and services are delivered efficiently and on time.
• Maintains strong depth of knowledge in the practice area.
• Collaborate with project managers, quality management, sales and other delivery team members to drive customer satisfaction and meet project deliverables.

Senior Consultant, AI Application Security

• Maintain SIEM solutions (Splunk, Sentinel, ELK, LogRhythm, Sumo Logic) in cloud environments (AWS, Azure, GCP) to support FedRAMP continuous monitoring requirements
• Maintain and support SIEM platforms (Splunk, Sentinel, ELK, LogRhythm, Sumo Logic) in AWS, Azure, and GCP environments to support continuous monitoring and compliance requirements
• Manage and maintain log collection infrastructure including forwarders, collectors, and ingestion pipelines across hybrid environments
• Support SIEM performance tuning, storage management, retention settings, and licensing optimization under established operational guidelines
• Implement and maintain log retention and audit configurations aligned with FedRAMP and other compliance framework requirements
• Develop, tune, and maintain detection rules, correlation searches, and alerting logic to identify security events
• Create and maintain custom parsers and field extractions for complex or proprietary log sources
• Reduce false positives through ongoing rule tuning, baseline analysis, and detection improvement efforts
• Participate in peer reviews of detection rules and SIEM configuration changes
• Monitor SIEM alerts and investigate security events to support incident response and threat hunting activities
• Contribute to development and maintenance of detection and response playbooks and operational procedures
• Support troubleshooting of SIEM ingestion, parsing, and performance issues
• Work with infrastructure and application teams to onboard new log sources and improve security visibility
• Collect and organize SIEM control evidence and artifacts for audits and 3PAO assessment activities
• Ensure SIEM configurations support required controls such as audit review, log integrity, and time synchronization
• Create and maintain SIEM architecture, detection, and operational documentation and runbooks
• Provide technical support during client reviews and operational meetings as assigned
• Share knowledge and provide guidance to junior team members
• Contribute to process improvement and automation initiatives within SIEM and detection workflows

Security Engineer, Splunk

• Provides advice to customers on issues affecting the scope of work in a manner that provides additional value
• Develop documentation and author recommendations associate with your findings on how to improve the customer’s security posture in accordance with appropriate controls
• Leads audits/assessments including audit plan preparation, review of documentation and evidence, evaluation of procedures, and client interviews.
• Maintains strong depth of knowledge in one or more cybersecurity frameworks.
• Prepare, review and approve assessment reports.
• Manage priorities, tasks and hours on projects in conjunction with the project manager to achieve delivery utilization targets.
• Ensures quality products and services are delivered on time.
• Escalates client and project issues to management in a timely manner to inform and engage the necessary resources to address the issue
• Provide mentorship to team members in areas of audit, assessment, technical review and writing.
• Interfaces with clients through entire engagement, interacting with all levels of client organizations
• Establish and maintain positive collaborative relationships with clients and stakeholders
• Continuous professional development in maintaining industry specific certifications. Maintains strong depth of knowledge in the practice area.
• Collaborates with project managers, quality management, sales and other delivery team members to drive customer satisfaction and meet project deliverables.
• Establishes account relationships and identifies upsell and cross sell opportunities and escalates to sales.
• Draft audit programs that sufficiently address both the required objectives of the regulatory body and the complexity of the client environment
• Leads interview and inquiry walkthroughs with clients to determine the conformity of environments against stated requirements
• Assess security vulnerabilities against the appropriate security frameworks
• Pursues and corroborates conclusions derived from inquiry procedures with client while ensuring diligent interview notes are captured
• Offline and remote evidence inspection of client provided documentation; appropriately mark artifacts requiring follow-up or additional clarification
• Educate and interpret compliance activities for clients
• Understands how to apply quality standards and adheres to a minimum benchmark for quality assurance throughout the documentation of each work product or deliverable
• Remote work environment
• Travel 20%

Senior Consultant – FedRAMP Assessment

Security Analyst

• Manage Plan of Action & Milestones (POA&Ms) lifecycle including creation, tracking, risk adjustment justification, and deviation requests in coordination with 3PAO assessors and federal stakeholders
• Collect, organize, and maintain security control evidence and artifacts for monthly continuous monitoring deliverables and assessment/authorization activities, ensuring alignment with FedRAMP, HITRUST, PCI, and similar frameworks
• Maintain accurate system inventory and authorization boundary documentation to ensure scanning scope aligns with approved system boundaries
• Analyze scan results for false positives, document justifications, and prepare deviation requests with supporting risk assessments
• Translate technical vulnerability findings into risk-based language for federal clients and authorization officials, presenting monthly status briefings as needed
• Collaborate with development, SRE, and infrastructure teams to integrate vulnerability management into CI/CD pipelines, cloud environments (AWS, Azure, GCP), and container/Kubernetes platforms
• Participate in change management processes to ensure continuous monitoring activities align with system changes and maintain compliance posture
• Support and maintain enterprise vulnerability management tools (such as Tenable, Nessus, Burp, Qualys, Rapid7, Wiz, Prisma, Microsoft Defender), ensuring timely updates and patches
• Run regular and on-demand scans across operating systems, databases, web applications, and containers, then work with technical teams to create tickets for remediation
• Track and document vendor dependencies, operational requirements, and open vulnerabilities, producing clear monthly reports and updates for clients
• Contribute to improving internal standards and processes, including maintaining documentation, training materials, and standard operating procedures

Vulnerability Analyst

• Lead audits/assessments including audit plan preparation, review of documentation and evidence, evaluation of procedures, and client interviews with a primary focus on SOC 2 followed by SOC 1 and C5 audits.
• Maintain strong depth of knowledge in one or more cybersecurity frameworks.
• Prepare, review, and approve assessment reports.
• Manage priorities, tasks, and hours on projects in conjunction with the project manager and delivery team members to achieve delivery utilization targets.
• Ensure quality products and services are delivered on time.
• Escalate client and project issues to management in a timely manner to inform and engage the necessary resources to address the issue.
• Provide mentorship to team members in areas of audit, assessment, technical review and writing.
• Interface with clients through entire engagement, interacting with all levels of client organizations.
• Establish and maintain positive collaborative relationships with clients and stakeholders.
• Continuous professional development in maintaining industry specific certifications. Maintains strong depth of knowledge in the practice area.
• Collaborate with project managers, quality management, sales and other delivery team members to drive customer satisfaction and meet project deliverables.
• Establish account relationships and identifies upsell and cross sell opportunities and escalates to sales.
• Draft audit programs that sufficiently address both the required objectives of the regulatory body and the complexity of the client environment.
• Lead interview and inquiry walkthroughs with clients to determine the conformity of environments against stated requirements.
• Communicate effectively with internal team members and external clients regarding assessment status.
• Assess security vulnerabilities against the appropriate security frameworks.
• Pursue and corroborate conclusions derived from inquiry procedures with client while ensuring diligent interview notes are captured.
• Offline and remote evidence inspection of client provided documentation; appropriately mark artifacts requiring follow-up or additional clarification.
• Educate and interpret compliance activities for clients.
• Understand how to apply quality standards and adhere to a minimum benchmark for quality assurance throughout the documentation of each work product or deliverable.
• Provide advice to customers on issues affecting the scope of work in a manner that provides additional value.
• Develop documentation and author recommendations associate with findings on how to improve the customer’s security posture in accordance with appropriate controls.
• Up to 20% Travel

Senior Consultant, SOC 2 Assessment

• Work collaboratively with a team of assessors as a federal compliance specialist
• Draft audit observations
• Autonomously lead interview and inquiry walkthroughs with clients
• Assess security vulnerabilities
• Review assessment reports
• Educate and interpret compliance activities for clients
• Ensure quality products and services are delivered on time
• Maintain industry-specific certifications