Coalfire

Auditor

• Lead audits to assess controls, operational efficiencies and compliance with all policies, procedures, and regulations
• Lead all internal audits including audit preparation, documentation review, records and work paper storage, data analysis, report writing, and timely status reporting
• Document and track Corrective and Preventative Action (CAPA), including meetings to test management’s implementation of mitigation controls to resolve CAPAs
• Test the design and operational effectiveness of existing product/practice controls
• Lead ad hoc requests to address control issues on business processes, policies, and procedures, and provide consultative services to management
• Perform interviews and testing as needed to identify and resolve gaps in compliance with internal or external requirements
• Coordinate meetings between internal control owners and external auditors
• Develop creative approaches and solutions necessary to solve complex problems related to audit engagements
• Perform any audits requested by clients working with Coalfire as a supplier
• 100% Remote, with limited travel for team offsite.

Senior Internal Auditor

Artificial Intelligence

• Deliver on the most technically complex application, network, and adversary services engagements.
• Architect and build AI-powered platforms — including agentic systems — that automate reconnaissance, attack path discovery, exploitation, and reporting across the offensive lifecycle.
• Maintain a relentless focus on outputs that move the P&L: tooling that compounds across engagements and improves over time.
• Act as a hands-on senior leader in secure software development, model integration, and the engineering discipline required to build durable internal platforms.
• Act as a trusted advisor to our clients’ senior leadership on security matters, providing insights and recommendations to inform strategic decision-making.
• Collaborate with our sales and marketing teams to drive opportunity identification and rapidly grow the practice.

Senior Principal, AI Testing – Development

QA Engineer

• Join a collaborative and dynamic team of cybersecurity professionals to conduct cutting-edge penetration testing across a wide range of technologies and environments.
• Play a key role in identifying vulnerabilities, simulating real-world cyberattacks, and helping our clients strengthen their security posture.
• Conduct internal and external network penetration testing, application security assessments (browser-based, API, mobile), cloud environment testing, social engineering engagements, and wireless assessments.

Consultant, Penetration Tester

Consultant

• Conduct human threat engagements including social engineering, phishing, vishing, physical assessments, and human risk evaluations.
• Prepare, review, and approve Human Threat reports to meet quality requirements.
• Manage priorities and tasks to achieve delivery utilization targets.
• Advise clients on all testing and assessment activities in a timely and professional manner.
• Ensure client deliverables and services are delivered on time.
• Continuous professional development in maintaining industry specific certifications and staying current on emerging human threat tactics and trends.
• Establish and maintain positive collaborative relationships with clients and stakeholders.
• Identify up-sell and cross-sell opportunities and escalate to sales.
• Collaborate with project managers, quality management, sales, and other delivery team members to drive customer satisfaction and meet project deliverables.
• Mentor junior consultants in social engineering tradecraft, client communications, reporting, and engagement execution.
• Contribute to the development and refinement of Human Threat methodologies, tooling, playbooks, and service offerings.
• Contribute to thought leadership through research, blogs, whitepapers, webinars, and conference presentations on human threat, and related security topics.
• Support the development of the Human Threat practice through original research, service innovation, and externally facing industry content.
• Represent the Coalfire at industry events, client briefings, and conferences as a subject matter expert.
• Contribute to other offensive security engagements, as needed, based on business demand, skillset alignment, and delivery priorities when not assigned to Human Threat assessments.
• Perform other responsibilities as needed in support of client delivery, practice development, and team success.

Senior Internal Auditor

Senior Principal, AI Testing – Development

Consultant, Penetration Tester

Senior Consultant, Human Threats