Coalfire

Consultant

• Lead audits/assessments including audit plan preparation, review of documentation and evidence, evaluation of procedures, and client interviews
• Maintain strong depth of knowledge in one or more cybersecurity frameworks
• Prepare, review and approve assessment reports
• Manage priorities, tasks and hours on projects with project manager to achieve utilization targets
• Ensure quality products and services are delivered on time
• Escalate client and project issues to management in a timely manner
• Provide mentorship to team members in audit, assessment, technical review and writing
• Interface with clients through entire engagement, interacting with all levels of client organizations
• Establish and maintain positive collaborative relationships with clients and stakeholders
• Continuous professional development and maintain industry certifications
• Collaborate with project managers, quality management, sales and other delivery team members
• Establish account relationships and identify upsell and cross sell opportunities
• Draft audit programs addressing regulatory objectives and client complexity
• Lead interview and inquiry walkthroughs with clients to determine conformity
• Assess security vulnerabilities against appropriate security frameworks
• Pursue and corroborate conclusions derived from inquiry procedures with client
• Offline and remote evidence inspection of client provided documentation
• Educate and interpret compliance activities for clients
• Apply quality standards and adhere to quality assurance benchmarks
• Provide advice to customers on issues affecting scope of work
• Develop documentation and author recommendations to improve customer security posture
• Up to 20% Travel

Senior Consultant, SOC 2 Assessment

Full-stack Engineer

• Design, code, and maintain APIs, services, and user-facing components
• Implement and maintain CI/CD pipelines, deployment processes, and automation tools
• Build and optimize microservices running on AWS and Kubernetes
• Collaborate with architects, product managers, and AI engineers to translate requirements into technical solutions
• Ensure system reliability, performance, and security through robust engineering practices
• Troubleshoot, debug, and resolve complex technical issues in production systems
• Contribute to technical documentation, coding standards, and best practices
• Participate in code reviews and mentor junior developers when needed

Senior Engineer, AI Systems & Automation

Software Engineer

• Design, develop, and maintain scalable full stack applications using Python (and TypeScript where applicable) to support security and compliance agent workflows.
• Build and optimize RESTful APIs to enable seamless data exchange across services and systems.
• Architect and manage microservice-based solutions on AWS, leveraging Kubernetes for orchestration and scalability.
• Implement DevOps best practices including CI/CD pipelines, infrastructure-as-code, and automated deployment strategies.
• Develop automation frameworks and tools to reduce manual tasks, improve efficiency, and support AI-driven workflows.
• Collaborate with data engineering teams to integrate microservices with analytics platforms and big data pipelines.
• Ensure compliance with security standards, governance policies, and cloud best practices.
• Monitor, troubleshoot, and optimize system performance, ensuring high availability and reliability of deployed applications.
• Provide technical mentorship and contribute to setting best practices for development, DevOps, and cloud engineering.

Principal Architect, AI Systems & Engineering

Artificial Intelligence

• Advance the organization’s capabilities in Generative AI (GenAI) and Agentic AI systems
• Drive innovation, research, and architecture for large-scale AI automation
• Lead the design, architecture, and deployment of GenAI and Agentic AI systems to deliver scalable automation solutions
• Drive applied research in emerging AI techniques, including multi-agent orchestration, context engineering, and adaptive automation
• Collaborate with cross-functional teams (engineering, product, security, compliance) to translate business requirements into technical AI solutions
• Establish standards, frameworks, and best practices for AI system design, security, governance, and lifecycle management
• Mentor senior engineers and architects to strengthen organizational expertise in advanced AI
• Publish thought leadership, represent the organization in industry forums, and engage with external partners/vendors to influence AI strategy
• Evaluate and implement tools, frameworks, and platforms that accelerate AI adoption and reduce technical debt
• Track industry trends and provide insights on AI risks, ethics, and regulatory implications

Technology Fellow – AI Systems & Automation, GenAI & Agentic AI

Cloud Engineer

• Coalfire is a cybersecurity consulting firm advising, assessing, automating, and helping companies navigate cybersecurity. Remote Cloud Infrastructure Administrator supporting Cloud Managed Services, operating public cloud services (AWS, Azure, GCP), maintaining secure, resilient cloud infrastructure, executing runbooks, systems administration, configuring cloud tools, monitoring with Splunk/Elastic, collecting compliance artifacts, coordinating with clients and engineering teams.

Cloud Infrastructure Administrator

• Support Managed Services team as Cloud Infrastructure Administrator within Coalfire's Cloud Managed Services group
• Operate and troubleshoot major public clouds (AWS, Azure, GCP) and native services
• Coordinate with client product teams and stakeholders to monitor and maintain secure, resilient cloud infrastructure to SLAs
• Execute standard operating procedures, runbooks, and troubleshooting guidelines across toolsets and client environments
• Perform systems administration duties including user/access provisioning, patching, compliance controls enforcement, software/tooling updates, and operational troubleshooting
• Configure and tune cloud-based tools, manage cost, security, and compliance
• Respond to alerts and review dashboards using analytics tools such as Splunk and Elastic Stack

Cloud Infrastructure Administrator II

Compliance

• The Director manages a team of consultants and/or senior managers, manages client escalations, provides business strategy to our clients, and scopes engagements.
• This role will have a strong understanding of framework requirements, oversee advisory consulting engagements, and review and provide feedback on reports for clients.
• They will work closely with Project Managers, Senior Managers, Managing Principals and other Delivery team members to effectively manage project timelines and deliverables.
• They’ll work directly with the Senior Manager, Senior Director and/or Managing Principal to implement strategic plans to grow the service line and enhance the overall team’s capabilities and skillsets.
• They will also have a strong acumen of the practice driving to achieve or exceed their revenue target.

Director, GRC Global Advisory

• Assess security and compliance of client firms against regulatory and industry requirements and standards
• Perform audits/assessments and develop reports for clients
• Provide quality control and peer review to delivery staff
• Work closely with Project Managers, Directors and Delivery team to manage project timelines and deliverables
• Audit information systems and test technical controls, policies, procedures, laws, regulations, and best practices
• Draft audit programs and lead client interviews and walkthroughs
• Assess security vulnerabilities and inspect evidence documentation
• Prepare and review assessment reports and educate clients on compliance activities
• Manage priorities to achieve delivery utilization targets
• Maintain professional certifications and continuous development
• Travel 25-50% and ability to be successful when working remotely.

PCI QSA Consultant

About Coalfire
Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.
But that’s not who we are – that’s just what we do.
We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.
Position Summary
This is a great opportunity to grow your career and lead enterprise engagements as a Senior Consultant! In this position you will assess the security and compliance of client firms against regulatory and industry requirements and standards, and against security best practice frameworks. You will have a strong understanding of framework requirements, perform audit/assessments, and develop reports for clients. You will also provide quality control and peer review to other members of the delivery staff. This role works closely with Project Managers, Directors and other Delivery team members to effectively manage project timelines and deliverables.
As a Senior Consultant, you will regularly interact with peers and clients as both an auditor and assessor, depending on the engagement. This role will audit information systems with confidence and accuracy to ensure the integrity and effectiveness of security measures. You will test technical controls, policies and procedures, laws, regulations, and industry best practices.

Senior Consultant, PCI QSA

Security Engineer

• Maintain detailed knowledge and expertise required to manage the security aspects of assigned information systems.
• Ensure that the appropriate operational cybersecurity posture is maintained for confidentiality, integrity, and availability of information systems.
• For each system assigned to an ISSO, the ISSO will be responsible to complete and keep updated security documentations, such as SIA, SSP, POA&M, Configuration Management Plan, Vulnerability Reports, etc.
• Participate in planning and management of all phases of the RMF Security Assessment and Authorization (SAA) process.
• Advise system owners on all matters, technical and otherwise, involving the security of assigned IT systems.
• In coordination with SO team, develop standard operating procedures in accordance with security control requirements.
• Perform continuous monitoring of implemented security controls to ensure that they are implemented correctly, operating as intended and producing the desired outcome with respect to meeting the cybersecurity requirements for assigned IT systems.
• Conduct continuous monitoring activities, to include: Maintenance of current ATO; Conducting periodic system self-assessments; Conducting periodic scans; Conducting log reviews; Ensuring proper sanitization of media prior to disposal.
• Work with technical teams to mitigate security control deficiencies and scan vulnerabilities for assigned IT systems.
• Assess the cybersecurity impact of changes to assigned IT systems and document findings in a security impact analysis (SIA) report.
• Conduct self-assessments of security controls, identify weaknesses and track remediation activities in POA&M.
• Manage the plan of action and milestone (POA&M) process for designated IT systems to provide timely detection, identification and alerting of non-compliance issues.
• In coordination with System Owner staff, create POA&Ms or remediation plans for vulnerabilities identified during risk assessments, audits, inspections, etc.
• Provide the required system access, information, and documentation to security assessment and audit teams.
• Participate in security assessments and audits for assigned systems and facilitate evidence and/or data collection for data requests related to assigned systems.
• Complete required A&A activities on assigned IT systems.
• Brief senior management and ISSM on the security status of assigned authorization boundaries.
• Perform other duties as assigned.

Information System Security Officer, ISSO, Hybrid

Technical Writer

• Provide quality control (QC) reviews of customer-facing and internal documents with specific focus on consistency, clarity, and conciseness for at least two verticals
• Ensure that deliverable content follows standard templates, conforms to Coalfire brand guidelines, and is in accordance with Coalfire policies, processes, and guidance
• Enforce consistent use of templates
• Complete QC checks for each client-facing document reviewed
• Identify and log risks and issues for analysis
• Properly store records of work and revisions, including the reviewed document, checklist, and template.

Technical Editor

Controller

• About Coalfire is a cybersecurity company headquartered in Chicago, Illinois with offices across the U.S. and U.K.; we support clients around the world.
• We are seeking a seasoned Corporate Controller with 15+ years of progressive leadership to lead our accounting and financial operations, partner cross-functionally, and scale a leading cybersecurity consulting business.
• The ideal candidate brings true leadership experience managing a large team and working with peers across the business to collaborate and problem solve, deep technical accounting expertise (ASC 606, 718, 409A, goodwill impairment) and experience enhancing enterprise-wide systems to enable growth and operational excellence.
• This is a hybrid remote and in-office position located in the River North area of Chicago, IL.