Top 18 Coalfire Jobs | SimplyHired

Vulnerability Analyst
Coalfire —Remote
- $78,000 - $135,000 a year
- Full-time
- Remote
- Azure
- Mid-level
- 3 years
- Paid parental leave
- Parental leave
Consultant, FedRAMP Assessment
Coalfire —Remote
- $64,000 - $112,000 a year
- Full-time
- Remote
- Azure
- HIPAA
- AWS
- Paid parental leave
- Parental leave
CMMC Certified Assessor (CCP)
Coalfire Federal —Remote
- Full-time
- Remote
- 5 years
- Mid-level
- Bachelor's degree
- Paid parental leave
- Parental leave
FedRAMP Cloud Consultant
Coalfire —Remote
- $64,000 - $112,000 a year
- Full-time
- Remote
- Mid-level
- Bachelor's degree
- Travel
- Paid parental leave
- Parental leave
Senior Consultant - FedRAMP Assessment
Coalfire —Remote
- $86,000 - $148,000 a year
- Full-time
- Remote
- Writing skills
- HIPAA
- Analysis skills
- Paid parental leave
- Parental leave
CCA Assessor - CMMC Services
Coalfire Federal —Remote
- Full-time
- Remote
- 5 years
- Bachelor's degree
- Travel
- Paid parental leave
- Parental leave
Operational Technology Security Consultant
Coalfire —Remote
- $105,000 - $148,000 a year
- Full-time
- Remote
- Computer Science
- Engineering
- Mid-level
- Paid parental leave
- Parental leave
10d
Security Engineer (Splunk)
Coalfire —Remote
- $78,000 - $135,000 a year
- Full-time
- Remote
- Azure
- DevOps
- HIPAA
- Paid parental leave
- Parental leave
Senior Consultant, SOC 2 Assessment
Coalfire —Remote
- $86,000 - $148,000 a year
- Full-time
- Remote
- Azure
- Public speaking
- HIPAA
- Paid parental leave
- Parental leave
Social Media Manager / Content Creator
Coalfire —Remote
- $71,000 - $122,689 a year
- Full-time
- Remote
- 5 years
- Mid-level
- Analysis skills
- Paid parental leave
- Parental leave
10d
Digital Privacy, Trust & Safety Consultant
Coalfire —Remote
- $105,000 - $148,000 a year
- Full-time
- Remote
- Computer Science
- Mid-level
- Bachelor's degree
- Paid parental leave
- Parental leave
10d
Senior Consultant, PCI QSA
Coalfire —Remote
- $86,000 - $148,000 a year
- Full-time
- Remote
- Up to 50% travel
- 5 years
- Analysis skills
- Paid parental leave
- Parental leave
10d
Information System Security Engineer (ISSE) - Hybrid
Coalfire Federal —Washington, DC
- Full-time
- Hybrid work
- 5 years
- System design
- Mid-level
- Paid parental leave
- Parental leave
Principal Google Cloud Security Consultant
Coalfire —Remote
- $125,000 - $217,000 a year
- Full-time
- Remote
- DevOps
- HIPAA
- Travel
- Paid parental leave
- Parental leave
Senior Google Cloud Security Consultant
Coalfire —Remote
- $94,000 - $163,000 a year
- Full-time
- Remote
- DevOps
- HIPAA
- Travel
- Paid parental leave
- Parental leave
Account Executive - AI, Cloud and Compliance Advisory
Coalfire —Remote
- $88,000 - $150,000 a year
- Full-time
- Remote
- 6 years
- HIPAA
- Analysis skills
- Paid parental leave
- Parental leave
5d
Principal, Revenue Operations & GTM Execution
Coalfire —Remote
- $104,000 - $179,600 a year
- Full-time
- Remote
- Marketing
- Presentation skills
- Bachelor's degree
- Paid parental leave
- Parental leave
10d
Director, Hyperscaler Strategy & Partnerships
Coalfire —Remote
- $114,000 - $198,000 a year
- Full-time
- Remote
- 3 years
- AWS
- Travel
- Paid parental leave
- Parental leave

More jobs to discover

Find similar jobs that you might be interested in.

Management Consultant
The Berkeley Partnership —New York, NY
Achieved a bachelor’s degree or higher level of education. Regular and inclusive social events. Experience in end-to-end project lifecycle from strategy to…
$175,000 - $250,000 a year
Career Readiness Consultant
WIN Learning —Greenville, SC
Experience in workforce development, career readiness, adult education, career and technical education, or teaching in high schools will provide a strong…
Quick Apply

I want to receive the latest job alert for coalfire

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

coalfire jobs near

Senior Consulting Engineer jobs in Remote

Safety Consultant jobs in Remote

Security Engineer jobs in Remote

Social Media Manager jobs in Remote

Account Executive jobs in Remote

Cloud Consultant jobs in Remote

Senior Security Consultant jobs in Remote

Operations Administrator jobs in Remote

Director Of Partnerships jobs in Remote

Technology Consultant jobs in Remote

Information Systems Security Engineer jobs in Washington, DC

Entry Level Consulting jobs in Phoenix, AZ

Senior Consulting Engineer jobs in Jacksonville, FL

Mechanical Engineer jobs in Minnesota

Senior Consulting Engineer jobs in Orlando, FL

Electrical Engineer jobs in Baltimore, MD

Senior Consulting Engineer jobs in Des Moines, IA

Senior Customer Success Manager jobs in New York, NY

Senior Consulting Engineer jobs in Bellevue, WA

Entry Level Consultant jobs in Atlanta, GA

Vulnerability Analyst

Coalfire -
Remote

Apply Now

Job Details

Full-time
$78,000 - $135,000 a year

Benefits

Paid parental leave
Parental leave

Qualifications

Project reporting
Test scanning software
Operating systems
Automation
Technical documentation
Security risk assessment investigation
Cloud security management
System architecture
Direct client contact
Public Cloud
Security compliance frameworks implementation
Security data analysis
Vulnerability management
Cloud compliance
Management reporting
Security System Administration (security operations)
Reporting on compliance risks
Cross-functional collaboration
Project stakeholder communication
Vuls
Cross-functional communication
IT security monitoring

Full Job Description

About Coalfire

Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.

But that’s not who we are – that’s just what we do.

We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.

What You'll Do

Manage Plan of Action & Milestones (POA&Ms) lifecycle including creation, tracking, risk adjustment justification, and deviation requests in coordination with 3PAO assessors and federal stakeholders
Collect, organize, and maintain security control evidence and artifacts for monthly continuous monitoring deliverables and assessment/authorization activities, ensuring alignment with FedRAMP, HITRUST, PCI, and similar frameworks
Maintain accurate system inventory and authorization boundary documentation to ensure scanning scope aligns with approved system boundaries
Analyze scan results for false positives, document justifications, and prepare deviation requests with supporting risk assessments
Translate technical vulnerability findings into risk-based language for federal clients and authorization officials, presenting monthly status briefings as needed
Collaborate with development, SRE, and infrastructure teams to integrate vulnerability management into CI/CD pipelines, cloud environments (AWS, Azure, GCP), and container/Kubernetes platforms
Participate in change management processes to ensure continuous monitoring activities align with system changes and maintain compliance posture
Support and maintain enterprise vulnerability management tools (such as Tenable, Nessus, Burp, Qualys, Rapid7, Wiz, Prisma, Microsoft Defender), ensuring timely updates and patches
Run regular and on-demand scans across operating systems, databases, web applications, and containers, then work with technical teams to create tickets for remediation
Track and document vendor dependencies, operational requirements, and open vulnerabilities, producing clear monthly reports and updates for clients
Contribute to improving internal standards and processes, including maintaining documentation, training materials, and standard operating procedures

What You'll Bring

3–5 years of professional experience in vulnerability management, compliance monitoring, or related security operations roles
Hands-on expertise with operating system, database, network, container, web application, and API vulnerability management
Direct experience supporting vulnerability management in at least two of the following cloud providers: AWS, Azure, GCP
Background working within at least one compliance framework (for example, FedRAMP, HITRUST, PCI), including risk assessment and reporting
Experience delivering monthly or periodic vulnerability status reports and tracking remediation efforts with internal and external teams
Administrator-level certification in AWS, Azure, or GCP
Working knowledge of cloud architecture and security controls in AWS, Azure, or GCP, including ability to assess attack surfaces and recommend cloud-native remediation approaches
Strong knowledge of vulnerability scanning technologies and methods, including scoring systems (CVSS, CMSS) and risk prioritization frameworks
Understanding of NIST 800-53 security controls, particularly RA-5, SI-2, CM-6, and how continuous monitoring supports control implementation
Experience with STIG benchmarks and automated compliance scanning tools (SCAP, SCC)
Familiarity with baseline configuration standards (CIS Benchmarks, vendor hardening guides) and compliance posture reporting
Ability to distinguish false positives from true vulnerabilities and articulate risk-based justifications for deviation requests
Proficiency in scripting languages (Python, PowerShell, Bash) for task automation, report generation, and remediation workflows
Strong client-facing communication and documentation skills, with ability to present technical findings to federal stakeholders and produce timely compliance reports
Ability to work efficiently with cross-functional technical teams to investigate, prioritize, and coordinate vulnerability remediation efforts
Bachelor’s degree or equivalent work experience.
US citizenship (required due to client contractual requirements)

Bonus Points

Security-focused cloud certifications for AWS, Azure, or GCP
CISSP certification
Familiarity with container security scanning tools (Trivy, Anchore, Snyk) and Kubernetes security postures
Knowledge of software composition analysis (SCA) and static/dynamic application security testing (SAST/DAST) tools
Familiarity with CI/CD security integration patterns and DevSecOps toolchains

The salary range listed is a reasonable estimate of the compensation range for this role based on national salary averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs.

Why You’ll Want to Join Us

At Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.

Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.

At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at [email protected].

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Apply Now

Refine Your Search

coalfire jobs

Vulnerability Analyst

Consultant, FedRAMP Assessment

CMMC Certified Assessor (CCP)

FedRAMP Cloud Consultant

Senior Consultant - FedRAMP Assessment

CCA Assessor - CMMC Services

Operational Technology Security Consultant

Security Engineer (Splunk)

Senior Consultant, SOC 2 Assessment

Social Media Manager / Content Creator

Digital Privacy, Trust & Safety Consultant

Senior Consultant, PCI QSA

Information System Security Engineer (ISSE) - Hybrid

Principal Google Cloud Security Consultant

Senior Google Cloud Security Consultant

Account Executive - AI, Cloud and Compliance Advisory

Principal, Revenue Operations & GTM Execution

Director, Hyperscaler Strategy & Partnerships

More jobs to discover

I want to receive the latest job alert for coalfire

Explore jobs in more locations

What You'll Do

What You'll Bring

Bonus Points

Job Seeker Tools

Employer Tools

Browse

Stay Connected