Coalfire

Coalfire is a cybersecurity advisor that helps organizations avert threats, reduce risk, and turn security into a competitive advantage, fueling their success.

Internet Software & Services

Information Technology

501-1000 (1000)

Founded 2001

$9M raised

4 open positions

Links

View All Jobs

Security Engineer (ConMon)

1 week, 3 days ago

United States

Full-time

Mid Level

Security Engineer

Cybersecurity

Cybersecurity HIPAA JIRA SOC

Apply Now

Coalfire

Coalfire is a cybersecurity advisor that helps organizations avert threats, reduce risk, and turn security into a competitive advantage, fueling their success.

Internet Software & Services

501-1000

Founded 2001

$9M raised

View All Jobs 4

Description

Deliver vulnerability management services for cloud service providers and other highly regulated organizations.
Monitor security vulnerabilities and anomalies, communicate alerts, and recommend remediation strategies to clients.
Assist customers with FedRAMP environment scanning and false-positive management.
Create Plans of Action and Milestones (POAMs) from customer scan data.
Prepare formal technical documentation, reports, and briefings.
Coordinate between vulnerability management, SRE, customer, and internal management teams during remediation and escalations.
Configure and troubleshoot vulnerability scanning devices and tools.
Develop technical solutions to automate repeatable security operations tasks.
Investigate root causes of issues, manage tickets and customer requests, and drive timely resolution.
Provide guidance and thought leadership to clients and team members.

Requirements

U.S. citizenship is required due to client contractual requirements.
2–4 years of experience in professional services, vulnerability management, and compliance monitoring.
Experience supporting clients in a managed services organization.
Experience with vulnerability scanning tools such as Nessus and Burp Suite, including DAST tools.
Skills in web application, API, and network testing.
Ability to analyze vulnerabilities, adjust risk ratings based on internal factors, and collaborate on remediation.
Familiarity with ITSM platforms such as Jira or ServiceNow and working to SLAs.
Knowledge of vulnerability scoring systems, including CVSS/CMSS, and OS baseline configuration standards such as CIS Critical Security Controls.
Experience developing playbooks, runbooks, technical documentation, and troubleshooting technical issues.
Bachelor’s degree or higher in a related IT field, or an equivalent combination of education and experience.
Experience with container scanning tools such as Prisma, Aquasec, or Defender (preferred).
Experience supporting 24x7x365 security operations, relevant security certifications, or familiarity with FedRAMP, FISMA, SOC, ISO, HIPAA, HITRUST, or PCI frameworks (preferred).

Benefits

Flexible work model with remote and office work options where applicable.
Paid parental leave and flexible time off.
Certification and training reimbursement.
Digital mental health and wellbeing support membership.
Comprehensive insurance options.
Employee resource groups and in-person and virtual community events.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Enterprise Security Architect III

Makpar 51-200 Internet Software & Services

Makpar is seeking an Enterprise Security Architect III to design and deliver security architecture, controls, assessments, and remediation for an assigned federal ICAM workstream.

United States Full-time Senior Security Engineer

AWS Azure CI/CD Cybersecurity DevSecOps Jenkins OAuth SonarQube Splunk

13 hours, 21 minutes ago

Apply

13 hours, 21 minutes ago

HQ - Lead Information Security Engineer

Jobandtalent 1001-5000 Professional Services

Lead Job&Talent’s remote Information Security team to strengthen security operations, incident response, threat detection, and cloud security across its AI-powered workforce management platform.

Spain Full-time Lead Security Engineer

AWS Azure CI/CD GCP SIEM

13 hours, 21 minutes ago

Apply

13 hours, 21 minutes ago

Intermediate Cloud Security Engineer (Remote US)

Smile Digital Health 201-500 IT Services

Smile Digital Health is seeking a Cloud Security Engineer to design, automate, and support secure, production-grade cloud infrastructure for its FHIR-based healthcare data platform used by customers globally.