Jobs at Coalfire

Assesses clients’ operational technology security posture across manufacturing, energy, utilities, and critical infrastructure. Conducts stakeholder interviews, reviews OT documentation, evaluates environments against cybersecurity frameworks and regulations, develops maturity assessments and remediation roadmaps, and presents findings to technical teams and executives. Advises on OT security governance, policies, procedures, risk management, and compliance while supporting broader cyber risk advisory engagements.

Design, implement, administer, and improve SIEM platforms across AWS, Azure, and GCP environments. Build reliable log ingestion pipelines, onboard and normalize data sources, manage platform reliability and performance, integrate security tools, and automate deployments using infrastructure as code. Support FedRAMP compliance, troubleshoot complex platform issues, maintain operational documentation and runbooks, contribute to platform roadmaps, and serve as a technical resource for clients and security operations teams.

Leads complex cybersecurity and compliance pre-sales pursuits from discovery through close. Advises strategic clients, designs solutions spanning compliance, cloud, security, and operating models, and develops scopes, proposals, pricing, roadmaps, and technical validation materials. Coordinates sales, delivery, finance, product, executive, and partner stakeholders while governing scope, risks, dependencies, and commercial integrity. Contributes to thought leadership, market development, cross-selling, and new solution offerings. Travel is approximately 25–35%.

Enterprise-focused Account Executive selling cybersecurity advisory services. Responsible for growing and protecting accounts, prospecting new logos, executing account plans, coordinating cross-functional teams, managing pipeline, negotiating contracts, developing SOWs and proposals, and engaging C-level clients to deliver cybersecurity, GRC, AI, and cloud solutions. Uses Salesforce for tracking and may travel up to 30%.

Conduct internal and external network, web application, API, mobile, cloud, social engineering, and wireless penetration tests. Advise clients on security and compliance, simulate cyberattacks, generate assessment reports, support engagement scoping and remediation, improve testing methodologies, manage escalations, and mentor junior staff while meeting delivery and utilization targets.

Lead and deliver Google Cloud security architecture, posture assessments, and operationalization. Advise on GCP security strategy, implement Security Command Center and cloud-native security tooling, integrate findings into SIEM/SecOps, guide AI workload security, produce executive reports and remediation roadmaps, and mentor consultants while driving repeatable methodologies and delivery quality.

Lead design, assessment, and operationalization of secure Google Cloud environments. Advise on GCP security strategy, posture assessments, SIEM/Chronicle integration, CNAPP/CSPM tooling, Security Command Center implementation, Vertex AI security, remediation roadmaps, and delivery of architecture, runbooks, and executive advisory. Mentor consultants and develop repeatable security methodologies.

Design and own FedRAMP reference architectures across AWS, Azure, and GCP. Set engineering standards, review custom architectures, mentor engineers, support continuous delivery and compliance automation, and represent Coalfire in FedRAMP community and strategic pursuits.

Operate SIEM monitoring and alerting, perform hypothesis-driven threat hunts, develop and tune detections across multiple SIEMs, translate intelligence into detection logic, escalate incidents with MITRE ATT&CK mapping, and produce runbooks, dashboards, and documentation to improve client security posture.

Own and grow enterprise accounts and acquire net-new logos for Coalfires Compliance services. Lead full sales cycle, develop strategic account plans, engage executive stakeholders, drive renewals and upsells, maintain Salesforce pipeline, and collaborate with delivery, marketing, and legal teams. Travel up to 50%.

Sell DivisionHex cybersecurity consulting and managed services to new and existing enterprise accounts. Hunt new business, build C-level relationships, develop account plans, coordinate pre-sales and delivery teams, drive proposals/SOWs and contract negotiations, and achieve revenue quotas while supporting cross-sell into Coalfire accounts.