Jobs at Coalfire

Design and own FedRAMP reference architectures across AWS, Azure, and GCP. Set engineering standards, review custom architectures, mentor engineers, support continuous delivery and compliance automation, and represent Coalfire in FedRAMP community and strategic pursuits.

Design, build, and deploy repeatable FedRAMP-aligned security capabilities using IaC and automation. Implement continuous monitoring, validate compliance evidence, deploy into client environments, mentor junior engineers, and contribute documentation and runbooks.

Lead end-to-end PCI and IT security assessments, including audit planning, evidence review, technical control testing, client interviews, and report (ROC) preparation. Provide quality control and mentorship, manage project priorities with PMs, interface with clients at all levels, identify upsell opportunities, and maintain industry certifications. Travel 25–50% and work remotely as needed.

Senior Revenue Operations leader who owns MQL-to-opportunity pipeline, manages outsourced SDR program, and runs the GTM calendar to coordinate marketing, sales, offering, delivery, and partners to drive pipeline and bookings.

Operate SIEM monitoring and alerting, perform hypothesis-driven threat hunts, develop and tune detections across multiple SIEMs, translate intelligence into detection logic, escalate incidents with MITRE ATT&CK mapping, and produce runbooks, dashboards, and documentation to improve client security posture.

Lead and deliver complex cloud security design/build and managed operations engagements. Serve as primary client contact, manage full project lifecycle, risks, schedules, budgets, and cross-functional coordination. Drive process improvements, automation, compliance alignment, and executive-level reporting while mentoring team members and ensuring successful delivery against technical and compliance requirements.

Design and run an enterprise AI learning curriculum, build and manage an internal AI community, evangelize AI across the company, measure adoption, partner with HR and leaders on AI readiness and change management, and influence AI strategy and talent development.

Lead and execute covert red team, adversary emulation, and purple team engagements. Develop custom tradecraft, C2 infrastructure, exploits, and evasion techniques; simulate threat actor TTPs across on-prem, cloud, and hybrid environments. Advise clients, produce MITRE-aligned reporting, contribute tooling and research, and present thought leadership to improve detection and response.

Lead and scale Coalfire's AWS and Microsoft hyperscaler alliances: define strategy, run co-sell operations, manage partner portals and funding, build marketplace offerings, and drive executive and field alignment to grow cloud ecosystem revenue.

Manage POA&Ms, collect and maintain security evidence, run and analyze vulnerability scans across systems, cloud, containers, and web apps, translate findings to federal stakeholders, integrate vulnerability management into CI/CD and cloud environments, maintain vulnerability tooling, track remediation, and improve processes and documentation to support FedRAMP/HITRUST/PCI compliance.