Conduct internal and external network, web application, API, mobile, cloud, social engineering, and wireless penetration tests. Advise clients on security and compliance, simulate cyberattacks, generate assessment reports, support engagement scoping and remediation, improve testing methodologies, manage escalations, and mentor junior staff while meeting delivery and utilization targets.
About Coalfire
Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.
But that’s not who we are – that’s just what we do.
We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.
Working independently and collaboratively with a team to support the following work activities where skills apply such as: Internal and External Network Penetration Testing, Application Penetration Testing (Browser-based, API, Mobile), Cloud Solution Penetration Testing, Social Engineering, Wireless Assessments.
Conduct security assessments on a wide variety of technologies and implementations.
Simulate sophisticated cyberattacks for clients worldwide.
What You'll Do
- Advises clients on technical security or compliance activities
- Manages priorities and tasks to achieve delivery utilization targets.
- Operates with professionalism both internally and with clients.
- Ensures quality products and services are delivered on time.
- Continues to develop professional skills with relevant industry specific certifications. Maintains strong depth of knowledge in the practice area.
- Collaborates with project managers, quality management, sales, and other delivery team members to drive customer satisfaction and meet project deliverables.
- Develop processes, procedures, and methodologies to enhance testing processes and experience
- Assist with report generation and quality assurance processes
- Develop client relationships
- Assist in the scoping of prospective engagements, leading engagements from initial stages through implementation and remediation
- Manage project escalations of current testing being conducted
- Mentor and develop less experienced staff
- Contribute to the Penetration Testing Team overall success by managing your team to meet various business objectives and metrics
What You'll Bring
- Bachelor's degree (four-year college or university) or equivalent combination of education and work experience
- 3+ years’ experience in information security with Web Application and Network penetration testing experience
- Experience working with enterprise environments
- Hands-on experience with scripting languages such as Python, Powershell, Shell, or Ruby
- Experience with one or more IT security compliance frameworks, such as PCI, FISMA, HIPAA, FEDRAMP, or HITRUST
- One to three (1-3) years of experience in an IT Security Audit and/or Compliance role
- Experience interacting with management in a consultative manner
- Strong IT understanding with respect to networks, servers, workstations, and applications
- Excellent communication and presentation skills
- Ability to travel up to 20%
Bonus Points
- Deep experience engaging clientele in consulting-related environments
- Experience leading penetration team engagements
- Reverse engineering malware, data obfuscators, or ciphers
- An aptitude for technical writing, including assessment reports, presentations, and operating procedures
- Strong understanding of security principles, policies, and industry best practices
- Experience working with C and various compiler toolchains
- Community contributions or participation including
- CTF, Hack-the-box, or cyber-defense competitions
- Speaking or presentations
- Public security research
Why You’ll Want to Join Us
At Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.
Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.
At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at [email protected].
Similar Jobs
Artificial Intelligence • Big Data • Cloud • Machine Learning • Software • Business Intelligence • Data Privacy
The role involves designing cloud infrastructure, managing production Kubernetes clusters, optimizing CI/CD pipelines, enhancing developer experience, and ensuring reliable AI workloads. Candidates should have extensive experience in infrastructure and distributed systems engineering with strong coding skills and cloud expertise.
Top Skills:
AWSAzureDatadogDockerElkGCPGoGrafanaJavaKubernetesPrometheusPythonTerraform
Social Impact • Software
Owns core product areas across the full lifecycle, from discovery and strategy through execution, launch, and iteration. Conducts customer research, workflow analysis, usability testing, competitive research, and data analysis. Partners closely with engineering and design to deliver scalable user experiences, defines success metrics and instrumentation, and supports launches through messaging and cross-functional readiness. The role also requires hands-on AI experience and operates in a high-ownership, low-structure B2B SaaS environment.
Top Skills:
AICRM
Artificial Intelligence • Cloud • Sales • Security • Software • Cybersecurity • Data Privacy
Manage assigned client accounts to ensure satisfaction and renewals. Coach clients on SailPoint/IdentityIQ identity and access solutions, monitor usage and risks, provide strategic updates, identify expansion opportunities, and drive resolutions to customer issues.
Top Skills:
IdentityiqSailpoint
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
