Provides vulnerability management and continuous monitoring support for regulated cloud environments. Responsibilities include investigating vulnerabilities, managing scans and false positives, creating POA&Ms, communicating alerts and remediation strategies, configuring scanning tools, automating repeatable tasks, documenting findings, coordinating escalations, and supporting compliance frameworks such as FedRAMP. The role also liaises with clients, SRE teams, auditors, and internal security operations personnel.
About Coalfire
Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.
But that’s not who we are – that’s just what we do.
We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.
What You'll Do
- Join a highly collaborative security operations team delivering vulnerability management services to Cloud Service Providers, and other organizations operating highly regulated environments.
- Communicate alerts to clients related to security anomalies in the environment.
- Assist customers with scanning their FedRAMP environment and managing false positives.
- ·Create a Plan of Action and Milestones (POAM) based on customer scan data.
- Communicate with internal management to provide insights and proposed remediation strategies.
- Create formal documentation, reports, and briefings using technical writing skills.
- Act as a liaison between the vulnerability management team, SRE teams, and customer teams.
- Configure and troubleshoot scanning devices.
- Develop technical solutions to automate repeatable tasks.
- Provide overall guidance, instruction, and thought leadership to clients and team members.
- Opening and following up on tickets and customer requests.
- Utilize tools and analytical skills to investigate the root cause of issues across the technologies.
- Provide oversight and orchestrate key parties from Coalfire and client teams during escalations with a focus on expedited resolution.
What You'll Bring
- US citizenship (required due to client contractual requirements)
- Experience supporting clients in a managed service organization.
- Familiarity with ITSM solutions (e.g., Jira, ServiceNow) and meeting SLAs.
- 2-4 years of experience in professional services, vulnerability management, and compliance monitoring.
- Skills in web application testing, API testing, and network testing.
- Previous experience with tools like Burp Suite Professional or similar DAST tools.
- Ability to analyze information security vulnerabilities and collaborate with teams for remediation.
- Experience with container scanning tools (Prisma/Aquasec/Defender) preferred.
- Experience developing playbooks, runbooks, and troubleshooting technical issues.
- Knowledge of vulnerability scoring systems (CVSS/CMSS).
- Experience with vulnerability scanning tools (e.g., Nessus, Burp Suite).
- Ability to analyze vulnerabilities and adjust risk ratings based on internal factors.
- Familiarity with OS Baseline Configuration standards (e.g., CIS Critical Security Controls Scanning).
- Excellent communication, organizational, and problem-solving skills.
- Experience working with auditors to ensure adherence to controls, policies, and standards.
- Strong documentation skills, including technical diagrams and descriptions.
- Ability to work independently and as part of a team with a professional attitude and demeanor.
- Critical thinking, and ability to balance environmental requirements with mission needs.
- BS or above in a related Information Technology field or equivalent combination of education and experience
Bonus Points
- Previous experience supporting a 24x7x365 security operations for a SaaS vendor
- PCI ASV, CISSP, CISA certifications.
- Certifications in Cloud Vendors, as well with organizations such as PMP, CISSP, CISM, or CISA
- Familiarity with frameworks such as FedRAMP, FISMA, SOC, ISO, HIPAA, HITRUST, PCI, etc.
Why You’ll Want to Join Us
At Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.
Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.
At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at [email protected].
Coalfire Denver, Colorado, USA Office
Denver, United States
Coalfire Greenwood Village, Colorado, USA Office
8480 E Orchard Rd, Greenwood Village, CO, United States, 80111
Similar Jobs
Cloud • Security • Software • Cybersecurity • Automation
Own complex enterprise customer escalations from engagement through resolution, coordinating Engineering, Support, Product, Customer Success, and Sales. Lead executive communications, maintain customer-facing resolution plans, manage commitments, coordinate with Incident Managers, and oversee post-escalation reviews and relationship repair. Develop escalation playbooks and process improvements while providing globally distributed, on-call support for high-severity customer situations.
Top Skills:
Ci/CdCloud-Native PlatformsDevsecopsGitlabPagerdutySalesforceSlackZendesk
Consumer Web • Coupons • Healthtech • Social Impact • Pharmaceutical
Provides independent legal counsel on healthcare regulations, employee benefits agreements, commercial contracts, AI initiatives, and product launches. Reviews pharmacy, telehealth, licensure, fraud and abuse, privacy, and healthcare product risks; negotiates agreements; develops AI governance processes, templates, playbooks, and training; monitors regulatory developments; and coordinates complex matters across legal, product, engineering, privacy, security, compliance, finance, and procurement teams.
Top Skills:
Artificial Intelligence (Ai)Telehealth
Artificial Intelligence • Cloud • Payments • Software • Business Intelligence • Generative AI • Automation
Leads enterprise-scale data architecture across batch, streaming, warehouse, lakehouse, transactional, AI, and vector-store use cases. Establishes data quality, governance, lineage, observability, access-control, and reliability standards. Defines AI-enabled data engineering patterns, mentors engineers, resolves complex architecture issues, and influences cross-functional roadmaps. Requires hands-on technical leadership and 15+ years of software, data engineering, or architecture experience.
Top Skills:
DbtGcp Bigquery
What you need to know about the Colorado Tech Scene
With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
