Jobs at Coalfire

Owns operational capabilities for FedRAMP-regulated cloud environments, including monitoring, alerting, backup and recovery, continuous compliance evidence, incident response, and automation. The role leads major incident command, improves runbooks and operational standards, supports client-facing service delivery, partners on transitions to managed operations, and mentors engineers. Requires deep cloud operations, observability, infrastructure-as-code, resilience engineering, security-control frameworks, and senior escalation experience.

Lead design, assessment, and operationalization of secure Google Cloud environments. Advise on GCP security strategy, posture assessments, SIEM/Chronicle integration, CNAPP/CSPM tooling, Security Command Center implementation, Vertex AI security, remediation roadmaps, and delivery of architecture, runbooks, and executive advisory. Mentor consultants and develop repeatable security methodologies.

Lead and deliver Google Cloud security architecture, posture assessments, and operationalization. Advise on GCP security strategy, implement Security Command Center and cloud-native security tooling, integrate findings into SIEM/SecOps, guide AI workload security, produce executive reports and remediation roadmaps, and mentor consultants while driving repeatable methodologies and delivery quality.

Conduct authorized physical security assessments and social engineering engagements, including phishing, vishing, pretexting, facility walkthroughs, and human risk evaluations. Analyze vulnerabilities, document evidence, prepare reports, brief clients, and recommend remediation. The role also involves onsite testing, client relationship management, mentoring junior consultants, methodology development, thought leadership, and collaboration across delivery and sales teams.

Assesses clients’ operational technology security posture across manufacturing, energy, utilities, and critical infrastructure. Conducts stakeholder interviews, reviews OT documentation, evaluates environments against cybersecurity frameworks and regulations, develops maturity assessments and remediation roadmaps, and presents findings to technical teams and executives. Advises on OT security governance, policies, procedures, risk management, and compliance while supporting broader cyber risk advisory engagements.

Leads complex cybersecurity and compliance pre-sales pursuits from discovery through close. Advises strategic clients, designs solutions spanning compliance, cloud, security, and operating models, and develops scopes, proposals, pricing, roadmaps, and technical validation materials. Coordinates sales, delivery, finance, product, executive, and partner stakeholders while governing scope, risks, dependencies, and commercial integrity. Contributes to thought leadership, market development, cross-selling, and new solution offerings. Travel is approximately 25–35%.

Enterprise-focused Account Executive selling cybersecurity advisory services. Responsible for growing and protecting accounts, prospecting new logos, executing account plans, coordinating cross-functional teams, managing pipeline, negotiating contracts, developing SOWs and proposals, and engaging C-level clients to deliver cybersecurity, GRC, AI, and cloud solutions. Uses Salesforce for tracking and may travel up to 30%.

Design and own FedRAMP reference architectures across AWS, Azure, and GCP. Set engineering standards, review custom architectures, mentor engineers, support continuous delivery and compliance automation, and represent Coalfire in FedRAMP community and strategic pursuits.

Operate SIEM monitoring and alerting, perform hypothesis-driven threat hunts, develop and tune detections across multiple SIEMs, translate intelligence into detection logic, escalate incidents with MITRE ATT&CK mapping, and produce runbooks, dashboards, and documentation to improve client security posture.

Own and grow enterprise accounts and acquire net-new logos for Coalfires Compliance services. Lead full sales cycle, develop strategic account plans, engage executive stakeholders, drive renewals and upsells, maintain Salesforce pipeline, and collaborate with delivery, marketing, and legal teams. Travel up to 50%.

Sell DivisionHex cybersecurity consulting and managed services to new and existing enterprise accounts. Hunt new business, build C-level relationships, develop account plans, coordinate pre-sales and delivery teams, drive proposals/SOWs and contract negotiations, and achieve revenue quotas while supporting cross-sell into Coalfire accounts.