Jobs at Coalfire

Lead legal review, drafting, negotiation and lifecycle management of procurement, SaaS, services, licensing, SOWs and MSAs. Support strategic partnerships, advise on privacy/security (GDPR, HIPAA), create templates/playbooks, manage supplier negotiations, train teams, and support risk, litigation, and corporate governance initiatives. Collaborate with procurement, IT, finance and executive leadership. Travel ~10%.

Sell DivisionHex cybersecurity consulting and managed services to new and existing enterprise accounts. Hunt new business, build C-level relationships, develop account plans, coordinate pre-sales and delivery teams, drive proposals/SOWs and contract negotiations, and achieve revenue quotas while supporting cross-sell into Coalfire accounts.

Lead and scale Coalfire's AWS and Microsoft hyperscaler alliances: define strategy, run co-sell operations, manage partner portals and funding, build marketplace offerings, and drive executive and field alignment to grow cloud ecosystem revenue.

Enterprise-focused Account Executive selling cybersecurity advisory services. Responsible for growing and protecting accounts, prospecting new logos, executing account plans, coordinating cross-functional teams, managing pipeline, negotiating contracts, developing SOWs and proposals, and engaging C-level clients to deliver cybersecurity, GRC, AI, and cloud solutions. Uses Salesforce for tracking and may travel up to 30%.

Manage POA&Ms, collect and maintain security evidence, run and analyze vulnerability scans across systems, cloud, containers, and web apps, translate findings to federal stakeholders, integrate vulnerability management into CI/CD and cloud environments, maintain vulnerability tooling, track remediation, and improve processes and documentation to support FedRAMP/HITRUST/PCI compliance.

Design and own FedRAMP reference architectures across AWS, Azure, and GCP. Set engineering standards, review custom architectures, mentor engineers, support continuous delivery and compliance automation, and represent Coalfire in FedRAMP community and strategic pursuits.

Design, build, and deploy repeatable FedRAMP-aligned security capabilities using IaC and automation. Implement continuous monitoring, validate compliance evidence, deploy into client environments, mentor junior engineers, and contribute documentation and runbooks.

Lead end-to-end PCI and IT security assessments, including audit planning, evidence review, technical control testing, client interviews, and report (ROC) preparation. Provide quality control and mentorship, manage project priorities with PMs, interface with clients at all levels, identify upsell opportunities, and maintain industry certifications. Travel 25–50% and work remotely as needed.

Operate SIEM monitoring and alerting, perform hypothesis-driven threat hunts, develop and tune detections across multiple SIEMs, translate intelligence into detection logic, escalate incidents with MITRE ATT&CK mapping, and produce runbooks, dashboards, and documentation to improve client security posture.

Design and run an enterprise AI learning curriculum, build and manage an internal AI community, evangelize AI across the company, measure adoption, partner with HR and leaders on AI readiness and change management, and influence AI strategy and talent development.