Coalfire

Compliance

• Support security and compliance consulting for cloud-based, hybrid, and on-premises healthcare environments
• Manage assigned priorities and tasks to meet delivery timelines, utilization expectations, and quality standards; raise schedule, scope, resource, or evidence issues early
• Support client SME interviews, workshops, readouts, and status meetings; co-facilitate assigned portions when appropriate
• Assist with developing System Security Plans, configuration management plans, information system security policies, rules of behavior, privacy impact analyses, IT contingency and business continuity plans, and incident response plans
• Support risk assessments, gap analyses, assessment readiness, system security plan development, policy and procedure development, and other consulting services
• Collect, organize, and interpret client information and evidence; map information to applicable requirements; identify compliance and risk implications
• Prepare, update, and quality-check client deliverables, including compliance documentation, reports, policies, procedures, plans, evidence matrices, and workpapers
• Support engagement planning by reviewing contractual requirements, agendas, data requests, action items, schedules, and assigned responsibilities
• Review technology, control evidence, and configurations related to cloud infrastructure, identity and access management, MFA, user access lifecycle, privileged access, access reviews, logging and monitoring, vulnerability management, incident response, endpoint security, and network security
• Support engagements involving business continuity and disaster recovery, incident response, and vendor risk management
• Translate technical requirements and security findings into clear, practical recommendations
• Contribute to reusable tools, templates, workpapers, methodologies, and process improvements
• Participate in internal knowledge sharing, peer review, and constructive feedback activities
• Maintain current knowledge of assigned frameworks, industry practices, and relevant technology and security topics
• Collaborate with project management, quality management, sales, and delivery teams to support customer satisfaction and successful project delivery
• Communicate professionally with clients, project leads, and Coalfire team members through email, video conferencing, and in-person meetings
• Explain technical requirements, evidence needs, control gaps, and recommendations clearly to technical and non-technical audiences
• Build professional relationships with client stakeholders and internal team members
• Document decisions, action items, risks, dependencies, and follow-up requirements accurately
• Use sound judgment, diplomacy, and discretion when working with sensitive client and patient-related information
• Work remotely using computers and video-conferencing tools
• Travel may be required based on engagement needs; up to 25% travel is uncommon

Consultant, Healthcare Compliance Advisory

Cloud Engineer

• Serve as a senior client-facing leader across cloud engineering engagements
• Own engagement momentum, delivery excellence, scope, milestones, risks, dependencies, quality, and client satisfaction
• Lead high-priority client escalations and difficult conversations
• Ensure client commitments, engagement decisions, tradeoffs, status, and next steps are communicated clearly
• Own engineering quality, risk management, technical readiness, design quality, implementation quality, and corrective actions
• Implement and drive adoption of approved architecture, engineering, and operational readiness standards
• Ensure clear technical handoffs across internal and external teams
• Support backlog management, prioritization, dependency, work-in-progress, and recovery practices
• Partner with Sales and pre-sales teams on discovery, delivery feasibility, solution shaping, and cloud services approaches
• Develop and review scopes of work, estimates, assumptions, dependencies, milestones, and acceptance criteria
• Validate technical content in SOWs, Change Orders, and Contracts
• Oversee customer feedback loops and refine offerings with product, sales, and marketing teams
• Deliver presentations, blogs, and community outreach as an industry thought leader
• Build scalable operating processes, playbooks, and governance for Cloud Services engagements
• Provide technical and delivery leadership, reusable approaches, documentation, and continuous improvement
• Own training, new-hire enablement, onboarding, career pathways, promotion readiness, performance expectations, and succession coverage
• Establish qualification, onboarding, work allocation, quality review, and performance expectations for subcontractors and delivery partners
• Serve as accountable Delivery leader for quality, delivery, architecture, implementation, performance, and contractual escalations
• Maintain tracking of commitments, effort, status, risks, dependencies, resources, and recovery actions
• Provide executive-level briefings and ensure KPI tracking for customer success, operational excellence, and delivery quality
• Lead through influence across delivery teams and cross-functional partners
• Provide coaching and feedback to improve performance and strengthen Cloud Services
• Provide engineering demand, skills, capacity, staffing, utilization, subcontractor, dependency, and delivery-readiness inputs

Director, Cloud Services

• Lead operations for the Cloud Services organization across professional and managed services teams
• Establish and reinforce delivery standards for scope, quality, timelines, documentation, risk management, and client communication
• Monitor engagement schedules, milestones, risks, dependencies, resourcing, utilization, capacity, forecasts, margins, quality, and client satisfaction
• Lead high-priority delivery and client escalations
• Oversee engineering quality, risk management, technical readiness, design quality, implementation quality, and corrective actions
• Establish and govern engineering, architecture, operational readiness, backlog, prioritization, dependency, work-in-progress, and recovery practices
• Support the Vice President and Managing Principal with operating model, priorities, and growth initiatives
• Support offering management with service standardization, descriptions, pricing, and scoping
• Evaluate emerging cloud technologies and service delivery practices
• Partner with Sales and pre-sales teams on discovery, delivery feasibility, estimates, technical approaches, SOWs, Change Orders, and Contracts
• Govern scalable operating processes, playbooks, and delivery governance
• Lead and coach cloud services delivery leaders and consultants
• Serve as the operational and technical escalation point for delivery teams
• Oversee onboarding, training, career pathways, promotion readiness, performance expectations, and succession coverage
• Provide governance for subcontractors and delivery partners
• Coordinate client management methodologies, escalation tracking, CSAT and QBR governance, and recovery actions
• Provide executive-level briefings and establish KPIs for customer success, operational excellence, and delivery quality
• Lead cross-functional collaboration with Delivery Operations, Resource Management, PMO, Offering Management, Sales, and Cloud Services leadership
• Support public speaking, cybersecurity evangelism, and go-to-market initiatives

Senior Director of Cloud Services

Client Partner

• Own the overall strategy, health, and performance of a select group of strategic accounts
• Build trusted relationships with executive sponsors, economic buyers, technical stakeholders, and key influencers
• Develop and maintain strategic account plans aligned with clients’ business, cybersecurity, and compliance needs
• Lead account planning sessions, client business reviews, and QBRs
• Own renewal strategy and support timely commercial decisions
• Identify and pursue expansion opportunities across buying centers, service lines, and client needs
• Partner with Account Executives on expansion strategy, qualification, solutioning, and commercial alignment
• Maintain accountability for revenue growth, retention, margin, pipeline contribution, and delivery economics
• Make account-level decisions involving resources, staffing, scope, pricing, credits, and service recovery
• Maintain executive visibility into delivery health and intervene when risks emerge
• Lead and resolve client, delivery, commercial, and relationship escalations
• Coordinate with project managers, delivery leaders, solutioning teams, service lines, finance, and sales
• Participate in technical discovery, solution shaping, and scoping conversations
• Review engagement plans, milestones, staffing, dependencies, timelines, budgets, profitability, utilization, quality, and deliverables
• Review client-facing assessment plans, technical reports, findings, recommendations, and communications
• Facilitate client interviews, technical working sessions, status calls, and business reviews
• Track and close client questions, evidence requests, findings, action items, and scope changes
• Support engagement onboarding, transitions, and closeout
• Coach consultants, managers, and account team members in client communication, audit and assessment practices, technical review, writing, and quality standards
• Establish client-specific operating practices to improve service quality and client experience
• Lead, coach, and develop account team members and managers
• Stay current on cybersecurity, technology, industry, and competitive trends

Project Manager

• Serve as the primary project management point of contact for clients, sponsors, and internal delivery teams
• Build trusted client relationships through proactive communication, credible advice, reliable follow-through, and understanding of client objectives
• Lead project initiation, discovery, kickoff, planning, execution, transition, and closeout for consulting engagements
• Translate statements of work, engagement objectives, and client requirements into delivery plans, milestones, outcomes, and acceptance criteria
• Own the full project lifecycle for multiple concurrent client engagements
• Develop and maintain integrated project plans covering milestones, workstreams, dependencies, resources, deliverables, and critical path activities
• Manage scope and change control, including impact analysis, approvals, documentation, and communications
• Track project health using delivery metrics and recommend intervention or recovery planning
• Design and manage engagement governance models, meeting cadences, decision rights, escalation paths, reporting expectations, and stakeholder participation
• Maintain RAID logs and manage risks, assumptions, issues, decisions, dependencies, constraints, and mitigations through resolution
• Lead governance reviews, stage gates, steering committees, executive updates, and formal delivery checkpoints
• Prepare governance packs communicating health, progress, decisions, risks, issues, financial status, and recommended actions
• Monitor project budgets, forecasts, burn, actuals, remaining effort, resource plans, and financial performance
• Support time, expense, invoicing, utilization, and revenue-related processes
• Provide status reporting and lead client status meetings, working sessions, steering committees, executive briefings, and retrospectives
• Lead and influence cross-functional, matrixed teams; clarify accountability, resolve conflicts, remove blockers, and facilitate collaboration
• Coordinate with resource management, sales, finance, operations, security, and practice leadership
• Apply lessons learned, delivery metrics, client feedback, and retrospectives to improve execution and client experience
• Contribute to project management standards, governance practices, templates, playbooks, and reporting
• Maintain company-defined billable utilization targets
• Travel for client or internal work as needed, up to 20%

Senior Project Manager – Cloud & Compliance Advisory

Associate

• Conduct network, web, and mobile application penetration testing
• Conduct code reviews, social engineering, red team engagements, and physical security assessments
• Conduct security assessments on a wide variety of technologies and implementations
• Advise clients on technical security or compliance activities
• Collaborate with project managers, quality management, sales, and other delivery team members
• Help drive customer satisfaction and meet project deliverables
• Contribute to the overall success of the Coalfire Division Hex Penetration Testing Team
• Help the team meet various business objectives and metrics

Pen Testing – New Grad Associate

Security Engineer

• Assist in conducting security assessments on a wide variety of technologies and implementations
• Gain exposure to working with clients on technical security or compliance activities
• Learn to conduct penetration testing, code reviews, social engineering, red team engagements, and physical security assessments
• Help the Coalfire Division Hex Penetration Testing Team meet business objectives
• Support research, security documentation, and process improvement
• Work on real projects and gain insights into cybersecurity industry practices

Penetration Testing Intern

DevOps Engineer

• Own an operational capability for the managed estate, including automation, runbooks, and service standards
• Design observability for regulated cloud environments, including telemetry and log pipelines, service-level objectives, alert quality, and escalation paths
• Build and maintain continuous-monitoring evidence pipelines
• Own backup and recovery engineering, including tested recovery procedures, measurable recovery objectives, and outage automation
• Serve as the senior escalation point in client environments and resolve complex operational incidents
• Lead incident and problem management, including major-event incident command, blameless post-incident reviews, and corrective actions
• Automate operational toil using infrastructure-as-code, pipelines, and scripting
• Partner with Engagement Architects and Build teams on transition into managed operations
• Hold on-call responsibility and improve rotation coverage, alert actionability, and team load
• Represent operational posture to clients and support renewals and expansions
• Mentor and lead Site Reliability Engineers and junior staff
• Author and peer review code, runbooks, operational design documentation, and compliance artifacts

Senior Site Reliability Engineer – Fedramp

Consultant

• Conduct human threat engagements, including social engineering, phishing, vishing, authorized physical security assessments, and human risk evaluations
• Plan, scope, and execute physical security assessments across facilities, offices, campuses, and client locations under approved rules of engagement
• Evaluate perimeter protections, entry points, locks, badges, visitor management, reception procedures, secure areas, and employee access practices
• Perform onsite testing and walkthroughs to identify unauthorized access opportunities, control bypasses, tailgating, weak access governance, and other exposures
• Develop assessment scenarios, pretexts, and test plans combining physical and social engineering techniques
• Coordinate onsite logistics, client communications, safety considerations, evidence collection, and testing activities within authorized scope
• Document observations and evidence through notes, timestamps, photographs, interviews, and other assessment records
• Analyze results, assign risk-based findings, and recommend improvements to facility security, access management, detection, response, and resilience
• Prepare, review, and approve Human Threat reports
• Deliver client briefings and debriefs communicating security gaps, social engineering results, business impact, and remediation actions
• Manage priorities and tasks to meet delivery utilization targets and timely deliverables
• Advise clients and build collaborative relationships with clients and stakeholders
• Maintain industry certifications and knowledge of emerging physical security, social engineering, and human threat trends
• Identify up-sell and cross-sell opportunities and escalate them to sales
• Collaborate with project managers, quality management, sales, and delivery team members
• Mentor junior consultants in physical assessment techniques, social engineering, client communications, reporting, and engagement execution
• Develop and refine Human Threat methodologies, tooling, playbooks, and service offerings
• Contribute to thought leadership through research, blogs, whitepapers, webinars, and conference presentations
• Support Human Threat practice development through research, service innovation, and external industry content
• Represent Coalfire at industry events, client briefings, and conferences
• Contribute to other offensive security engagements as needed
• Perform other responsibilities supporting client delivery, practice development, and team success