Security Engineer – ConMon

Coalfire

. Provide operational support for vulnerability management processes for clients with regulatory compliance requirements .

Posted 10/26/2026full-timeRemote • United StatesJuniorMid-Level💰 $80,000 - $134,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability management processes, regulatory compliance, and technical documentation. Proficient in collaborating with cross-functional teams to deliver security solutions and manage client relationships effectively.

Highest-signal resume keywords

Vulnerability ManagementCompliance MonitoringWeb Application TestingBurp Suite ProfessionalITSM Solutions

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ScanningAPI TestingNetwork TestingTechnical DocumentationRoot Cause AnalysisRisk AnalysisPlaybook DevelopmentTroubleshootingConfiguration StandardsSecurity Anomaly Communication

Soft Skills

Critical ThinkingCollaborationProfessional AttitudeCommunicationGuidance and Instruction

Tools & Technologies

JiraServiceNowNessusPrismaAquasecDefenderBurp SuiteScanning DevicesDAST ToolsITSM Solutions

Certifications & Qualifications

CISSPCISACISMPMPPCI ASV

Industry Keywords

FedRAMPFISMASOCISOHIPAAHITRUSTPCICIS Critical Security ControlsManaged Service OrganizationSecurity Operations

Tech Stack

Tools & technologies

CloudITSMPMPServiceNow

About the role

Key responsibilities & impact

Provide operational support for vulnerability management processes for clients with regulatory compliance requirements
Join a collaborative security operations team delivering vulnerability management services to cloud service providers and highly regulated organizations
Communicate security anomaly alerts to clients
Assist customers with scanning FedRAMP environments and managing false positives
Create Plans of Action and Milestones (POAMs) from customer scan data
Communicate insights and proposed remediation strategies to internal management
Create formal documentation, reports, and briefings
Liaise between vulnerability management, SRE, and customer teams
Configure and troubleshoot scanning devices
Develop technical solutions to automate repeatable tasks
Provide guidance, instruction, and thought leadership to clients and team members
Open and follow up on tickets and customer requests
Investigate root causes of issues across technologies
Coordinate Coalfire and client teams during escalations to expedite resolution

Requirements

What you’ll need

US citizenship required due to client contractual requirements
Experience supporting clients in a managed service organization
Familiarity with ITSM solutions such as Jira and ServiceNow and meeting SLAs
2-4 years of experience in professional services, vulnerability management, and compliance monitoring
Skills in web application testing, API testing, and network testing
Previous experience with Burp Suite Professional or similar DAST tools
Ability to analyze information security vulnerabilities and collaborate with teams for remediation
Experience with container scanning tools such as Prisma, Aquasec, or Defender preferred
Experience developing playbooks, runbooks, and troubleshooting technical issues
Knowledge of vulnerability scoring systems such as CVSS/CMSS
Experience with vulnerability scanning tools such as Nessus and Burp Suite
Ability to analyze vulnerabilities and adjust risk ratings based on internal factors
Familiarity with OS Baseline Configuration standards, such as CIS Critical Security Controls Scanning
Experience working with auditors to ensure adherence to controls, policies, and standards
Strong documentation skills, including technical diagrams and descriptions
Ability to work independently and as part of a team with a professional attitude and demeanor
Critical thinking and ability to balance environmental requirements with mission needs
BS or above in a related Information Technology field, or equivalent combination of education and experience
Bonus: Previous experience supporting 24x7x365 security operations for a SaaS vendor
Bonus: PCI ASV, CISSP, CISA, cloud vendor, PMP, CISM, or CISA certifications
Bonus: Familiarity with FedRAMP, FISMA, SOC, ISO, HIPAA, HITRUST, or PCI frameworks

Benefits

Comp & perks

Flexible work model allowing work from home or an office
Employee resource groups
In-person and virtual events
Paid parental leave
Flexible time off
Certification and training reimbursement
Digital mental health and wellbeing support membership
Comprehensive insurance options
Potential eligibility for annual incentive, commission, and/or recognition programs