Manage POA&Ms, collect and maintain security evidence, run and analyze vulnerability scans across systems, cloud, containers, and web apps, translate findings to federal stakeholders, integrate vulnerability management into CI/CD and cloud environments, maintain vulnerability tooling, track remediation, and improve processes and documentation to support FedRAMP/HITRUST/PCI compliance.
About Coalfire
Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.
But that’s not who we are – that’s just what we do.
We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.
What You'll Do
- Manage Plan of Action & Milestones (POA&Ms) lifecycle including creation, tracking, risk adjustment justification, and deviation requests in coordination with 3PAO assessors and federal stakeholders
- Collect, organize, and maintain security control evidence and artifacts for monthly continuous monitoring deliverables and assessment/authorization activities, ensuring alignment with FedRAMP, HITRUST, PCI, and similar frameworks
- Maintain accurate system inventory and authorization boundary documentation to ensure scanning scope aligns with approved system boundaries
- Analyze scan results for false positives, document justifications, and prepare deviation requests with supporting risk assessments
- Translate technical vulnerability findings into risk-based language for federal clients and authorization officials, presenting monthly status briefings as needed
- Collaborate with development, SRE, and infrastructure teams to integrate vulnerability management into CI/CD pipelines, cloud environments (AWS, Azure, GCP), and container/Kubernetes platforms
- Participate in change management processes to ensure continuous monitoring activities align with system changes and maintain compliance posture
- Support and maintain enterprise vulnerability management tools (such as Tenable, Nessus, Burp, Qualys, Rapid7, Wiz, Prisma, Microsoft Defender), ensuring timely updates and patches
- Run regular and on-demand scans across operating systems, databases, web applications, and containers, then work with technical teams to create tickets for remediation
- Track and document vendor dependencies, operational requirements, and open vulnerabilities, producing clear monthly reports and updates for clients
- Contribute to improving internal standards and processes, including maintaining documentation, training materials, and standard operating procedures
What You'll Bring
- 3–5 years of professional experience in vulnerability management, compliance monitoring, or related security operations roles
- Hands-on expertise with operating system, database, network, container, web application, and API vulnerability management
- Direct experience supporting vulnerability management in at least two of the following cloud providers: AWS, Azure, GCP
- Background working within at least one compliance framework (for example, FedRAMP, HITRUST, PCI), including risk assessment and reporting
- Experience delivering monthly or periodic vulnerability status reports and tracking remediation efforts with internal and external teams
- Administrator-level certification in AWS, Azure, or GCP
- Working knowledge of cloud architecture and security controls in AWS, Azure, or GCP, including ability to assess attack surfaces and recommend cloud-native remediation approaches
- Strong knowledge of vulnerability scanning technologies and methods, including scoring systems (CVSS, CMSS) and risk prioritization frameworks
- Understanding of NIST 800-53 security controls, particularly RA-5, SI-2, CM-6, and how continuous monitoring supports control implementation
- Experience with STIG benchmarks and automated compliance scanning tools (SCAP, SCC)
- Familiarity with baseline configuration standards (CIS Benchmarks, vendor hardening guides) and compliance posture reporting
- Ability to distinguish false positives from true vulnerabilities and articulate risk-based justifications for deviation requests
- Proficiency in scripting languages (Python, PowerShell, Bash) for task automation, report generation, and remediation workflows
- Strong client-facing communication and documentation skills, with ability to present technical findings to federal stakeholders and produce timely compliance reports
- Ability to work efficiently with cross-functional technical teams to investigate, prioritize, and coordinate vulnerability remediation efforts
- Bachelor’s degree or equivalent work experience.
- US citizenship (required due to client contractual requirements)
Bonus Points
- Security-focused cloud certifications for AWS, Azure, or GCP
- CISSP certification
- Familiarity with container security scanning tools (Trivy, Anchore, Snyk) and Kubernetes security postures
- Knowledge of software composition analysis (SCA) and static/dynamic application security testing (SAST/DAST) tools
- Familiarity with CI/CD security integration patterns and DevSecOps toolchains
Why You’ll Want to Join Us
At Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.
Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.
At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at [email protected].
Coalfire San Bruno, California, USA Office
801 Traeger Ave, San Bruno, CA, United States, 94066
Similar Jobs
Security • Cybersecurity
Lead research to identify and analyze novel vulnerabilities in industrial control systems, coordinate responsible disclosure, author technical reports, and develop detection signatures. Partner with product, threat intel, and incident response to integrate findings and mentor researchers. Drive automation of analysis tooling and contribute to strategic vulnerability management and public industry engagement.
Top Skills:
C#Dnp3ModbusProfibusPythonSnortSuricataWindowsYaraZeek
3 Days Ago
Healthtech • Insurance
Perform internal and external vulnerability assessments, manage vulnerability scanning programs, prioritize and track remediation with technology teams, produce metrics and executive reports, support threat intelligence and threat hunting, maintain policies and controls for audit/compliance, and drive continuous improvement to reduce organizational cyber risk.
Top Skills:
Cis BenchmarksCvssCyber Kill ChainExcelH-IsacInsightvm (Nexpose)LinuxmacOSMicrosoft PowerpointNessusNjccicQualysRecorded FutureThreatconnectThreatstreamVisioWindows
Biotech
Lead enterprise vulnerability management: research and validate vulnerabilities, prioritize remediation, perform risk assessments, exploit development and pen-testing, support SOC incident response, produce reports and training, and collaborate with IT/Dev teams to reduce cyber risk.
Top Skills:
Cloud ArchitectureCvesEdr SolutionsExploit DevelopmentHitrustIso/Iec 27001Mitre Att&CkNistPenetration TestingSecurity Impact Analysis (Sia)Threat IntelligenceVulnerability Scanning Tools
What you need to know about the San Francisco Tech Scene
San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
