Jobs at Coalfire

Review, draft, negotiate, and manage a wide range of commercial and procurement contracts globally. Support development of contracting policies, assess and mitigate legal risk, triage legal requests, train stakeholders, and collaborate with internal teams on contract strategy and process improvements. Approximately 10% travel.

Support partnership and procurement contract lifecycle: draft, review, and negotiate vendor, reseller, SaaS, cloud, and partnership agreements; partner with procurement teams; develop templates, policies, and negotiation guidelines; leverage CLM and AI tools for review; maintain corporate governance records, entity management, board materials, filings, and minute books; triage legal inbox; support risk, litigation, and training. Travel ~10%.

Design and run an enterprise AI learning curriculum, build and manage an internal AI community, evangelize AI across the company, measure adoption, partner with HR and leaders on AI readiness and change management, and influence AI strategy and talent development.

Sell DivisionHex cybersecurity consulting and managed services to new and existing enterprise accounts. Hunt new business, build C-level relationships, develop account plans, coordinate pre-sales and delivery teams, drive proposals/SOWs and contract negotiations, and achieve revenue quotas while supporting cross-sell into Coalfire accounts.

Enterprise-focused Account Executive selling cybersecurity advisory services. Responsible for growing and protecting accounts, prospecting new logos, executing account plans, coordinating cross-functional teams, managing pipeline, negotiating contracts, developing SOWs and proposals, and engaging C-level clients to deliver cybersecurity, GRC, AI, and cloud solutions. Uses Salesforce for tracking and may travel up to 30%.

Manage POA&Ms, collect and maintain security evidence, run and analyze vulnerability scans across systems, cloud, containers, and web apps, translate findings to federal stakeholders, integrate vulnerability management into CI/CD and cloud environments, maintain vulnerability tooling, track remediation, and improve processes and documentation to support FedRAMP/HITRUST/PCI compliance.

Design and own FedRAMP reference architectures across AWS, Azure, and GCP. Set engineering standards, review custom architectures, mentor engineers, support continuous delivery and compliance automation, and represent Coalfire in FedRAMP community and strategic pursuits.

Design, build, and deploy repeatable FedRAMP-aligned security capabilities using IaC and automation. Implement continuous monitoring, validate compliance evidence, deploy into client environments, mentor junior engineers, and contribute documentation and runbooks.

Operate SIEM monitoring and alerting, perform hypothesis-driven threat hunts, develop and tune detections across multiple SIEMs, translate intelligence into detection logic, escalate incidents with MITRE ATT&CK mapping, and produce runbooks, dashboards, and documentation to improve client security posture.