Teams at Coalfire

Provides privacy, cybersecurity risk, and AI governance consulting to clients. Conducts assessments, control testing, interviews, and regulatory evaluations; develops findings, recommendations, remediation roadmaps, and privacy program components such as data inventories, DSARs, and ROPAs. Advises technical and non-technical stakeholders on frameworks including NIST, CIS, GDPR, and CCPA while supporting engagement methodologies, project deliverables, and sustainable security and privacy programs.

Provides vulnerability management and continuous monitoring support for regulated cloud environments. Responsibilities include investigating vulnerabilities, managing scans and false positives, creating POA&Ms, communicating alerts and remediation strategies, configuring scanning tools, automating repeatable tasks, documenting findings, coordinating escalations, and supporting compliance frameworks such as FedRAMP. The role also liaises with clients, SRE teams, auditors, and internal security operations personnel.

Owns operational capabilities for FedRAMP-regulated cloud environments, including monitoring, alerting, backup and recovery, continuous compliance evidence, incident response, and automation. The role leads major incident command, improves runbooks and operational standards, supports client-facing service delivery, partners on transitions to managed operations, and mentors engineers. Requires deep cloud operations, observability, infrastructure-as-code, resilience engineering, security-control frameworks, and senior escalation experience.