Compliance Security Penetration Tester

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $64k - $117k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

🚔 Compliance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Coalfire

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2001

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Coalfire is a cybersecurity services provider that helps businesses improve their security resilience and streamline regulatory compliance. The company offers expert-led services, including threat-focused cybersecurity programs, compliance automation, risk management, and security advisory services across various industries such as financial services, healthcare, retail, and technology. Coalfire is known for its hacker and defender expertise, and its platforms are designed to fortify clients' cyber resilience, reduce attack surfaces, and accelerate the achievement of compliance objectives like FedRAMP and HITRUST.

📋 Description

• Advise clients on technical security or compliance activities • Manage priorities and tasks to achieve delivery utilization targets • Operate professionally internally and with clients • Ensure quality products and services are delivered on time • Continue developing professional skills through relevant industry-specific certifications and maintain strong practice-area knowledge • Collaborate with project managers, quality management, sales, and delivery team members to drive customer satisfaction and meet project deliverables • Develop processes, procedures, and methodologies to enhance testing processes and experience • Assist with report generation and quality assurance processes • Develop client relationships • Assist in scoping prospective engagements and lead engagements from initial stages through implementation and remediation • Manage project escalations for current testing • Mentor and develop less experienced staff • Contribute to Penetration Testing Team success by managing the team to meet business objectives and metrics • Perform internal and external network penetration testing • Perform browser-based, API, and mobile application penetration testing • Perform cloud solution penetration testing, social engineering, and wireless assessments • Conduct security assessments across diverse technologies and implementations • Simulate sophisticated cyberattacks for clients worldwide

🎯 Requirements

• Bachelor's degree (four-year college or university) or equivalent combination of education and work experience • 3+ years’ experience in information security with Web Application and Network penetration testing experience • Experience working with enterprise environments • Hands-on experience with scripting languages such as Python, Powershell, Shell, or Ruby • Experience with one or more IT security compliance frameworks, such as PCI, FISMA, HIPAA, FEDRAMP, or HITRUST • One to three (1-3) years of experience in an IT Security Audit and/or Compliance role • Experience interacting with management in a consultative manner • Strong IT understanding of networks, servers, workstations, and applications • Excellent communication and presentation skills • Ability to travel up to 20% • Deep experience engaging clientele in consulting-related environments • Experience leading penetration team engagements • Experience reverse engineering malware, data obfuscators, or ciphers • Aptitude for technical writing, including assessment reports, presentations, and operating procedures • Strong understanding of security principles, policies, and industry best practices • Experience working with C and various compiler toolchains • Community contributions or participation, including CTF, Hack-the-box, or cyber-defense competitions • Speaking or presentation experience • Public security research experience

🏖️ Benefits

• Flexible work model allowing employees to choose when and where they work most effectively • Employee resource groups • In-person and virtual events • Paid parental leave • Flexible time off • Certification and training reimbursement • Digital mental health and wellbeing support membership • Comprehensive insurance options • Annual incentive, commission, and/or recognition programs may be available