Consultant, FedRAMP Assessment

Job not on LinkedIn

🕒 June 22

🇺🇸 United States – Remote

💵 $64k - $112k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

💼 Consultant

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Coalfire

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2001

🔒 Cybersecurity

📋 Compliance

🏢 Enterprise

Cybersecurity • Compliance • Enterprise

Coalfire is a cybersecurity services provider that helps businesses improve their security resilience and streamline regulatory compliance. The company offers expert-led services, including threat-focused cybersecurity programs, compliance automation, risk management, and security advisory services across various industries such as financial services, healthcare, retail, and technology. Coalfire is known for its hacker and defender expertise, and its platforms are designed to fortify clients' cyber resilience, reduce attack surfaces, and accelerate the achievement of compliance objectives like FedRAMP and HITRUST.

📋 Description

• Work collaboratively with a team of assessors as a federal compliance specialist (e.g. FedRAMP, NIST 800-171, FISMA, etc.) and assist with the planning of assessment for clients • Draft audit observations that sufficiently address both the required objectives of the regulatory body and the complexity of the client environment • Autonomously leads interview and inquiry walkthroughs with clients to determine the conformity of environments against stated requirements • Assess security vulnerabilities against the appropriate security frameworks • First-level reviewer of drafted audit planning and reporting materials • Pursue and corroborates conclusions derived from inquiry procedures with client while ensuring diligent interview notes are captured • Offline and remote evidence inspection of client provided documentation; appropriately mark artifacts requiring follow-up or additional clarification • Assess client provided documentation for compliance with a variety of standards • Prepare and review assessment reports. • Educate and interpret compliance activities for clients • Manage priorities and tasks to achieve delivery utilization targets • Ensure quality products and services are delivered on time per Coalfire quality standards. • Continuous professional development; maintain industry specific certifications, depth of knowledge, credentials, and designations • Collaborate with project managers, quality management and/or other delivery team members to drive customer satisfaction and meet project deliverables. • Establish and maintain positive collaborative relationships with clients and stakeholders • Identify upsell and cross sell opportunities; escalates to appropriate leadership • Execute, examine, interview and test procedures in accordance with the appropriate control • Ensure cyber security policies are adhered to and that required controls are implemented

🎯 Requirements

• Minimum 2-3 years of experience in the IT industry, with strong familiarity with the applicable NIST Special • Bachelor's degree (four-year college or university) in IT or business, or equivalent combination of education and work experience. • Publications 800-37 Revision 2, 800-53 Revision 5, and 800-53A Revision 5 • Technical and detailed understanding of NIST 800-53 Rev 5 AT, CA, CM, CP, IR, MA, MP, PE, PL, PS, RA, SA, SI control families • Ability to lead testing sessions for assigned controls • Ability to independently research a technical topic and develop logical testing approaches to validate 800-53 control implementations • Ability to assist team members with proper artifact collection and detail to client’s examples of artifacts that will satisfy assessment requiremen • Read and interpret all control families • Read and interpret firewall rulesets and network/boundary/data flow diagrams • Must have one of the following certs: • Cisco Certified Network Associate Security (CCNA Security) • Cisco Certified Network Associate Cyber Security Operations (CCNA Cyber Ops) • Cybersecurity Analyst (CySA+) • GIAC Certified Incident Handler (GCIH) • GIAC Systems and Network Auditor (GSNA) • GIAC Certified Intrusion Analyst (GCIA) • Certified Information Systems Auditor (CISA) • Certified Information System Security Professional or Associate (CISSP or Associate) • Certified Secure Software Lifecycle Professional (CSSLP) • Certified Information Systems Security Officer (CISSO) • CyberSec First Responder (CFR) • CompTIA Advanced Security Practitioner Continuing Education (CASP+) Continuing Education (CE) • CompTIA Cloud+ (Cloud+) • Global Industrial Cyber Security Professional (GICSP) • Securing Cisco® Networks with Threat Detection Analysis (SCYBER)

🏖️ Benefits

• paid parental leave • flexible time off • certification and training reimbursement • digital mental health and wellbeing support membership • comprehensive insurance options