Security Engineer – ConMon

Job not on LinkedIn

🔥 7 minutes ago

🇺🇸 United States – Remote

💵 $80k - $134k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Coalfire

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2001

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Coalfire is a cybersecurity services provider that helps businesses improve their security resilience and streamline regulatory compliance. The company offers expert-led services, including threat-focused cybersecurity programs, compliance automation, risk management, and security advisory services across various industries such as financial services, healthcare, retail, and technology. Coalfire is known for its hacker and defender expertise, and its platforms are designed to fortify clients' cyber resilience, reduce attack surfaces, and accelerate the achievement of compliance objectives like FedRAMP and HITRUST.

📋 Description

• Provide operational support for vulnerability management processes for clients with regulatory compliance requirements • Join a collaborative security operations team delivering vulnerability management services to cloud service providers and highly regulated organizations • Communicate security anomaly alerts to clients • Assist customers with scanning FedRAMP environments and managing false positives • Create Plans of Action and Milestones (POAMs) from customer scan data • Communicate insights and proposed remediation strategies to internal management • Create formal documentation, reports, and briefings • Liaise between vulnerability management, SRE, and customer teams • Configure and troubleshoot scanning devices • Develop technical solutions to automate repeatable tasks • Provide guidance, instruction, and thought leadership to clients and team members • Open and follow up on tickets and customer requests • Investigate root causes of issues across technologies • Coordinate Coalfire and client teams during escalations to expedite resolution

🎯 Requirements

• US citizenship required due to client contractual requirements • Experience supporting clients in a managed service organization • Familiarity with ITSM solutions such as Jira and ServiceNow and meeting SLAs • 2-4 years of experience in professional services, vulnerability management, and compliance monitoring • Skills in web application testing, API testing, and network testing • Previous experience with Burp Suite Professional or similar DAST tools • Ability to analyze information security vulnerabilities and collaborate with teams for remediation • Experience with container scanning tools such as Prisma, Aquasec, or Defender preferred • Experience developing playbooks, runbooks, and troubleshooting technical issues • Knowledge of vulnerability scoring systems such as CVSS/CMSS • Experience with vulnerability scanning tools such as Nessus and Burp Suite • Ability to analyze vulnerabilities and adjust risk ratings based on internal factors • Familiarity with OS Baseline Configuration standards, such as CIS Critical Security Controls Scanning • Experience working with auditors to ensure adherence to controls, policies, and standards • Strong documentation skills, including technical diagrams and descriptions • Ability to work independently and as part of a team with a professional attitude and demeanor • Critical thinking and ability to balance environmental requirements with mission needs • BS or above in a related Information Technology field, or equivalent combination of education and experience • Bonus: Previous experience supporting 24x7x365 security operations for a SaaS vendor • Bonus: PCI ASV, CISSP, CISA, cloud vendor, PMP, CISM, or CISA certifications • Bonus: Familiarity with FedRAMP, FISMA, SOC, ISO, HIPAA, HITRUST, or PCI frameworks

🏖️ Benefits

• Flexible work model allowing work from home or an office • Employee resource groups • In-person and virtual events • Paid parental leave • Flexible time off • Certification and training reimbursement • Digital mental health and wellbeing support membership • Comprehensive insurance options • Potential eligibility for annual incentive, commission, and/or recognition programs