Principal | Remote US at Coalfire Systems in Westminster, Colorado

Job Description:

Coalfire Systems

Coalfire is an EEO employer. We celebrate diversity and are committed to respecting one another, embracing individual differences, and creating an inclusive environment for all employees.

About Coalfire
Coalfire is on a mission to make the world a safer place by solving our clients' hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Denver, Colorado with offices across the U.S. and U.K., and we support clients around the world.
But that's not who we are – that's just what we do. We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.
Position Summary
The Principal (SME) is considered the Coalfire Application Security subject matter expert in a particular technical area (e.g. application security, network/host security, social engineering, hardware, IoT, etc.), in one or more Cloud platforms (e.g. Google/GCP, AWS, Oracle, etc.) and/or in one or more compliance frameworks (e.g. PCI pen testing, FedRAMP pen testing, etc.)

What You'll Do

• Navigate & assess complex security systems that may impact both risk and compliance for organizations, large and small.
• Effectively manage their network and business relationships to build and cultivate positive customer relationships with cloud service providers if a CSP SME; with external entities and internal practices if a compliance framework SME; or with delivery/sales leaders and security community focus groups if a technical domain SME.
• Engage outwardly into the community through blog posts, technical white papers, forum participation and conference speaking engagements is also essential to the role. Engage inwardly to support business and practice growth by developing Sales/Marketing collateral, delivery methodologies and SOPs, train/mentor colleagues as necessary and be the central
• Business responsibility as the practice subject matter expert (SME) in one or more core and/or strategic services within the Coalfire TVM product portfolio for sales/marketing & delivery support driving practice revenue growth.
• Developing methodologies and SOPs, identifying process improvements, training Delivery personnel on methodologies/tools and quality topics, and mentoring Delivery personnel.
• Author methodologies, templates, white papers, work instructions, guidelines, forms, tools
• Develop and deliver industry specific content, including speaking/presenting at conferences, creating webinars
• Direct advisory work with top tier clients on an ad hoc basis, at any stage of the relationship (pre-sales, project execution, or post engagement support), or packaged as an advisory product.
• Development and delivery of whitepapers and custom webinars/presentations.
• Direct delivery or oversight of client projects, with a particular focus on strategic client work.
• Continuous professional development in maintaining industry specific certifications. Maintains strong depth of knowledge in the specific practice area of expertise.
• Collaborate with project managers, quality management, sales and other delivery team members to drive customer satisfaction and meet project deliverables.

What You'll Bring

• Proven thought leadership in the security community through blog posts, conference speaking, security advocacy, etc.
• High level of familiarity and experience with Open Source Security Testing Methodology Manual (OSSTMM), Open Web Application Security Project (OWASP), National Institute of Standards and Technology (NIST) Special Publications and PTES (Penetration Testing Execution Standard).
• Development and support of a consulting practice including delivery of services in one or more of the above areas of expertise.
• At least one (1) advanced certification like OSCE, OSAE, GXPN, etc
• Bachelor's degree (four-year college or university) or equivalent combination of education and work experience.
• 7+ years experience in an Information Security consulting role with growing level of practice/subject matter responsibility including singular expertise in at least one of the following:
• Network Security (external, internal, wireless networks) and Scripting and OS expertise.
• Cloud Security (AWS, MS Azure, IBM Cloud, GCP, Oracle Cloud)
• Application Security (browser-based, API's, mobile applications, etc.)
• Red Team Operations and Social Engineering
• Compliance Frameworks (FedRAMP, PCI DSS, etc.)

Bonus Points

• Cloud Service penetration testing tradecraft and methodologies across multiple service providers (e.g. AWS, GCP, etc.).
• Mobile platform and application penetration testing tradecraft and methodologies across both widely-used platforms (iOS and Android).
• Red/Purple Team tradecraft and methodologies.
• Social engineering in all its forms.

The salary range listed is a reasonable estimate of the compensation range for this role based on national salary averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs. Why You'll Want to Join Us
At Coalfire, you'll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you'll work most effectively – whether you're at home or an office.
Regardless of location, you'll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You'll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you'll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.
At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, our Human Resources team at HumanResourcesMB@coalfire.com.
Bonus Points



Why you'll want to join us

PI250053085

Apply Now