Security Engineer (ConMon)
Free daily job alerts: new jobs like this one, by email.
We confirm your address first. Every email has a one-click unsubscribe.
See a sample email
Sample email, with real jobs open today
Your new matches
New jobs that fit the role, pay and location you choose.
Top-paying open roles
Pay as posted by the employer.
- Engineering Manager, Hardware Platform SecurityAnthropic, San Francisco, CA$485k–625k/yr
- Chief Information Security OfficerMETR, Berkeley$493k–579k/yr
- Principal, AI Transformation, CyberOde with Anthropic, San Francisco$450k–600k/yr
Cleared roles
Postings that mention a clearance requirement.
- Cyber Operations SpecialistDelta Solutions & Strategies, Schriever SFB, CO$95k–100k/yr
- Sr. SQL Database Administrator I (6893)MetroStar, Washington, DC$138k–184k/yr
- Network EngineerAccenture Federal Services, Reston, VA$89k–170k/yr
Remote
- MLOps / DevOps Engineer – AI InfrastructureCreatorIQ, Remote$121k–155k/yr
- Senior Associate, Third Party Risk ManagementUpstart, Remote$91k–145k/yr
- Service Desk Level 1 Analyst (Mexico)DYOPATH, Remote
Every job links to the employer's own application page.
Security Engineer (ConMon) at Coalfire, Remote (US). Pay posted by the employer: $80k–134k/yr. Posted Apr 17, 2024, last seen on the employer's hiring page Nov 5, 2026. Mentioned in the posting: FedRAMP, PCI DSS, HIPAA/HITRUST, CISSP, CISM, CISA.
About Coalfire Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are...
Show full description
What You'll Do
- Join a highly collaborative security operations team delivering vulnerability management services to Cloud Service Providers, and other organizations operating highly regulated environments.
- Communicate alerts to clients related to security anomalies in the environment.
- Assist customers with scanning their FedRAMP environment and managing false positives.
- ·Create a Plan of Action and Milestones (POAM) based on customer scan data.
- Communicate with internal management to provide insights and proposed remediation strategies.
- Create formal documentation, reports, and briefings using technical writing skills.
- Act as a liaison between the vulnerability management team, SRE teams, and customer teams.
- Configure and troubleshoot scanning devices.
- Develop technical solutions to automate repeatable tasks.
- Provide overall guidance, instruction, and thought leadership to clients and team members.
- Opening and following up on tickets and customer requests.
- Utilize tools and analytical skills to investigate the root cause of issues across the technologies.
- Provide oversight and orchestrate key parties from Coalfire and client teams during escalations with a focus on expedited resolution.
What You'll Bring
- US citizenship (required due to client contractual requirements)
- Experience supporting clients in a managed service organization.
- Familiarity with ITSM solutions (e.g., Jira, ServiceNow) and meeting SLAs.
- 2-4 years of experience in professional services, vulnerability management, and compliance monitoring.
- Skills in web application testing, API testing, and network testing.
- Previous experience with tools like Burp Suite Professional or similar DAST tools.
- Ability to analyze information security vulnerabilities and collaborate with teams for remediation.
- Experience with container scanning tools (Prisma/Aquasec/Defender) preferred.
- Experience developing playbooks, runbooks, and troubleshooting technical issues.
- Knowledge of vulnerability scoring systems (CVSS/CMSS).
- Experience with vulnerability scanning tools (e.g., Nessus, Burp Suite).
- Ability to analyze vulnerabilities and adjust risk ratings based on internal factors.
- Familiarity with OS Baseline Configuration standards (e.g., CIS Critical Security Controls Scanning).
- Excellent communication, organizational, and problem-solving skills.
- Experience working with auditors to ensure adherence to controls, policies, and standards.
- Strong documentation skills, including technical diagrams and descriptions.
- Ability to work independently and as part of a team with a professional attitude and demeanor.
- Critical thinking, and ability to balance environmental requirements with mission needs.
- BS or above in a related Information Technology field or equivalent combination of education and experience
Bonus Points
- Previous experience supporting a 24x7x365 security operations for a SaaS vendor
- PCI ASV, CISSP, CISA certifications.
- Certifications in Cloud Vendors, as well with organizations such as PMP, CISSP, CISM, or CISA
- Familiarity with frameworks such as FedRAMP, FISMA, SOC, ISO, HIPAA, HITRUST, PCI, etc.
Hiring for this role? Feature it
Source: Coalfire on Lever. FortHire is not the employer and doesn't take applications. Report a problem or request removal.