CoalfireCO

Consultant, Penetration Tester - Compliance Security

Coalfire is a cybersecurity advisor that helps private and public-sector organizations avert threats, close gaps, and effectively manage risk. They provide independent, tailored advice, assessments, technical testing, and cyber engineering services to help clients develop scalable programs that improve their security posture and achieve business objectives.

Coalfire

Employee count: 1001-5000

Salary: 64k-117k USD

United States only

About Coalfire

Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Denver, Colorado with offices across the U.S. and U.K., and we support clients around the world.
But that’s not who we are – that’s just what we do.
We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.

Position Summary

Join a collaborative and dynamic team of cybersecurity professionals to conduct cutting-edge penetration testing across a wide range of technologies and environments. As a Consultant, you’ll play a key role in identifying vulnerabilities, simulating real-world cyberattacks, and helping our clients strengthen their security posture.
Your day-to-day will include internal and external network penetration testing, application security assessments (browser-based, API, mobile), cloud environment testing, social engineering engagements, and wireless assessments.

What You’ll Do

  • Perform security assessments across various platforms and technologies
  • Simulate sophisticated cyberattacks to assess and improve client defenses
  • Advise clients on technical security and compliance best practices
  • Manage your own testing priorities and deliver high-quality work on time
  • Collaborate with internal teams - PMs, QA, sales, and other consultants to deliver exceptional client service
  • Create and maintain testing methodologies, documentation, and processes
  • Write detailed, high-quality reports for both technical and executive stakeholders
  • Scope and lead penetration testing engagements from start to finish
  • Help resolve escalations during active assessments
  • Mentor junior team members and contribute to a positive team environment
  • Support the team’s success by contributing to KPIs, innovation, and knowledge sharing

What You’ll Bring

  • Bachelor's degree (four-year college or university) or equivalent combination of education and work experience
  • 3+ years of hands-on experience in network and/or application penetration testing
  • Proficiency with scripting languages such as Python, PowerShell, Shell, or Ruby
  • Familiarity with security frameworks (e.g., PCI, HIPAA, FedRAMP, HITRUST, or FISMA)
  • 1–3 years of experience in IT security audit and/or compliance roles
  • Strong technical foundation in networks, servers, workstations, and applications
  • Experience working in a consulting or client-facing role (minimum 3 years)
  • Strong communication and presentation skills - able to interface with both technical and non-technical stakeholders
  • Willingness to travel occasionally (up to 10%)
  • You should have solid proficiency in at least one of the following areas:
  • Compliance-Driven Penetration Testing (e.g., PCI, FedRAMP)
  • Cloud Penetration Testing (e.g., AWS, Azure, GCP)
  • Network/Active Directory Penetration Testing
  • Application (Web/API/Mobile/Thick) Penetration Testing
  • Secure Code Review
  • Hardware or IoT Testing
  • Container Security Testing
  • AI or ML System Testing
  • What Sets You Apart

  • Proven ability to manage time and juggle multiple tasks under tight deadlines
  • Strong consulting presence - can lead client meetings, kickoff calls, and present findings clearly
  • Excellent report writing skills - capable of drafting both technical detail and executive summaries
  • Continuous learning mindset - actively pursuing certifications and keeping up with threat landscapes

Why You’ll Want to Join Us

At Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.
Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.
At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, our Human Resources team at [email protected].

About the job

Apply before

Posted on

Job type

Full Time

Experience level

Mid-level

Salary

Salary: 64k-117k USD

Location requirements

Hiring timezones

United States +/- 0 hours

About Coalfire

Learn more about Coalfire and their company culture.

View company profile

Coalfire's customers operate in a world where cyber threats are constantly evolving and the security of their digital assets is paramount. Many organizations struggle to navigate the complex landscape of cybersecurity and compliance, facing challenges such as managing vulnerabilities, meeting stringent regulatory requirements like FedRAMP, PCI, HITRUST, ISO, SOC, and CMMC, and securing their cloud environments. This is why Coalfire provides a comprehensive suite of cybersecurity and compliance services, designed to help businesses avert threats, close security gaps, and effectively manage cyber risk. Our customers need to ensure their operations are secure and compliant so they can focus on their core business objectives and drive innovation. We partner with them to develop scalable security programs that not only improve their security posture but also fuel their continued success. Whether it's through independent and tailored advice, thorough assessments, technical testing, or cyber engineering services, Coalfire empowers clients to understand the vulnerabilities and threats their organization faces.

Our clients, which include Fortune 500 companies, cloud service providers, and organizations in sectors like technology, healthcare, finance, and retail, are looking for ways to simplify compliance, reduce risk, and keep their businesses secure. Coalfire addresses these needs by offering expert advisory for global Governance, Risk, and Compliance (GRC) frameworks, a range of cybersecurity services including penetration testing and threat and vulnerability management, and compliance automation through our proprietary platforms. We understand that for many, especially those migrating to or operating in the cloud, the journey can be complex. That's why we offer specialized services like our Accelerated Cloud Engineering (ACE) to help clients deploy FedRAMP-compliant environments efficiently. Our focus on DevSecOps platforms and services aims to integrate security into the development lifecycle, supporting numerous AppSec projects. By providing solutions and services to some of the largest hyperscale Cloud Service Providers and leading SaaS companies, we help our customers leverage security and compliance to their advantage, enabling them to innovate and differentiate themselves in the market.

Claim this profileCoalfire logoCO

Coalfire

View company profile

Similar remote jobs

Here are other jobs you might want to apply for.

View all remote jobs

23 remote jobs at Coalfire

Explore the variety of open remote roles at Coalfire, offering flexible work options across multiple disciplines and skill levels.

View all jobs at Coalfire

Remote companies like Coalfire

Find your next opportunity by exploring profiles of companies that are similar to Coalfire. Compare culture, benefits, and job openings on Himalayas.

View all companies

Find your dream job

Sign up now and join over 85,000 remote workers who receive personalized job alerts, curated job matches, and more for free!

Sign up
Himalayas profile for an example user named Frankie Sullivan
Coalfire hiring Consultant, Penetration Tester - Compliance Security • Remote (Work from Home) | Himalayas