Loading...
Mid LevelFull-timePythonRustAWSGCPAzureKubernetesCI/CDGitAPI
Salary Range
$64,000 - $112,000 /year
About the Role
Coalfire is seeking a continuous monitoring engineer to work on vulnerability management processes, driving compliance and security in cloud-based environments. This role involves managing Plan of Action & Milestones (POA&Ms) and ensuring alignment with frameworks like FedRAMP, HITRUST, and PCI.
Key Responsibilities
- →Manage POA&Ms lifecycle including creation, tracking, risk adjustment justification, and deviation requests
- →Collect, organize, and maintain security control evidence for monthly continuous monitoring deliverables
- →Maintain accurate system inventory and authorization boundary documentation
- →Analyze scan results for false positives and prepare deviation requests
- →Translate technical vulnerability findings into risk-based language for federal clients
- →Collaborate with development, SRE, and infrastructure teams to integrate vulnerability management into CI/CD pipelines
- →Participate in change management processes to ensure continuous monitoring activities align with system changes
- →Support and maintain enterprise vulnerability management tools
- →Run regular and on-demand scans across operating systems, databases, web applications, and containers
- →Track and document vendor dependencies, operational requirements, and open vulnerabilities
- →Contribute to improving internal standards and processes
Requirements
- ✓3–5 years of professional experience in vulnerability management, compliance monitoring, or related security operations roles
- ✓Hands-on expertise with operating system, database, network, container, web application, and API vulnerability management
- ✓Direct experience supporting vulnerability management in at least two of the following cloud providers: AWS, Azure, GCP
- ✓Background working within at least one compliance framework (FedRAMP, HITRUST, PCI)
- ✓Experience delivering monthly or periodic vulnerability status reports
- ✓Administrator-level certification in AWS, Azure, or GCP
- ✓Working knowledge of cloud architecture and security controls in AWS, Azure, or GCP
- ✓Strong knowledge of vulnerability scanning technologies and methods
- ✓Understanding of NIST 800-53 security controls
- ✓Experience with STIG benchmarks and automated compliance scanning tools
- ✓Familiarity with baseline configuration standards (CIS Benchmarks, vendor hardening guides)
- ✓Ability to distinguish false positives from true vulnerabilities
- ✓Proficiency in scripting languages (Python, PowerShell, Bash)
- ✓Strong client-facing communication and documentation skills
- ✓Ability to work efficiently with cross-functional technical teams
- ✓Bachelor’s degree or equivalent work experience.
Free to sign up. Takes 30 seconds.
