{"id":3290984,"url":"https://alion.io/job/coalfire-security-engineer-conmon","title":"Security Engineer (ConMon)","company":{"id":3522,"name":"Coalfire","domain":"coalfire.com","url":"https://alion.io/company/coalfire","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":84,"open_postings":6,"ghost_share":0,"stale_share":0.833,"repost_share":0,"time_to_fill_p50_days":16,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":80000,"max":134000,"currency":"USD","period":"year","gross":null,"usd_annual":134000},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"CVSS","optional":false},{"name":"FedRAMP","optional":false},{"name":"ITSM","optional":false},{"name":"Jira","optional":false},{"name":"Nessus","optional":false},{"name":"ServiceNow","optional":false},{"name":"HIPAA","optional":true}],"status":"live","first_seen_at":"2024-04-17T18:53:09Z","employer_posted_date":"2024-04-17","last_verified_at":"2026-11-03T00:28:20Z","board_verified":true,"closed_at":null,"days_open":929,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":928},"description":"Position Summary\nAs Security Engineer at Coalfire within our Cloud Services group, you will be a self-starter, passionate about cloud security, and thrive on problem solving. You will provide operational support of Vulnerability Management processes for clients with regulatory compliance requirements. The SecOps team is responsible for identifying, assessing, and managing threats, vulnerabilities, and associated risks to client's information assets and resources. You will work within major public clouds and best-of-breed tools, utilizing your technical abilities to monitor vulnerabilities and recommend remediation or resolution.\nWhat You'll Do\nJoin a highly collaborative security operations team delivering vulnerability management services to Cloud Service Providers, and other organizations operating highly regulated environments.\nCommunicate alerts to clients related to security anomalies in the environment.\nAssist customers with scanning their FedRAMP environment and managing false positives.\n·Create a Plan of Action and Milestones (POAM) based on customer scan data.\nCommunicate with internal management to provide insights and proposed remediation strategies.\nCreate formal documentation, reports, and briefings using technical writing skills.\nAct as a liaison between the vulnerability management team, SRE teams, and customer teams.\nConfigure and troubleshoot scanning devices.\nDevelop technical solutions to automate repeatable tasks.\nProvide overall guidance, instruction, and thought leadership to clients and team members.\nOpening and following up on tickets and customer requests.\nUtilize tools and analytical skills to investigate the root cause of issues across the technologies.\nProvide oversight and orchestrate key parties from Coalfire and client teams during escalations with a focus on expedited resolution.\nWhat You'll Bring\nUS citizenship (required due to client contractual requirements)\nExperience supporting clients in a managed service organization.\nFamiliarity with ITSM solutions (e.g., Jira, ServiceNow) and meeting SLAs.\n2-4 years of experience in professional services, vulnerability management, and compliance monitoring.\nSkills in web application testing, API testing, and network testing.\nPrevious experience with tools like Burp Suite Professional or similar DAST tools.\nAbility to analyze information security vulnerabilities and collaborate with teams for remediation.\nExperience with container scanning tools (Prisma/Aquasec/Defender) preferred.\nExperience developing playbooks, runbooks, and troubleshooting technical issues.\nKnowledge of vulnerability scoring systems (CVSS/CMSS).\nExperience with vulnerability scanning tools (e.g., Nessus, Burp Suite).\nAbility to analyze vulnerabilities and adjust risk ratings based on internal factors.\nFamiliarity with OS Baseline Configuration standards (e.g., CIS Critical Security Controls Scanning).\nExcellent communication, organizational, and problem-solving skills.\nExperience working with auditors to ensure adherence to controls, policies, and standards.\nStrong documentation skills, including technical diagrams and descriptions.\nAbility to work independently and as part of a team with a professional attitude and demeanor.\nCritical thinking, and ability to balance environmental requirements with mission needs.\nBS or above in a related Information Technology field or equivalent combination of education and experience\nBonus Points\nPrevious experience supporting a 24x7x365 security operations for a SaaS vendor\nPCI ASV, CISSP, CISA certifications.\nCertifications in Cloud Vendors, as well with organizations such as PMP, CISSP, CISM, or CISA\nFamiliarity with frameworks such as FedRAMP, FISMA, SOC, ISO, HIPAA, HITRUST, PCI, etc.","description_format":"text","description_chars":3736,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Security Compliance"],"lifecycle":[{"event":"open","at":"2026-10-26T20:00:21Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.126,"p_room":0.28,"age_days":928,"expected_fill_days":16,"reasons":["conf:3","win:tail","crowd:junior"],"computed_at":"2026-11-02T06:13:15Z"},"pay":{"stated_usd_annual":134000,"is_top_pay":true},"html_url":"https://alion.io/job/coalfire-security-engineer-conmon","json_url":"https://alion.io/job/coalfire-security-engineer-conmon.json","meta":{"generated_at":"2026-11-03T03:58:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5484,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3522},"rest":"https://alion.io/mcp/rest/get_company?id=3522"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcoalfire-security-engineer-conmon"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcoalfire-security-engineer-conmon"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcoalfire-security-engineer-conmon"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/coalfire-security-engineer-conmon\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcoalfire-security-engineer-conmon"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3290984}},{"tool":"search_jobs","arguments":{"company":"coalfire.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3290984},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}