Senior Consultant, Network Security

About Coalfire

Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.

But that’s not who we are – that’s just what we do.

We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.

What You'll Do

• Working independently and collaboratively with a team to both lead and support
• Perform penetration testing on networks, with a focus on internal networks and exploiting Active Directory vulnerabilities
• Dynamically flex your skills when assessing emerging or custom technologies.
• Lead complex engagements to provide a technical consistency approach across multiple tests.
• Contextualize vulnerabilities and assess realistic impact to a client accounting for mitigating and aggravating factors.
• Manage priorities and tasks to achieve utilization targets.
• Operate with professionalism both internally and with clients.
• Ensure quality reports and services are delivered efficiently and on time.
• Support sales and business growth by scoping out potential opportunities.
• Maintains strong depth of knowledge in the practice area.
• Collaborate with project managers, quality management, sales and other delivery team members to drive customer satisfaction and meet project deliverables.

What You'll Bring

• Network penetration testing and assessment tradecraft and methodologies
• Strong working knowledge of at least one programming or scripting languages
• Strong understanding of security principles and industry best practices.
• Minimum of 5 years’ experience in a consulting/professional services role
• Minimum of 5 years’ experience in Network Security
• Excellent consulting skills including:

-

• Time management, performing adjacent tasks while ensuring on-time delivery, escalating issues as needed
• Verbal communication, leading client calls for project kickoffs and debrief
• Written communication
• Report writing, for both executive audiences and technical staff.
• Expert proficiency in Network Penetration Testing, including internal network testing and exploiting Active Directory vulnerabilities

-

Excellent overall technical skills, with strong expertise in at least one of the following

• Social Engineering (both vishing & phishing)
• Physical Penetration Testing
• Mobile Application Penetration Testing
• Thick Application Penetration Testing
• Hardware Penetration Testing
• Secure Code Review
• Container Penetration Testing
• Cloud Penetration Testing
• Network Active Directory Penetration Testing
• AI Penetration Testing

Bonus Points

• OSCP, OSCE, OSEE offensive security certifications
• Significant development and engineering backgrounds
• Cloud Service penetration testing tradecraft and methodologies across multiple service providers (e.g. AWS, GCP, etc.).
• Mobile platform and application penetration testing tradecraft and methodologies across both iOS and Android.
• Red/Purple Team tradecraft and methodologies.
• Social engineering in all its forms.
• AWS Certified Solutions Architect – Professional, AWS Certified Security, AWS Certified Advanced Networking, AWS Certified SysOps Administrator
• Network, Database, System administration experience and certifications