Consultant, FedRAMP Assessment

{
  "content_hash": "22022893f85ffec3763861a714046b7286ecc18aef675414e89121ca885b0c1b",
  "source_hash": "c9cdabd74831ba59df0d24e2399bbed317fdec354480cc424e83fa3f938855ac",
  "last_changed_at": "2026-05-31T10:40:12.189Z",
  "active_status": "deleted"
}

{
  "language": "en",
  "location": {
    "raw": "United States",
    "city": null,
    "region": null,
    "country": "United States",
    "is_remote": true,
    "confidence": 0.95
  },
  "salary_max": 122689,
  "salary_min": 71000,
  "inferred_at": "2026-05-29T07:02:39.198Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "United States",
      "city": null,
      "region": null,
      "country": "United States",
      "is_remote": true,
      "confidence": 0.95
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": "remote",
  "salary_period": "year",
  "workplace_type": "remote",
  "salary_currency": "USD"
}

{}

{
  "lists": [
    {
      "text": "What You'll Do",
      "content": "<div>\n\n<li>Work collaboratively with a team of assessors as a federal compliance specialist (e.g. FedRAMP, NIST 800-171, FISMA, etc.) and assist with the planning of assessment for clients</li>\n<li>Draft audit observations that sufficiently address both the required objectives of the regulatory body and the complexity of the client environment</li>\n<li>Autonomously leads interview and inquiry walkthroughs with clients to determine the conformity of environments against stated requirements</li>\n<li>Assess security vulnerabilities against the appropriate security frameworks</li>\n<li>First-level reviewer of drafted audit planning and reporting materials</li>\n<li>Pursue and corroborates conclusions derived from inquiry procedures with client while ensuring diligent interview notes are captured</li>\n<li>Offline and remote evidence inspection of client provided documentation; appropriately mark artifacts requiring follow-up or additional clarification</li>\n<li>Assess client provided documentation for compliance with a variety of standards</li>\n<li>Prepare and review assessment reports.</li>\n<li>Educate and interpret compliance activities for clients</li>\n<li>Manage priorities and tasks to achieve delivery utilization targets</li>\n<li>Ensure quality products and services are delivered on time per Coalfire quality standards.</li>\n<li>Continuous professional development; maintain industry specific certifications, depth of knowledge, credentials, and designations</li>\n<li>Collaborate with project managers, quality management and/or other delivery team members to drive customer satisfaction and meet project deliverables.</li>\n<li>Establish and maintain positive collaborative relationships with clients and stakeholders</li>\n<li>Identify upsell and cross sell opportunities; escalates to appropriate leadership</li>\n<li>Execute, examine, interview and test procedures in accordance with the appropriate control</li>\n<li>Ensure cyber security policies are adhered to and that required controls are implemented</li>\n<li>Review and assess respective information system security plans to ensure control requirements are met</li>\n<li>Understand how to apply quality standards and adheres to a minimum benchmark for quality assurance throughout the documentation of each work product or deliverable</li>\n<li>Provide advice to customers on issues affecting the scope of work in a manner that provides additional value</li>\n<li>Develop documentation and author recommendations associate with your findings on how to improve the customer’s security posture in accordance with appropriate controls</li>\n<li>Travel 20%</li>\n\n</div>"
    },
    {
      "text": "What You'll Bring",
      "content": "\n<li>Minimum 2-3 years of experience in the IT industry, with strong familiarity with the applicable NIST Special Publications 800-37 Revision 2, 800-53 Revision 5, and 800-53A Revision 5</li>\n<li>Technical and detailed&nbsp;understanding of NIST 800-53 Rev 5 AT, CA, CM, CP, IR, MA, MP, PE, PL, PS, RA, SA, SI control families</li>\n<li>Ability to lead testing sessions for assigned controls</li>\n<li>Ability to independently research a technical topic and develop logical testing approaches to validate 800-53 control implementations</li>\n<li>Ability to assist team members with proper artifact collection and detail to client’s examples of artifacts that will satisfy assessment requirements</li>\n<li>Read and interpret all control families</li>\n<li>Read and interpret firewall rulesets and network/boundary/data flow diagrams&nbsp;</li>\n<li>Strong written and verbal communication skills including the ability to explain technical matters to a non-technical audience&nbsp;</li>\n<li>Strong personal initiative to appropriately manage time and meet deadlines&nbsp;</li>\n<li>Strong Consulting skills; ability to advise and challenge the status quoe&nbsp;while building strong relationships&nbsp;</li>\n<li>Ability to build high-trust relationship and credibility quickly&nbsp;</li>\n<li>High attention to detail&nbsp;&nbsp;</li>\n<li>Ability to facilitate meetings to small or large groups&nbsp;</li>\n<li>Diplomatic and broad minded&nbsp;</li>\n<li>Strong technical researcher&nbsp;</li>\n<li>Bachelor's degree (four-year college or university) in IT or business, or equivalent combination of education and work experience</li>\n<li>Possess one of the following certs:</li>\n\n<div style=\"padding-left: 80px;\">●&nbsp;&nbsp;&nbsp;&nbsp; Cisco Certified Network Associate Security (CCNA Security)<br aria-hidden=\"true\">●&nbsp;&nbsp;&nbsp;&nbsp; Cisco Certified Network Associate Cyber Security Operations (CCNA Cyber Ops)<br aria-hidden=\"true\">●&nbsp;&nbsp;&nbsp;&nbsp; Cybersecurity Analyst (CySA+)<br aria-hidden=\"true\">●&nbsp;&nbsp;&nbsp;&nbsp; GIAC Certified Incident Handler (GCIH)<br aria-hidden=\"true\">●&nbsp;&nbsp;&nbsp;&nbsp; GIAC Systems and Network Auditor (GSNA)<br aria-hidden=\"true\">●&nbsp;&nbsp;&nbsp;&nbsp; GIAC Certified Intrusion Analyst (GCIA)<br aria-hidden=\"true\">●&nbsp;&nbsp;&nbsp;&nbsp; Certified Information Systems Auditor (CISA)<br aria-hidden=\"true\">●&nbsp;&nbsp;&nbsp;&nbsp; Certified Information System Security Professional or Associate (CISSP or Associate)<br aria-hidden=\"true\">●&nbsp;&nbsp;&nbsp;&nbsp; Certified Secure Software Lifecycle Professional (CSSLP)<br aria-hidden=\"true\">●&nbsp;&nbsp;&nbsp;&nbsp; Certified Information Systems Security Officer (CISSO)<br aria-hidden=\"true\">●&nbsp;&nbsp;&nbsp;&nbsp; CyberSec First Responder (CFR)<br aria-hidden=\"true\">●&nbsp;&nbsp;&nbsp;&nbsp; CompTIA Advanced Security Practitioner Continuing Education (CASP+) Continuing Education (CE)<br aria-hidden=\"true\">●&nbsp;&nbsp;&nbsp;&nbsp; CompTIA Cloud+ (Cloud+)<br aria-hidden=\"true\">●&nbsp;&nbsp;&nbsp;&nbsp; Global Industrial Cyber Security Professional (GICSP)<br aria-hidden=\"true\">●&nbsp;&nbsp;&nbsp;&nbsp; Securing Cisco® Networks with Threat Detection Analysis (SCYBER)<br aria-hidden=\"true\">●&nbsp;&nbsp;&nbsp;&nbsp; BCR Cyber Technical Proficiency Testing Activity</div>\n<div>&nbsp;</div>"
    },
    {
      "text": "Bonus Points",
      "content": "<div>\n\n<li>Expertise in security frameworks and regulatory requirements (such as SOC 2, ISO, NIST, COBIT, HIPAA/HITECH, HITRUST or PCI).</li>\n<li>Experience working with technologies hosted via cloud computing environments (e.g., Amazon Web Services, Microsoft Azure, Google Cloud Platform)</li>\n<li>Experience reviewing Nessus output a plus, along with basic knowledge of networking components and&nbsp;various operating  systems in a cloud environment, including UNIX and Microsoft.&nbsp;</li>\n<li>Expertise in other Security Frameworks (ISO, NIST, COBIT, HIPAA/HITECH, etc.) and regulatory requirements.</li>\n<li>\n<div><span role=\"presentation\" dir=\"ltr\">A2LA R311&nbsp;</span><span role=\"presentation\" dir=\"ltr\">certification:</span></div>\n\n</li><li data-olk-copy-source=\"MailCompose\">CompTIA Advanced Security Practitioner (CASP+) Continuing Education (CE)</li>\n<li data-olk-copy-source=\"MailCompose\">GIAC Certified Enterprise Defender (GCED)</li>\n<li>GIAC Certified Incident Handler (GCIH)</li>\n<li>GIAC Security Leadership (GSLC)</li>\n<li>Certified Information Systems Auditor (CISA)</li>\n<li>Certified Information Security Manager (CISM)</li>\n<li>Certified Cloud Security Professional (CCSP)</li>\n<li>CISSP-Information Systems Security Architecture Professional (CISSP-ISSAP)</li>\n<li>CISSP-Information Systems Security Engineering Professional (CISSP-ISSEP)</li>\n<li>CISSP-Information Systems Security Management Professional (CISSP-ISSMP)</li>\n<li>CyberSec First Responder (CFR)</li>\n<li>Certified Chief Information Security Officer (CCISO)</li>\n<li>BCR Cyber Technical Proficiency Testing Activity</li>\n\n\n\n</div>"
    }
  ],
  "country": "US",
  "createdAt": 1777466884593,
  "updatedAt": null,
  "categories": {
    "team": "Cloud Infrastructure/Global Tech",
    "location": "United States",
    "commitment": "Regular Full Time",
    "department": "Assessment Services",
    "allLocations": [
      "United States"
    ]
  },
  "salaryRange": {
    "max": 122689,
    "min": 71000,
    "currency": "USD",
    "interval": "per-year-salary"
  },
  "workplaceType": "remote"
}