C

Coalfire

Cybersecurity advisory and cloud security services

Principal Google Cloud Security Consultant - GCP and Wiz

Full-Time
$127k - $212k/yr
Expert
Remote in USA
RemoteRemote within the United States, with up to 25% travel required.
CybersecuritySecurity Engineering & Architecture

About the job

Responsibilities
  • Lead secure Google Cloud architecture design and reviews across identity and access management, networking, workload protection, data protection, logging, monitoring, and compliance.
  • Advise enterprise customers on Google Cloud Platform security strategy aligned to business risk, regulatory requirements, and operating priorities.
  • Lead Google Cloud security posture assessments to identify high-impact risks, misconfigurations, control gaps, and operational weaknesses.
  • Advise customers on Wiz use cases such as cloud-native application protection platforms, cloud security posture management, vulnerability prioritization, attack path analysis, entitlement risk, and remediation workflows.
  • Advise customers on Google SecOps, Chronicle, security information and event management strategy, cloud telemetry strategy, detection engineering, and security operations center workflow design.
  • Develop executive-ready findings, prioritized remediation roadmaps, and maturity-based security improvement plans.
  • Lead Security Command Center and Security Command Center Enterprise implementation, configuration, tuning, and operationalization.
  • Integrate Security Command Center findings into vulnerability management, compliance, security operations, and executive risk reporting workflows.
  • Support security information and event management modernization and migration planning, including log source rationalization, detection migration, alert tuning, and operational transition.
  • Help customers move from fragmented monitoring approaches into scalable, cloud-native security operations models.
  • Own complex technical workstreams from discovery through delivery, including technical direction, scope, risks, and stakeholder coordination.
  • Translate technical security findings into clear business risks, investment priorities, and actionable recommendations for senior leaders.
  • Guide customer teams through secure Google Cloud design, configuration, deployment, and operational maturity decisions.
  • Advise on Vertex AI and artificial intelligence workload security, including identity, access control, data protection, governance, logging, and monitoring.
  • Create architecture diagrams, assessment deliverables, roadmaps, implementation documentation, and operational runbooks.
  • Develop repeatable methodologies, assessment frameworks, implementation patterns, reference architectures, and reusable technical assets.
  • Mentor consultants and help raise the overall capability of the Google Cloud Security practice.
  • Provide technical leadership during client reviews, executive briefings, architecture discussions, and operational meetings.
  • Contribute to process improvement and automation initiatives that improve consistency, scalability, and delivery quality.
Desired Qualifications
  • Experience with Wiz, Google SecOps or Chronicle, security information and event management migration, Vertex AI security, Terraform, or related cloud security skills.

About the company

Coalfire provides cybersecurity advisory and managed services to help organizations protect digital assets and secure cloud environments. Its offerings include risk assessments, threat and vulnerability management, compliance assessments, third‑party risk management, and cloud security consulting plus managed security services. It differentiates itself with a focus on regulated industries (HIPAA, HITRUST) and end-to-end services that cover both advisory guidance and ongoing security operations for scalable, compliant cloud deployments. Its goal is to reduce cyber risk and help clients meet regulatory requirements while advancing cybersecurity education through initiatives like the Richard E. Dakin Fund.

Company Size

1,001-5,000

Company Stage

Series B

Total Funding

$9.4M

Headquarters

Westminster, Colorado

Founded

2001

Get referred to Coalfire

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • August 4, 2026 Managed and Transformation Services targets recurring security revenue.
  • May 18, 2026 CPAN expands Coalfire Federal into CMMC-driven defense demand.
  • March 2026 Google Cloud and Drata deals signal stronger platform attach and pipeline leverage.

What critics are saying

  • Coalfire still sells trust in a market increasingly crowded by Drata and Wiz.
  • April 21, 2026 Google Cloud integration deepens partner dependence and weakens pricing power.
  • Dallas County paid $600,000 in January 2026, keeping Coalfire's pentest liability narrative alive.

What makes Coalfire unique

  • Coalfire pairs independent assessments with tools like Compliance Essentials and FastRAMP.
  • March 10, 2026 Drata partnership fuses continuous monitoring with Coalfire validation.
  • August 3, 2026 Wiz alliance and Google Marketplace reach embed compliance into operations.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Flexible Work Hours
  • Remote Work Options
  • Parental Leave
  • Unlimited Paid Time Off
  • Professional Development Budget
  • Mental Health Support
  • Health Insurance
  • Dental Insurance
  • Vision Insurance
  • Life Insurance
  • Disability Insurance

Growth & Insights and Company News

Headcount

6 month growth

0%

1 year growth

0%

2 year growth

0%
PR Newswire
Oct 13th, 2026
Coalfire expands global delivery capabilities with new Buenos Aires office.

Coalfire expands global delivery capabilities with new Buenos Aires office. Oct 13, 2026, 08:03 ET Argentina Integrated Solutions brings cybersecurity and compliance talent into Coalfire's global delivery model to support continued client growth CHICAGO and BUENOS AIRES, Argentina, Oct. 13, 2026 /PRNewswire/ - Coalfire, a leading provider of cybersecurity and compliance services, today announced the opening of Argentina Integrated Solutions (AIS) in Buenos Aires, Argentina. The new location builds on Coalfire's established global presence and marks an important step in the company's continued growth. AIS will connect Argentina-based professionals with Coalfire teams, clients, and delivery capabilities around the world, creating additional capacity for growth while strengthening local collaboration and continuity of service. "Our clients operate in an increasingly global and complex cybersecurity environment, and our delivery model needs to evolve with them," said Brad Little, CEO, Coalfire. "Buenos Aires gives us access to exceptional talent while strengthening the scale, expertise and connectivity of our global teams. This is an investment in how we scale and how we serve our clients." AIS will support Coalfire's broader delivery model across compliance and cybersecurity services as well as related client-service capabilities. The Buenos Aires location represents a key investment in Coalfire's global delivery strategy, expanding the company's ability to scale expertise, serve clients across geographies and support future growth. "This is more than the opening of a new location," said Jim Masella, vice president, Coalfire. "It is an opportunity to bring together local expertise and global collaboration in a way that benefits our people, our clients, and the communities where we operate." The Buenos Aires opening builds on Coalfire's existing international operating model and commitment to a globally connected workforce. Coalfire expects AIS to strengthen the company's delivery capacity and create additional opportunities for integrated teams to serve clients around the world. About Coalfire Coalfire is a cybersecurity and compliance services provider that helps organizations reduce risk and accelerate their most critical technology initiatives. Coalfire's experts advise organizations across industries on cybersecurity strategy, compliance, privacy, cloud security, risk management, and related assurance needs. Learn more at www.coalfire.com. Media Contact: Corey Eldridge Force4 Technology Communications [email protected] SOURCE Coalfire

Yahoo Finance
Oct 13th, 2026
Coalfire opens Buenos Aires office to expand global cybersecurity delivery

Coalfire, a cybersecurity and compliance services provider, has opened a new office in Buenos Aires, Argentina. The unit, called Argentina Integrated Solutions (AIS), was announced on October 13, 2026. AIS will link Argentina-based professionals with Coalfire's teams and clients worldwide. It will support the company's compliance and cybersecurity services and add capacity for growth. "Buenos Aires gives us access to exceptional talent while strengthening the scale, expertise and connectivity of our global teams," said Brad Little, chief executive officer of Coalfire. "This is an investment in how we scale and how we serve our clients." Coalfire expects AIS to strengthen its delivery capacity.

Yahoo Finance
Aug 3rd, 2026
Coalfire joins Wiz Partner Alliance to merge cloud security with compliance management

Coalfire has joined the Wiz Partner Alliance to combine cybersecurity services with cloud security technology. The partnership will integrate Wiz's platform into Coalfire's cloud posture assessment, exposure management, and compliance management services. The collaboration aims to connect security and compliance for cloud customers in regulated industries. Coalfire brings compliance expertise, cloud engineering, and managed security capabilities, whilst Wiz provides cloud-native visibility and risk analysis tools. "Exposure Management Powered by Wiz" will launch on the Google Marketplace. The partnership offers customers flexible options ranging from one-time cloud assessments to continuous compliance monitoring. Services will include managed posture analysis, attack path review, and drift governance, helping organisations transition from periodic manual reviews to ongoing operational support.

PR Newswire
May 19th, 2026
Coalfire launches CMMC Partner Assurance Network to accelerate defence supply chain compliance

Coalfire has launched the CMMC Partner Assurance Network (CPAN), a collaborative ecosystem designed to help Defence Industrial Base organisations navigate Cybersecurity Maturity Model Certification compliance. The marketplace connects defence suppliers with vetted partners supporting readiness, implementation, certification and ongoing compliance. CPAN aims to reduce supply chain risk and accelerate compliance timelines. The network addresses cyber risk concentrated in lower-tier suppliers, where non-compliant subcontractors can jeopardise contract eligibility. The platform provides prime contractors with improved supplier readiness visibility whilst giving subcontractors access to trusted providers, technical guidance and training. CEO Brad Little described CMMC as one of the most significant cybersecurity transformations the Defence Industrial Base has experienced in decades, positioning CPAN as a solution to reduce fragmentation and confusion.

PR Newswire
May 7th, 2026
Fortra pursues FedRAMP High authorization for Data Classification capabilities.

Fortra pursues FedRAMP High authorization for Data Classification capabilities. May 07, 2026, 10:00 ET Advancing Secure Data Classification for U.S. Government Missions MINNEAPOLIS, May 7, 2026 /PRNewswire/ - Fortra today announced it is pursuing Federal Risk and Authorization Management Program (FedRAMP) High authorization for its data classification capabilities, which will further extend its support of U.S. public sector, federal, and defense organizations operating in critical cloud environments. FedRAMP High, required for systems that process the government's most sensitive unclassified data, is the U.S. government's most stringent cloud security authorization. By pursuing this authorization, Fortra aims to enable secure discovery, classification, and movement of data across contested, classified, and disconnected operational environments. "Data classification is the backbone of secure defense collaboration - if it isn't built in from the start, everything else fails," said John Grancarich, EVP, Head of Defense and Intelligence, Fortra. "Pursuing FedRAMP High reflects our long-term commitment to delivering advanced, trusted data security capabilities to government and national security organizations worldwide." Fortra is partnering with Coalfire, a leading cybersecurity advisory firm and accredited Third-Party Assessment Organization (3PAO), to support its FedRAMP High authorization activities. The effort includes significant internal investment in security engineering, compliance maturity, and operational rigor aligned with federal requirements. "Coalfire is proud to support Fortra in pursuing FedRAMP High authorization - an undertaking that demands rigorous security engineering and deep compliance expertise, and one that will ultimately strengthen how federal and defense organizations protect their most sensitive data in the cloud," said Karen Laughton EVP, Advisory Services at Coalfire. Fortra's commitment to FedRAMP demonstrates its broader strategy to deliver advanced security solutions to highly regulated and mission-driven sectors with integrated, resilient cybersecurity solutions. About Fortra Fortra delivers AI-amplified cybersecurity solutions that help organizations use and protect data with confidence. Powered by purpose-built AI, highly unique data sources and intelligence, and modular delivery, Fortra enables organizations to reduce AI risk, identify threats faster, and strengthen their cyber posture. Learn more about the market's most comprehensive cybersecurity platform at fortra.com. SOURCE Fortra