Summer 2024
Intern – 2024 Summer Internship
Posted on 3/12/2024
Coalfire
1,001-5,000 employees
Cybersecurity advisory and cloud security services
No salary listed
United States
This role can be a remote, hybrid, or in-office position depending on the candidate's preference and location in proximity to one of Coalfire's offices. Coalfire is headquartered in Denver, Colorado with offices across the U.S. and U.K., and supports clients around the world. The actual work model provides flexibility for employees to choose when and where they work most effectively, whether at home or in an office.
This role can be a remote, hybrid, or in-office position depending on the candidate's preference and location in proximity to one of Coalfire's offices. Coalfire is headquartered in Denver, Colorado with offices across the U.S. and U.K., and supports clients around the world. The actual work model provides flexibility for employees to choose when and where they work most effectively, whether at home or in an office.
This role can be a remote, hybrid, or in-office position depending on the candidate's preference and location in proximity to one of Coalfire's offices. Coalfire is headquartered in Denver, Colorado with offices across the U.S. and U.K., and supports clients around the world. The actual work model provides flexibility for employees to choose when and where they work most effectively, whether at home or in an office.
Bachelor's, Master's
 Software Engineering |
|---|
Get referred to Coalfire
See people who can refer or advise you
- Enrollment in a relevant undergraduate or graduate program (e.g., Computer Science, Applied Mathematics, Information Technology Infrastructure, Data Science, Cybersecurity)
- Proficiency in programming languages such as Python, Java, JavaScript, HTML, CSS, and SQL
- Experience with frameworks such as React, Node.js, Express.js, Svelte, and D3.js for web development and information visualization
- Knowledgeable in developing and using APIs for software integration and functionality enhancement
- Strong foundation in Machine Learning, Natural Language Processing and the ability to apply these techniques to solve real-world problems
- Utilize coding skills across various programming languages to develop and improve software components within the ThreadFix platform
- Apply Machine Learning and Natural Language processing techniques to analyze and interpret complex datasets, improving the platform's ability to understand and categorize cybersecurity threats
- Create compelling information visualizations that offer intuitive insights into cybersecurity data, enabling stakeholders to grasp complex information quickly
- Develop and integrate APIs to enhance the functionality and interoperability of the ThreadFix platform, ensuring seamless integration with other tools and systems
- Participate in the entire software development lifecycle, from ideation to deployment, ensuring high-quality solutions are delivered efficiently
- Collaborate with cross-functional teams to identify opportunities for improvement and innovate solutions that address pressing cybersecurity challenges
- Experience with Machine Learning and Natural Language Processing
- Ability to work collaboratively in a team environment as well as independently on projects with minimal supervision
- Proactive approach to problem-solving, with a keen interest in learning new technologies and methodologies
Coalfire provides cybersecurity advisory and managed services to help organizations protect digital assets and secure cloud environments. Its offerings include risk assessments, threat and vulnerability management, compliance assessments, third‑party risk management, and cloud security consulting plus managed security services. It differentiates itself with a focus on regulated industries (HIPAA, HITRUST) and end-to-end services that cover both advisory guidance and ongoing security operations for scalable, compliant cloud deployments. Its goal is to reduce cyber risk and help clients meet regulatory requirements while advancing cybersecurity education through initiatives like the Richard E. Dakin Fund.
Company Size
1,001-5,000
Company Stage
Series B
Total Funding
$9.4M
Headquarters
Westminster, Colorado
Founded
2001
Get referred to Coalfire
See people who can refer or advise you
Simplify's Take
What believers are saying
- April-August 2026 partnerships with Google Cloud, Drata, and Wiz broaden distribution.
- May 2026 CPAN targets CMMC demand as Defense Industrial Base suppliers scramble for certification.
- May 2026 Audit AI and AI threat hunting monetize the surge in AI governance.
What critics are saying
- Apax-owned Coalfire depends on FedRAMP and CMMC cycles; policy shifts hit revenue fast.
- Advisor-assessor conflicts force split engagements, weakening end-to-end sales against integrated rivals.
- Google Cloud and Wiz internalize compliance workflows, stripping Coalfire of assessor economics.
What makes Coalfire unique
- Coalfire remains the leading FedRAMP assessor, with Google, Drata, and Wiz partnerships.
- Its Compliance Essentials plus human validation bridge continuous monitoring and formal audits.
- It spans 100-plus frameworks across federal, cloud, healthcare, and regulated enterprise buyers.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Flexible Work Hours
Remote Work Options
Parental Leave
Unlimited Paid Time Off
Professional Development Budget
Mental Health Support
Health Insurance
Dental Insurance
Vision Insurance
Life Insurance
Disability Insurance
Growth & Insights and Company News
6 month growth
↑ 0%1 year growth
↑ 0%2 year growth
↑ 1%Coalfire has joined the Wiz Partner Alliance to combine cybersecurity services with cloud security technology. The partnership will integrate Wiz's platform into Coalfire's cloud posture assessment, exposure management, and compliance management services. The collaboration aims to connect security and compliance for cloud customers in regulated industries. Coalfire brings compliance expertise, cloud engineering, and managed security capabilities, whilst Wiz provides cloud-native visibility and risk analysis tools. "Exposure Management Powered by Wiz" will launch on the Google Marketplace. The partnership offers customers flexible options ranging from one-time cloud assessments to continuous compliance monitoring. Services will include managed posture analysis, attack path review, and drift governance, helping organisations transition from periodic manual reviews to ongoing operational support.
Coalfire has launched the CMMC Partner Assurance Network (CPAN), a collaborative ecosystem designed to help Defence Industrial Base organisations navigate Cybersecurity Maturity Model Certification compliance. The marketplace connects defence suppliers with vetted partners supporting readiness, implementation, certification and ongoing compliance. CPAN aims to reduce supply chain risk and accelerate compliance timelines. The network addresses cyber risk concentrated in lower-tier suppliers, where non-compliant subcontractors can jeopardise contract eligibility. The platform provides prime contractors with improved supplier readiness visibility whilst giving subcontractors access to trusted providers, technical guidance and training. CEO Brad Little described CMMC as one of the most significant cybersecurity transformations the Defence Industrial Base has experienced in decades, positioning CPAN as a solution to reduce fragmentation and confusion.
Fortra pursues FedRAMP High authorization for Data Classification capabilities. May 07, 2026, 10:00 ET Advancing Secure Data Classification for U.S. Government Missions MINNEAPOLIS, May 7, 2026 /PRNewswire/ - Fortra today announced it is pursuing Federal Risk and Authorization Management Program (FedRAMP) High authorization for its data classification capabilities, which will further extend its support of U.S. public sector, federal, and defense organizations operating in critical cloud environments. FedRAMP High, required for systems that process the government's most sensitive unclassified data, is the U.S. government's most stringent cloud security authorization. By pursuing this authorization, Fortra aims to enable secure discovery, classification, and movement of data across contested, classified, and disconnected operational environments. "Data classification is the backbone of secure defense collaboration - if it isn't built in from the start, everything else fails," said John Grancarich, EVP, Head of Defense and Intelligence, Fortra. "Pursuing FedRAMP High reflects our long-term commitment to delivering advanced, trusted data security capabilities to government and national security organizations worldwide." Fortra is partnering with Coalfire, a leading cybersecurity advisory firm and accredited Third-Party Assessment Organization (3PAO), to support its FedRAMP High authorization activities. The effort includes significant internal investment in security engineering, compliance maturity, and operational rigor aligned with federal requirements. "Coalfire is proud to support Fortra in pursuing FedRAMP High authorization - an undertaking that demands rigorous security engineering and deep compliance expertise, and one that will ultimately strengthen how federal and defense organizations protect their most sensitive data in the cloud," said Karen Laughton EVP, Advisory Services at Coalfire. Fortra's commitment to FedRAMP demonstrates its broader strategy to deliver advanced security solutions to highly regulated and mission-driven sectors with integrated, resilient cybersecurity solutions. About Fortra Fortra delivers AI-amplified cybersecurity solutions that help organizations use and protect data with confidence. Powered by purpose-built AI, highly unique data sources and intelligence, and modular delivery, Fortra enables organizations to reduce AI risk, identify threats faster, and strengthen their cyber posture. Learn more about the market's most comprehensive cybersecurity platform at fortra.com. SOURCE Fortra
Coalfire, a cybersecurity services company, will integrate its Compliance Essentials platform with Google Cloud's Compliance and Audit Manager to embed compliance and audit readiness directly into cloud operations. The integration aims to reduce audit friction by combining automated, real-time compliance signals with audit capabilities. It addresses the gap between cloud-native evidence collection and formal audit validation, transforming compliance from a periodic activity into an on-demand operational capability. Google Cloud will provide continuous compliance signals across customer workloads, whilst Coalfire will contribute professional assessment and validation expertise. The collaboration targets highly regulated enterprises adopting cloud technologies, enabling them to maintain continuous audit readiness whilst simplifying compliance management. Coalfire, headquartered in Chicago, is the foremost provider of FedRAMP compliance assessments in the United States.
Coalfire to operationalize Cloud Compliance with Google Cloud. PR Newswire Today at 5:03am PDT Customers benefit from reduced complexity and shortened time to certification CHICAGO, April 21, 2026 /PRNewswire/ - Coalfire, an industry-leading cybersecurity services and solutions company, today announced it will integrate its Compliance Essentials platform with Google Cloud's Compliance and Audit Manager. This will enable compliance and audit readiness to be embedded directly into cloud operations. Coalfire and Google Cloud aim to help organizations reduce audit friction by unifying automated, real-time compliance signals with trusted audit and assessment capabilities. Through the integration of Google Cloud Compliance and Audit Manager with Coalfire's Compliance Essentials platform, customers gain a unified, automated approach to compliance that reduces complexity and shortens the time required to achieve certification. This integration aligns cloud operations, compliance automation, and audit execution into a cohesive experience, allowing regulated organizations to accelerate innovation, scale securely, and maintain trust without compromising operational efficiency. Coalfire also will work to address the long-standing gap between cloud-native evidence collection and formal audit validation. Google Cloud provides continuous, real-time compliance signals across customer workloads, while Coalfire contributes professional assessment and validation expertise. The result is a unified view in which technical evidence generated within Google Cloud is validated by Coalfire auditors, thus transforming compliance from a periodic, point-in-time activity into an on-demand operational capability. Brad Little, CEO, Coalfire, said: "Cloud modernization only works when security, compliance, and trust are engineered into the program, rather than bolted on later as an afterthought. This collaboration underscores our commitment to supporting highly regulated enterprises as they adopt cloud technologies with confidence. By combining Google Cloud's scalable compliance automation with Coalfire's deep audit and assurance expertise, customers can maintain continuous audit readiness while simplifying how compliance is managed across their cloud environments." Michael Bachman, VP and GM, Cloud Foundations, Google Cloud, said: "At Google Cloud, we are focused on making security and compliance seamless for our customers. By integrating Google Cloud's Compliance and Audit Manager with Coalfire's assessment expertise, we are bridging the gap between automated evidence collection and formal audit validation. This collaboration enables customers to reduce audit friction, minimize complexity, and transform compliance from a periodic burden into a continuous, on-demand capability." For more details on this collaboration, please visit here. About Coalfire: Coalfire, headquartered in Chicago, Ill., is a global services and solutions company that specializes in cyber advisory, assessment, and security. The company also develops cutting-edge technology platforms that automate defenses against security threats for the world's leading enterprises, cloud providers, and SaaS companies. Coalfire is the foremost provider of FedRAMP compliance assessments and penetration testing services in the United States. For more information, visit www.coalfire.com and follow LinkedIn, Twitter, and Facebook. Media Contact Corey Eldridge Force4 Technology Communications [email protected] SOURCE Coalfire This is a paid placement. For further inquiries, please contact PR Newswire directly.