Cybersecurity and compliance advisory for regulated industries
Coalfire operates as a full-service cybersecurity and compliance firm serving tech, healthcare, and finance. The tech stack reveals heavy operational reliance on scanning and vulnerability management (Tenable, Nessus, Qualys, Rapid7, Wiz, Burp Suite) alongside compliance automation (Vanta, Drata, OneTrust), paired with cloud infrastructure work across AWS, Azure, and GCP. The hiring surge is security-focused (12 open security roles, accelerating velocity), and active projects cluster around federal defense compliance, programmatic security offerings, and cloud architecture — indicating a strategic pivot toward repeatability and scale in highly regulated engagements.
Coalfire provides cybersecurity assessments, penetration testing, and compliance advisory services to midmarket and enterprise clients in tech, healthcare, and finance. Core service areas include IT audits, risk assessments, PCI-DSS, HIPAA/HITRUST, FedRAMP, and third-party risk management. The firm operates with 1,001–5,000 employees from its Chicago headquarters, founded in 2001. Projects emphasize federal defense compliance, cloud security strategy, and automation of both offensive and defensive security workflows.
Coalfire's stack includes AWS, Azure, GCP for cloud; Tenable, Nessus, Qualys, Rapid7, Wiz, and Burp Suite for vulnerability scanning; Vanta, Drata, and OneTrust for compliance automation; and Splunk, Elasticsearch, Sumo Logic, and Sentinel for security monitoring and logging.
Yes. Coalfire has 12 open security roles with accelerating hiring velocity. Seniority mix is senior-heavy (15 senior roles across the company, 4 mid-level, 4 principal). All hiring is currently in the United States.
Coalfire actively uses AWS, Azure, and GCP, with current projects focused on federal defense compliant cloud infrastructure and large-scale cloud engagements. Cloud security strategy development is listed as an active initiative.
Other companies in the same industry, closest in size