Top Cyber Security Jobs in Denver & Boulder, CO

Design and operate secure endpoint and SaaS controls across GitLab’s remote workforce, with a primary focus on macOS. Build Terraform and GitOps automation, enforce security baselines, manage patching and software distribution, improve endpoint telemetry and detections, and partner with IT and security teams. Mentor engineers and serve as a senior escalation point for complex endpoint security issues.

Lead the architecture and engineering of production-grade agentic AI platforms for offensive cybersecurity operations. Design multi-agent workflows, execution harnesses, memory, tool calling, model routing, retrieval, and enterprise integrations. Establish security, evaluation, observability, reliability, and AI safety practices, including sandboxing, authorization, secrets management, guardrails, and defenses against prompt injection and data leakage. Mentor engineers, guide cross-functional architecture decisions, and communicate tradeoffs to senior leadership.

Build and operate central security systems, automation, tooling, and controls across cloud infrastructure, identity, access, products, partners, and vendors. Develop AI-assisted security workflows, lead external assessments through verified remediation, identify and validate vulnerabilities, guide engineering teams, and participate in incident response. The role requires production security engineering experience, strong programming skills, cloud security expertise, and fintech, payments, or crypto experience.

Design, build, and operate secure LLM platforms, RAG pipelines, and agentic workflows for security analytics and threat detection. Develop AI security controls, monitoring models, governance frameworks, and adversarial testing protocols. Protect AI systems against prompt injection, unauthorized access, model drift, and adversarial abuse while integrating automation into security operations. Requires Python, enterprise LLM platform, cloud-native security, and AI threat-modeling expertise.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Develops and validates product security solutions for embedded computing systems. Responsibilities include implementing cybersecurity features, applying RMF and A&A processes, defining security requirements, assessing risks and vulnerabilities, evaluating remediation costs, coordinating with engineering and program teams, and ensuring compliance with DoD and government security standards. Requires 25% travel, minimal direction, and an active U.S. TS/SCI clearance.

Designs and develops IAM and security software, automation, APIs, and microservices. Integrates security into cloud and CI/CD environments, conducts code reviews and threat modeling, monitors security events, supports incident response, and advises teams on identity architecture and best practices. Requires extensive IAM administration, programming, cloud, containerization, and secure-coding experience.

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.

Designs and deploys enterprise IAM and Zero Trust architectures across corporate and vendor environments. The role establishes MFA, SSO, privileged access, segmentation, and security effectiveness metrics; integrates AI-driven threat detection and automation; analyzes threat intelligence; remediates vulnerabilities; and leads security architecture intake for enterprise initiatives. It requires cross-functional collaboration with IT, compliance, and business teams.

Develops and maintains spacecraft security architecture, translates system security requirements into component controls, assesses cybersecurity compliance, conducts threat analysis, and supports RMF, A&A, and ATO activities. The role collaborates with systems, hardware, software, and program teams; contributes to acquisition and protection documentation; identifies cyber risks; recommends mitigations; and promotes secure-by-design engineering practices.

Leads technical pre-sales architecture for complex security solutions serving public-sector and commercial customers. Translates business, security, compliance, and technical requirements into solution designs, bills of materials, statements of work, estimates, pricing, assessments, and deployment plans. Conducts discovery sessions, architecture workshops, solution reviews, and customer presentations while partnering with sales, delivery teams, and security vendors. Mentors architects and sellers, supports regional customer activity, and travels throughout the Southeast as needed.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Build and operate secure AI platforms, agent workflows, and reusable automation patterns. Embed security into SDLC and PDLC through threat modeling, scanning, secrets detection, supply-chain controls, and automated reviews. Develop AWS identity, network, access, and infrastructure guardrails, including zero-trust and privileged-access automation. Own production services, monitoring, incident response, and on-call support while partnering with teams across the company to enable secure self-service workflows.

Lead the enterprise information security architecture strategy, roadmap, standards, governance, and security-by-design practices across cloud, hybrid, and on-premise environments. Oversee threat modeling, zero-trust principles, security baselines, architecture escalations, vulnerability mitigation, vendor evaluations, compliance mapping, and strategic program delivery. Partner with engineering, product, network operations, and executive leadership while managing security architecture teams and translating complex risks into business impacts.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Leads technical pre-sales and consulting engagements for Microsoft security, compliance, cloud, and AI solutions. Develops customer and competitive strategies, designs architectures, leads demonstrations and proofs of concept, resolves technical blockers, enables partners, and influences customer decision-makers. Provides thought leadership, training, mentoring, and technical community leadership across XDR, zero trust, cloud security, Microsoft Purview, data protection, governance, privacy, and regulatory compliance.

Leads enterprise AI security and GenAI data protection, owning the AI Gateway from evaluation through deployment and operations. Designs monitoring, coaching, redaction, quarantine, and blocking controls for prompts, uploads, browser traffic, copilots, agents, and integrations. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures control effectiveness, and supports audit and regulatory readiness while enabling responsible AI adoption.

Lead Buffer’s security strategy and execution as a hands-on security engineer. Responsibilities include application and API security, secure development practices, AI threat modeling, incident leadership, vulnerability disclosure, SOC 2 and customer compliance, security automation, and infrastructure risk assessment. The role partners closely with engineering and business teams, writes and reviews code, supports on-call operations, and establishes security standards in a distributed SaaS environment.

Provides technical leadership for cybersecurity engineering on AWACS aircraft and ground-system modernization programs. Responsibilities include secure network and communications architecture, RMF compliance, ATO/IATT and POA&M development, cyber risk assessments, avionics and mission-system integration, TEMPEST compliance, security requirements, and design reviews. The role supervises personnel and collaborates with systems, software, avionics, and test engineering teams. Active Secret clearance and significant military aviation cybersecurity experience are required, with 25–35% domestic and international travel.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Designs, administers, and improves enterprise cybersecurity controls across endpoints, identities, cloud, email, networks, applications, and monitoring platforms. Leads incident response, vulnerability management, security architecture reviews, risk assessments, audits, compliance activities, documentation, automation, and remediation. Provides technical leadership and mentoring while aligning security operations with HIPAA, HITRUST, NIST, PCI DSS, and organizational requirements.