Top Security Engineer Jobs in Denver & Boulder, CO

As a Product Security Engineer, you'll develop secure tools for engineering teams, conduct security reviews, and automate security processes to enhance Cedar's healthcare technology solutions.

The Security Engineer will design, build, and enhance security tools and frameworks, analyze security challenges, and contribute to AI/ML security research. Responsibilities include software development, security code review, and technical communication.

As a Security Engineer, you will conduct security assessments, develop security tools, perform architecture reviews, and collaborate on advanced security research.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

The Senior Embedded Security Engineer will enhance the security of the flight software for space vehicles, ensuring high standards for safety and secure coding practices throughout the development lifecycle.

As a Sr. Product Security Engineer, you will focus on network security, identifying gaps, architecting solutions, and leading cross-functional security initiatives.

Manage and improve vulnerability management, asset visibility, and cloud security across hybrid and multi-cloud environments. Operate tools (Wiz, Rapid7), maintain asset inventories, triage and track vulnerabilities, coordinate remediation with Engineering/SRE/IT, support incident investigations and on-call rotation, maintain compliance evidence and runbooks, and contribute to program improvements and reporting.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

The Sr. Infrastructure Security Engineer is responsible for protecting patient data, enhancing cloud infrastructure security, and collaborating with engineering teams to implement effective security practices.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

The Mission Security Engineer secures national security space systems, implementing cybersecurity measures and compliance controls for various platforms and infrastructures.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Lead product security work across Vercel: threat modeling, secure code reviews, open-source and supply-chain security, SDLC tooling and automation, bug bounty triage, cross-team security projects, and customer-facing security support to embed security across development and platform operations.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Perform hands-on application and system security assessments: discover and validate vulnerabilities, develop proof-of-concepts and custom tooling, conduct threat modeling and architecture reviews, and communicate clear remediation guidance to clients while contributing to security research.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

The Staff Product Security Engineer will enhance security in product development, conduct threat modeling, review code, automate processes, and advise on security requirements.

Perform application security assessments (code review, pentesting), integrate SAST/DAST/SCA into CI/CD, lead threat modeling, secure AI/ML code and model endpoints, manage cloud/container security (AWS/GCP), automate IaC security checks, mature bug bounty, and participate in incident response and on-call rotation.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

As a Lead Security Engineer, you'll secure corporate systems, manage identity and access management, mature security architecture, and lead teams in AI-driven projects while delivering complex solutions across multiple teams.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

The Cloud Security Engineer will design, implement, and maintain cloud-based security services, ensuring consistent integration of security in DevOps practices and collaborating on security compliance and vulnerability management.

Partner with sales to design and present data security solutions, lead technical evaluations and custom configurations, gather customer requirements, and drive successful hands-on proof-of-concept and evaluation outcomes for the Data Security business line.