Top Security Engineer Jobs in Denver & Boulder, CO

Leads enterprise AI Security and GenAI data protection, owning the AI Gateway from evaluation through deployment and ongoing operations. Designs controls for prompts, uploads, browser traffic, copilots, agents, and integrations; implements monitoring, coaching, redaction, quarantine, and blocking. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures effectiveness, supports audit readiness, and partners with business and technology teams to enable responsible AI adoption.

Designs and develops IAM and security software, automation, APIs, and microservices. Integrates security into cloud and CI/CD environments, conducts code reviews and threat modeling, monitors security events, supports incident response, and advises teams on identity architecture and best practices. Requires extensive IAM administration, programming, cloud, containerization, and secure-coding experience.

Security Engineer responsible for securing and scaling on-premises datacenter, cloud, compute, systems, and networking environments. Duties include secure architecture, Infrastructure-as-Code, firewall and switch management, DevSecOps and CI/CD security integration, resilient infrastructure, incident response, vulnerability scanning, monitoring, logging, and detection engineering. The role requires hands-on infrastructure experience, cloud and virtualization knowledge, strong networking fundamentals, server and workstation management, and end-to-end operational ownership.

Designs, builds, and deploys classified IT infrastructure for U.S. Government programs through TS/SCI and SAP levels. Responsibilities span facility readiness, power and cooling, rack and cabling design, servers, networks, storage, virtualization, cryptographic devices, physical security, testing, troubleshooting, documentation, and RMF/ATO evidence. The role requires extensive hands-on work in SCIFs, SAPFs, data centers, and construction environments, coordination with facilities and contractors, and up to 50% travel.

Own application security for Generative AI and emerging products by integrating secure development practices, conducting design and code reviews, threat modeling systems, assessing vendors and AI tools, triaging vulnerabilities, and building security automation. The role partners with engineering and detection teams, contributes to cloud and infrastructure security, participates in incident response and on-call rotations, and documents post-incident remediation.

Secures and governs cloud-native platforms, Kubernetes environments, CI/CD pipelines, identities, APIs, secrets, and AI workloads. The role implements vulnerability scanning, secure software supply chain controls, access governance, monitoring, threat detection, and incident response support. It partners with engineering and operations teams to establish security standards, remediate vulnerabilities, harden infrastructure, and advance secure-by-design practices across cloud and application environments.

Design, secure, administer, and improve on-premises, cloud, and hybrid infrastructure. Manage servers, networks, operating systems, virtualization, firewalls, endpoints, and monitoring tools. Strengthen security controls, investigate incidents with a third-party SOC, manage vulnerabilities and risks, maintain documentation, and lead infrastructure and security projects including upgrades, migrations, automation, and tool deployments.

Own security outcomes for an engineering portfolio across application and cloud security. Lead threat modeling, architecture reviews, risk prioritization, remediation, secure coding, cloud and IaC security, and adoption of security scanning tools. Partner with engineering leaders, coach security champions, support incident response, provide hands-on remediation, and feed portfolio insights into security strategy and platform patterns. The role spans SaaS code, pipelines, identity, infrastructure, data, containers, Kubernetes, and AI-enabled systems.

Architects, deploys, configures, and supports enterprise data security solutions for federal clients. Implements and tunes DLP policies, integrates security tools across hybrid cloud environments, develops scalable security architectures, troubleshoots complex issues, documents technical designs, and applies Zero Trust and federal data security practices. The role interfaces with agency stakeholders and internal engineering teams and requires a Secret clearance.

Architects, deploys, configures, and supports enterprise data security solutions for federal clients. Designs Zero Trust architectures, implements DLP and data protection policies across hybrid cloud environments, integrates security technologies, troubleshoots complex issues, documents technical architectures, and collaborates with agency and engineering stakeholders. Requires enterprise data security experience, Top Secret clearance, and knowledge spanning cybersecurity, networking, identity, cloud, operating systems, and infrastructure.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Secure Windows products and devices through security design and code reviews, penetration testing, vulnerability research, fuzzing, and mitigation development. Build reusable security-review tools, identify vulnerabilities in operating-system features and native applications, investigate attack vectors, and collaborate with Windows engineering teams to implement scalable defenses. The role also involves engaging with external security researchers and communicating the business value of security investments.

Implements and monitors cybersecurity controls, assesses vulnerabilities, responds to incidents, supports remediation, and helps maintain security policies and incident response plans. The role conducts tabletop exercises, business continuity and disaster recovery testing, collaborates with IT operations and service providers, supports the service desk, and educates staff on security practices. Regular travel to remote plant and farm facilities, physical work, and occasional after-hours support are required.

Engineers and operates corporate IT security across identity, devices, endpoints, SaaS, internal networks, and workforce AI tools. Responsibilities include access hardening, device trust, lifecycle automation, SaaS security posture, detection engineering, incident command, audit evidence, and AI guardrails. The role is primarily hands-on and partners with Security, IT, Legal, Compliance, and business leaders to investigate incidents, remediate risks, and improve corporate security controls.

Designs, implements, and optimizes Microsoft 365 security, compliance, identity, and governance solutions for clients. Configures Microsoft Purview, Entra ID, Defender, DLP, information protection, access controls, and AI-agent security capabilities. Assesses environments, identifies gaps, develops remediation plans, automates administration with PowerShell, and delivers documentation, workshops, testing, and knowledge transfer. The role requires strong consulting and customer-facing skills while supporting technical project delivery across enterprise environments.

Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.

Secure Microsoft Windows online services through offensive security, code and deployment reviews, penetration testing, vulnerability research, and scalable mitigation development. Build reusable security review tools and agents, demonstrate exploit impact, identify novel attack vectors, bypass security controls, and collaborate with product engineering teams to strengthen architecture and defenses.

Build and operate security controls, telemetry, detections, and enforcement for NVIDIA’s large-scale EDA compute, storage, and networking infrastructure across on-premises and multi-cloud environments. Investigate threats, respond to incidents, automate secure configurations and compliance evidence, threat-model infrastructure, and manage security technology lifecycles. The role requires hands-on Linux, networking, programming, infrastructure security, and collaboration with infrastructure and security teams.

Builds secure AI and agentic cybersecurity tooling, transforming research prototypes into production-ready services. Responsibilities include developing backend services, APIs, CLI tools, automation, and integration patterns; defining MVPs for ambiguous security and identity challenges; collaborating across research, product, enterprise security, and platform teams; and applying offensive security and adversarial thinking to address AI-specific risks such as injection, tool misuse, unauthorized access, data exfiltration, and unsafe delegation.

Develop and integrate network security software with firewalls, routers, switches, IPS, proxies, and other security devices. Responsibilities include gathering technical requirements, designing integrations, maintaining security-device test labs, assisting development and testing, creating test cases, troubleshooting complex integration issues, and documenting configurations. The role requires expertise in networking and security, packet analysis, major firewall vendors, virtualization, and regular expressions.

Build and automate security controls across bare-metal Linux infrastructure and AWS. Responsibilities include host hardening, vulnerability and patch management, container and CI/CD security, penetration testing, detection and incident response, access and log reviews, compliance evidence automation, and software supply-chain security. The role also supports customer security work and applies AI tooling to security operations.

Conduct cybersecurity assessments and OT/ICS inventories at CONUS and OCONUS DoD facilities. Perform logical network scans, document topology and data flows, evaluate compliance with DoD cybersecurity standards and RMF requirements, identify vulnerabilities, and recommend remediation. The role also supports site-visit planning, stakeholder coordination, logistics, and closeout reporting.

Designs and maintains security controls for blockchain, digital asset, application, cloud, and infrastructure environments. Responsibilities include threat modeling, cryptographic key management, application and API security, AWS and Kubernetes hardening, vulnerability management, monitoring, incident response, penetration testing, and security governance. The engineer collaborates with Cybersecurity, Engineering, DevOps, and Infrastructure teams to secure distributed systems and support regulatory requirements.

Provides security engineering and compliance expertise for FedRAMP Cloud Service Provider authorization packages. Reviews cloud architectures, security controls, system security plans, assessment reports, vulnerability scans, and penetration tests against NIST, FedRAMP, FISMA, RMF, and agency requirements. Leads architecture interviews, identifies technical and documentation gaps, advises government program leaders and CISOs on risk posture, supports continuous monitoring, and guides vendors through remediation and authorization activities.

The Information Systems Security Engineer will secure a USPS information system modernization project by implementing federal security controls, conducting vulnerability assessments and penetration testing, integrating security into CI/CD pipelines, maintaining SSP, RMP, and POA&M documentation, monitoring cloud security tools, supporting incident response, and delivering security training. The role requires collaboration with development, operations, and federal security stakeholders while ensuring compliance with FISMA, NIST RMF, and FedRAMP standards.