Top Security Engineer Jobs in Denver & Boulder, CO

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.

Develops and maintains spacecraft security architecture, translates system security requirements into component controls, assesses cybersecurity compliance, conducts threat analysis, and supports RMF, A&A, and ATO activities. The role collaborates with systems, hardware, software, and program teams; contributes to acquisition and protection documentation; identifies cyber risks; recommends mitigations; and promotes secure-by-design engineering practices.

Designs, integrates, assesses, and maintains security controls for classified DoD information systems, including Collateral, SCI, and SAP environments. Leads security engineering and cybersecurity teams, supports RMF and JSIG authorization, performs risk assessments, develops STIGs and test procedures, integrates monitoring and SIEM tools, and mitigates system threats throughout the lifecycle. The role also provides technical leadership, incident response support, operational procedures, and guidance to architects and developers.

Leads the design and implementation of secure IT infrastructure for aerospace and defense systems. Responsibilities include advanced security monitoring, threat analysis, incident response, digital forensics, risk and vulnerability assessments, security controls, breach documentation, technology evaluation, and mentoring junior engineers. The role requires active Top Secret clearance with SCI eligibility, participation in on-call incident response, and occasional travel.

Architects and manages enterprise security engineering, threat detection, vulnerability assessment, security hardening, incident response, and security policies across cloud, on-premises, and SaaS environments. The role monitors security logs, supports compliance, advises on vendors and implementations, integrates security into the development lifecycle, and participates in on-call and change management activities.

Architect and build production AI security systems spanning endpoint sensors and cloud-scale infrastructure. Lead autonomous cyber defense capabilities, including detection, threat hunting, response, adversary simulation, secure agent execution, and model evaluation. Establish technical direction, benchmarks, and safety practices while mentoring senior engineers and researchers. Carry frontier AI research into the Falcon platform and represent the company through publications, open source, standards, and industry collaboration.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Leads the design and implementation of security solutions for AI systems across data ingestion, model training, deployment, and runtime. Develops controls against prompt injection, data poisoning, model inversion, data leakage, and unauthorized access. Secures cloud infrastructure, APIs, identities, integrations, and third-party AI platforms; implements monitoring, automated security testing, and incident response. Partners with architecture, engineering, and governance teams to ensure resilient, compliant AI security practices.

Embeds security across the software development lifecycle by leading threat modeling, security design reviews, application security assessments, red-team exercises, and secure architecture guidance. The role drives adoption of SAST, DAST, and SCA tooling, strengthens CI/CD and cloud security, supports fintech regulatory compliance, and advises engineering and product leadership on prioritized security risks.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Analyze, debug, and secure diverse codebases; implement features; refactor legacy software; conduct audits and penetration tests; optimize backend performance; and document findings to improve AI training datasets.

Leads Apollo’s detection and response strategy, detection architecture, security observability, incident response, and AI-assisted security workflows. Builds MITRE ATT&CK-aligned detections, response automations, investigation tools, and detection-as-code pipelines using Panther and Python. Leads high-severity incidents across cloud, SaaS, and corporate systems; improves IR readiness, metrics, playbooks, and forensic processes. Partners with Engineering, Infrastructure, IT, Legal, Fraud, and leadership while mentoring engineers and driving multi-quarter security initiatives.

Sets the technical vision for enterprise security across cloud, identity, application, data, endpoint, and network environments. Leads security architecture, threat modeling, DevSecOps, incident response, compliance evidence, security roadmap planning, and AI security initiatives. Advises executives and cross-functional stakeholders, handles high-severity escalations, mentors security engineers, and strengthens healthcare security controls for AWS, Azure, FHIR, Medplum, Snowflake, HITRUST, HIPAA, and NIST requirements.

Secure an integrated supply chain e-commerce platform across application, infrastructure, authentication, compliance, and AI agent layers. Responsibilities include threat modeling, vulnerability assessments, code reviews, PCI-DSS and GDPR controls, OAuth/SAML authentication, tenant isolation, secrets management, encryption, WAF and rate limiting, incident response, security training, and AI prompt-injection prevention. The intern will work remotely for three months under technical leadership and collaborate with development and DevOps teams.

Secure AI/ML models, data pipelines, and AI-enabled applications by conducting vulnerability assessments, threat modeling, incident response, and security reviews. Build guardrails, monitoring, detection, access controls, encryption, and data-segmentation measures. Partner with engineering and analytics teams throughout the AI development lifecycle, assess third-party AI tools, document remediation plans, and translate emerging threats such as prompt injection, data poisoning, jailbreaks, and model-supply-chain risks into practical mitigations.

Build ngrok’s foundational security engineering program, including security tooling, CI/CD guardrails, secrets scanning, vulnerability tracking, cloud security, risk assessments, AI security policies, detection capabilities, and incident response. Partner with engineering and leadership to establish security controls, automation, metrics, and reusable internal security platforms.

Own product and application security for a multi-tenant insurance platform. Responsibilities include secure SDLC, security-focused code review, application security, tenant isolation, cloud security posture, supply-chain controls, penetration testing, threat modeling, vulnerability management, incident response, and SOC 2 compliance readiness.

Provides vulnerability management and continuous monitoring support for regulated cloud environments. Responsibilities include investigating vulnerabilities, managing scans and false positives, creating POA&Ms, communicating alerts and remediation strategies, configuring scanning tools, automating repeatable tasks, documenting findings, coordinating escalations, and supporting compliance frameworks such as FedRAMP. The role also liaises with clients, SRE teams, auditors, and internal security operations personnel.

The Senior Product Security Engineer integrates cybersecurity throughout connected medical device lifecycles. Responsibilities include threat modeling, risk assessments, secure architecture design, vulnerability and penetration testing, regulatory compliance, supplier security reviews, incident response, and security documentation. The role partners with engineering, quality, regulatory, and product teams; contributes to security strategy; mentors junior engineers; and supports postmarket investigations and mitigation activities.

Design and implement security across infrastructure, applications, data, and AI systems. Own authentication, authorization, tenant isolation, secure log ingestion and querying, and AI security risk mitigation. Lead security incident response and postmortems, establish practical security practices, and partner with engineering to integrate security into development. The role requires application or infrastructure security experience, knowledge of OWASP vulnerabilities, and experience securing distributed systems and APIs.

Owns the security posture and architecture of Akamai’s globally distributed AI inference platform. Leads threat modeling, security standards, design reviews, cloud-native and application security, multi-tenant isolation, compliance readiness, incident response, and defenses against AI-specific threats such as prompt injection, model extraction, data poisoning, and adversarial attacks.

Assists with designing, implementing, and maintaining secure IT systems, networks, and applications. Performs security monitoring, incident response, digital forensics, vulnerability and risk assessments, and security control implementation. Documents breaches, researches security tools, supports policy development, and participates in on-call incident response. The role requires a bachelor’s degree or equivalent experience, basic cybersecurity knowledge, and the ability to obtain and maintain a Top Secret clearance.

Plans and executes full-scope red team and adversary emulation operations, including phishing, C2, privilege escalation, lateral movement, EDR/XDR evasion, Active Directory and cloud compromise, and social-engineering scenarios. Develops custom offensive tooling, collaborates with Blue Teams to validate detections, documents attack chains, and provides remediation guidance. Requires 5+ years of offensive security experience, advanced scripting skills, and recognized offensive security certifications, with bug bounty or CTF achievements preferred.

Own and scale application security across Redpanda’s C++ engine, Go control plane, Console, and Rust/Go SDKs. Responsibilities include threat modeling, secure design reviews, SAST/SCA/DAST, fuzzing, secure code review, PSIRT and vulnerability disclosure, software supply-chain security, security release gates, and security champions. The role partners closely with engineering to improve secure development practices, address vulnerabilities, and protect authentication, authorization, encryption, audit logging, and multi-tenant isolation.