Top Security Engineer Jobs in Denver & Boulder, CO

Design, deploy, and maintain cloud and edge security across AWS/GCP/Azure including Cloudflare WAF and SASE. Implement zero-trust access, CSPM, IaC security, threat modeling, incident runbooks, detection tuning, and mentor junior engineers while participating in on-call rotation.

Designs and maintains secure IT services for a Defense Intelligence Agency customer. Responsibilities include implementing Zero Trust and ICAM capabilities, applying RMF security controls, developing cybersecurity test cases, preparing Assessment and Authorization documentation, overseeing security testing and evidence collection, supporting vulnerability remediation, and advising on information assurance, physical security, and special-program controls.

Reviews and assesses RMF authorization documentation for classified information systems, including security plans, control matrices, monitoring plans, and incident response artifacts. Evaluates technical compliance with information assurance directives, performs security design and threat assessments, documents POA&Ms and risk reports, conducts site assessments, and supports incident response activities. The role requires experience with NIST controls, Windows or Linux, virtualization or cloud environments, Splunk, and DoD security compliance.

Senior technical security engineer responsible for cloud infrastructure security, detection engineering, incident response, application and product security, vulnerability management, penetration test ownership, and security automation. Partners with platform, logistics, and IT teams, manages an application security contractor, and builds tooling to raise the security posture across AWS, IaC, edge, and container environments.

Lead security engineering across AI systems, cloud infrastructure, product security, GRC automation, GitHub controls, and compliance workflows. Develop AI-specific threat models and guardrails, automate security checks and evidence collection, strengthen AWS and GCP environments, manage CSPM tooling, and secure software supply chains. Partner with Engineering, Product, Legal, IT, and GRC to establish security programs and practical controls for Jasper’s AI platforms.

Consult with clients to design, implement, configure, test, troubleshoot, and support physical security systems, including video surveillance, access control, sensors, and integrations. Develop network architectures, lead design workshops, execute test plans, document solutions, and serve as a technical customer contact. Support project delivery, sales engagements, upgrades, and complex hardware/software problem resolution while managing timelines, expenses, and customer expectations. Travel and occasional off-hours work are required.

Designs, implements, and optimizes enterprise, cloud, and operational security controls. Responsibilities include managing firewalls, SIEM, EDR, SOAR, IAM, vulnerability assessments, penetration testing, incident response, security monitoring, architecture documentation, compliance alignment, and remediation support. The role collaborates with IT, DevOps, and security teams to improve detection, response, resilience, and audit readiness.

Own and drive product security for the MongoDB Database Server: lead fuzzing, threat modeling, secrets/container security efforts; perform security assessments, POCs, code reviews, and remediation for low-level memory issues; partner with engineering to design controls and educate teams.

Leads the design and implementation of secure IT infrastructure, advanced security monitoring, threat analysis, incident response, digital forensics, risk assessments, and security controls. Maintains Windows environments, Active Directory forests, domain controllers, certificate services, hypervisors, and hardened Group Policy configurations. Evaluates security technologies, documents breaches, mentors junior engineers, and participates in on-call incident response.

Build Tempo’s product security program from the ground up, including application, infrastructure, endpoint, and supply-chain security tooling. Identify and remediate production and development-pipeline risks, lead incident response through post-mortems, conduct secure design reviews, and establish scalable security practices. The role requires hands-on coding, deep incident-response expertise, strong infrastructure and application-security knowledge, and autonomous collaboration with engineering.

Design, implement, and maintain cybersecurity infrastructure for mission-critical DoD networks. Perform risk and vulnerability assessments, configure cyber architectures, integrate security controls, monitor systems, respond to incidents, and apply emerging technologies. The role supports Zero Trust, DevSecOps, RMF processes, system certification and authorization, and DoD acquisition requirements while leveraging tools such as CRIBL, GitLab, Kubernetes, and Splunk.

Designs, tests, and implements boundary security capabilities for DoD enterprise networks. Provides firewall and security appliance support, configures switched and routed network security controls, performs risk and vulnerability assessments, and identifies advanced threats using security events and big data analytics. The role also addresses interoperability, cloud security, enterprise network deployments, and security best practices while mentoring technical staff.

As a Principal Engineer, you'll architect and implement security features for storage products, focusing on cryptography and cybersecurity across development lifecycles.

Design, implement, and support enterprise physical security systems (video surveillance, access control, sensors, IoT). Consult with clients, develop technical architectures, configure and test systems, troubleshoot hardware/software, manage projects, run design workshops, and support sales and delivery. Travel 25-50% and perform hands-on installations and network-integrated solutions.

Partner with sales to design and present data security solutions, lead technical evaluations and custom configurations, gather customer requirements, and drive successful hands-on proof-of-concept and evaluation outcomes for the Data Security business line.

Designs, deploys, and supports enterprise network security systems, including BGP routing, DDoS mitigation, cloud network security, and WAF solutions. Leads security engineering initiatives, defines requirements, manages technical risks and vulnerabilities, develops test plans, reports metrics, collaborates with stakeholders, resolves complex security issues, and mentors team members.

Supports federal IT system cybersecurity and privacy compliance under the NIST RMF. Responsibilities include RMF/ATO documentation, SSPP maintenance, continuous monitoring, vulnerability assessment and remediation tracking, POA&M management, incident response, audits, privacy assessments, change-impact reviews, SOP development, briefings, and advising system owners. The role also supports assessments, contingency exercises, SDLC activities, and cybersecurity documentation within GRC repositories.

Design, build, and operate secure, resilient distributed systems for secrets and key management across Cloudflare's global network. Re-architect and strengthen internal PKI and machine/workload identity, support and run services (including on-call), and consult with teams to ensure secure system design and usage.

Design, implement, and maintain cloud security solutions; own CNAPP enablement and vendor relationships (Azure, AWS, Palo Alto); serve as RCSA control owner (TEC083) and automate attestations; build Cloud Security dashboards in Microsoft Power BI; collaborate with architecture and operational partners to onboard, operationalize, and support cloud security capabilities.

Provides technical leadership for enterprise AI security, designing secure AI platform architectures, vetting frameworks, identity and posture management for AI agents, and preventative security guardrails. The role requires building scalable security systems with Python, Go, or Java, managing infrastructure as code, addressing cloud and container security, mentoring engineers, and advising leadership on AI security risks.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

The Product Security Engineer partners with Engineering and Product teams to embed security throughout the development lifecycle. Responsibilities include threat modeling, architecture and security reviews, vulnerability validation, remediation planning, security-tool ownership, automation, secure coding guidance, incident response, and assessing risks in cloud and AI-enabled products. The role requires strong application security, identity, authentication, authorization, coding, communication, and cross-functional collaboration skills.

Architects, deploys, and configures data security solutions for federal, DoD, and IC clients. Designs Zero Trust architectures, develops custom policies for hybrid cloud data control, and interfaces with agency stakeholders and internal engineering teams. Documents technical architectures and applies DSPM, DLP, data labeling, and tagging technologies. Requires TS/SCI clearance and experience with data security tools.

Deploys, manages, tunes, and governs enterprise firewalls while designing and maintaining VPN, SASE, and NAC solutions. Investigates security alerts, analyzes network traffic and logs, supports incident response, and recommends remediation. Partners with infrastructure, network, and security teams to improve controls, reduce risk, mature security programs, and document technical standards and procedures.

Build and maintain cloud security improvements across AWS/GCP, Kubernetes, and CI/CD environments. Design detection and response capabilities using SIEM, EDR/MDR, cloud-native detections, and CNAPP tools. Investigate and respond to security incidents end to end, develop detection logic and playbooks, and create security tooling and automations using Python, Terraform, and infrastructure-as-code. The role also supports endpoint security and secure DevOps practices.