Top Cyber Security Jobs in Denver & Boulder, CO

Designs and implements secure AWS infrastructure, integrates development, operations, and security practices, automates infrastructure with CloudFormation and Terraform, conducts vulnerability assessments, manages incident remediation, and deploys solutions through Jenkins and GitLab. The role also requires collaboration with clients and technical teams, cybersecurity tool expertise, analytical problem-solving, and leadership in complex environments.

Designs, deploys, and operates IAM controls across cloud and on-premises infrastructure. The role secures human, service, workload, and AI-agent identities through authentication, authorization, least privilege, lifecycle automation, policy guardrails, monitoring, and incident response. Responsibilities include implementing IAM integrations, access reviews, threat modeling, security automation, and reliable on-call operations while partnering with infrastructure, platform, and incident response teams.

Design, deploy, and operate security controls for Dropbox’s AI and agentic infrastructure across cloud, Kubernetes, data stores, and on-premise systems. Secure authentication, authorization, networking, AI tools, and non-human workloads while addressing prompt injection, poisoning, supply-chain, and MCP risks. Lead security initiatives, harden infrastructure, automate policy and security operations, and collaborate cross-functionally to protect customer data. Participate in on-call rotations as required.

Own and improve Octus’s enterprise security technology across endpoints, identity, SaaS, email, DLP, AI tools, cloud, and applications. Responsibilities include managing security platforms, hardening systems, tuning SIEM detections, responding to incidents, driving remediation, supporting audits and client reviews, assessing vendor risk, automating workflows, and mentoring teammates. The role requires broad hands-on cybersecurity expertise across Mac and Windows environments, identity platforms, secure web gateways, DLP, compliance frameworks, scripting, and REST APIs.

Leads enterprise data protection and AI security strategy, architecture, and execution. Builds and manages security engineering teams; oversees Microsoft Purview classification, labeling, DLP, endpoint protection, insider risk, and DSPM. Defines security controls for generative AI, LLMs, agents, and AI-enabled SaaS; guides AI governance and vendor assessments. Partners with Security Operations and Incident Response to address data exfiltration, insider threats, and AI-related incidents while meeting regulatory and contractual obligations.

Lead the architecture and engineering of production-grade agentic AI platforms for offensive cybersecurity operations. Design multi-agent workflows, execution harnesses, memory, tool calling, model routing, retrieval, and enterprise integrations. Establish security, evaluation, observability, reliability, and AI safety practices, including sandboxing, authorization, secrets management, guardrails, and defenses against prompt injection and data leakage. Mentor engineers, guide cross-functional architecture decisions, and communicate tradeoffs to senior leadership.

Build and operate central security systems, automation, tooling, and controls across cloud infrastructure, identity, access, products, partners, and vendors. Develop AI-assisted security workflows, lead external assessments through verified remediation, identify and validate vulnerabilities, guide engineering teams, and participate in incident response. The role requires production security engineering experience, strong programming skills, cloud security expertise, and fintech, payments, or crypto experience.

Design, build, and operate secure LLM platforms, RAG pipelines, and agentic workflows for security analytics and threat detection. Develop AI security controls, monitoring models, governance frameworks, and adversarial testing protocols. Protect AI systems against prompt injection, unauthorized access, model drift, and adversarial abuse while integrating automation into security operations. Requires Python, enterprise LLM platform, cloud-native security, and AI threat-modeling expertise.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Develops and validates product security solutions for embedded computing systems. Responsibilities include implementing cybersecurity features, applying RMF and A&A processes, defining security requirements, assessing risks and vulnerabilities, evaluating remediation costs, coordinating with engineering and program teams, and ensuring compliance with DoD and government security standards. Requires 25% travel, minimal direction, and an active U.S. TS/SCI clearance.

Designs and develops IAM and security software, automation, APIs, and microservices. Integrates security into cloud and CI/CD environments, conducts code reviews and threat modeling, monitors security events, supports incident response, and advises teams on identity architecture and best practices. Requires extensive IAM administration, programming, cloud, containerization, and secure-coding experience.

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.

Designs and deploys enterprise IAM and Zero Trust architectures across corporate and vendor environments. The role establishes MFA, SSO, privileged access, segmentation, and security effectiveness metrics; integrates AI-driven threat detection and automation; analyzes threat intelligence; remediates vulnerabilities; and leads security architecture intake for enterprise initiatives. It requires cross-functional collaboration with IT, compliance, and business teams.

Develops and maintains spacecraft security architecture, translates system security requirements into component controls, assesses cybersecurity compliance, conducts threat analysis, and supports RMF, A&A, and ATO activities. The role collaborates with systems, hardware, software, and program teams; contributes to acquisition and protection documentation; identifies cyber risks; recommends mitigations; and promotes secure-by-design engineering practices.

Leads technical pre-sales architecture for complex security solutions serving public-sector and commercial customers. Translates business, security, compliance, and technical requirements into solution designs, bills of materials, statements of work, estimates, pricing, assessments, and deployment plans. Conducts discovery sessions, architecture workshops, solution reviews, and customer presentations while partnering with sales, delivery teams, and security vendors. Mentors architects and sellers, supports regional customer activity, and travels throughout the Southeast as needed.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Lead the enterprise information security architecture strategy, roadmap, standards, governance, and security-by-design practices across cloud, hybrid, and on-premise environments. Oversee threat modeling, zero-trust principles, security baselines, architecture escalations, vulnerability mitigation, vendor evaluations, compliance mapping, and strategic program delivery. Partner with engineering, product, network operations, and executive leadership while managing security architecture teams and translating complex risks into business impacts.

Design, build, and own security-focused modules for Walrus’s B2B payment verification platform, including payments, reputation, and authentication capabilities. Write and maintain production code while emphasizing bug prevention, testability, maintainability, data-driven product decisions, and thoughtful software design. Collaborate closely with an early-stage team to establish engineering standards, development practices, and a supportive workplace culture.

Leads a team of security engineers developing automation for vulnerability discovery, impact analysis, remediation, and scalable security testing. Responsibilities include building tools for native-code security research, devising systematic vulnerability detection methods, collaborating with product teams, and communicating the business value of security investments. The role requires strong OS security fundamentals, computer science expertise, C/C++ experience, and people management.

Designs and governs enterprise security architectures across applications, infrastructure, networks, endpoints, cloud environments, and sensitive data. Develops security standards, reference architectures, and secure design patterns; performs threat modeling and architecture reviews; defines security requirements; guides DevSecOps, cloud, infrastructure, and application teams; and supports security technology selection. The role requires federal security framework expertise, Zero Trust and identity architecture experience, and the ability to obtain Public Trust clearance.

Leads cybersecurity for water and wastewater OT infrastructure, including network security design, penetration testing, vulnerability audits, policy development, incident and disaster recovery planning, and security assessments. Manages project execution, mentors cybersecurity professionals, develops training, supports client relationships and business development, and oversees security deliverables for complex infrastructure projects.

Designs, deploys, maintains, and improves enterprise cybersecurity infrastructure across network, application, cloud, and on-premises environments. Responsibilities include operating firewalls and defensive platforms, managing SASE/ZTNA and SD-WAN implementations, conducting vulnerability and threat analysis, supporting incident response, maintaining secure baselines, automating operational tasks, integrating intrusion detection telemetry, collaborating with SOC and network teams, and contributing to security architecture and roadmap decisions.

Designs, deploys, and improves information security solutions. Responsibilities include vulnerability scanning, penetration testing, risk assessments, network and system monitoring, incident investigation and response, firewall and encryption implementation, security control assessments, compliance reviews, policy development, technical documentation, and staff security guidance.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.