Top Cyber Security Jobs in Denver & Boulder, CO

Design and implement secure AWS infrastructure, integrate development, operations, and security practices, automate infrastructure with CloudFormation and Terraform, assess vulnerabilities, manage incident remediation, and deploy scalable CI/CD solutions using Jenkins and GitLab. The role also involves applying cybersecurity tools, troubleshooting security infrastructure, analyzing data, advising clients, and leading others while maintaining professional and technical standards.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.

Lead client engagements to design and implement secure network architectures (Zero Trust, SASE/SSE, segmentation, OT security). Manage teams, mentor staff, oversee enterprise network security configurations, and ensure project delivery and quality. Collaborate with clients to align security strategies with business objectives and drive innovation in network security practices.

Build and scale backend security platform services, including authentication, authorization, identity infrastructure, permission systems, and data models. Lead cross-team technical initiatives, standardize security solutions, collaborate with compliance and mission stakeholders, and influence architecture and engineering standards. The role requires strong system design, backend development, security expertise, technical leadership, and the ability to operate in sensitive environments.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Build and maintain custom security tools, middleware, automation, APIs, integrations, dashboards, and security workflows. Integrate identity, endpoint, SIEM, SaaS, and other security platforms using APIs, cloud services, containers, and CI/CD. Translate security policies into secure, code-driven solutions while supporting SOAR, continuous monitoring, compliance, and cross-functional collaboration.

Own spacecraft and embedded-platform security architecture, threat modeling, PKI, cryptography, secure boot, firmware, FPGA, RF, and supply-chain security. Build production security tooling, foundational services, test frameworks, and validation platforms for resource-constrained systems. Lead penetration testing, security assessments, secure development practices, and organization-wide hardening initiatives while mentoring engineers and addressing novel space-based threats.

Owns security architecture and defensive controls for spacecraft, flight software, firmware, FPGA designs, RF systems, and hardware platforms. Designs embedded PKI, secure boot, cryptographic systems, key management, and supply-chain protections. Leads security assessments, penetration testing, tooling, and automated validation frameworks while driving secure development practices across engineering teams. Requires deep hardware, firmware, cryptography, and software expertise in high-assurance space systems.

Leads architecture and implementation of Microsoft Red Team visibility, telemetry, monitoring, detection, alerting, deconfliction, and operational security capabilities. Designs scalable services and data pipelines, maintains authoritative operational asset inventories, identifies systemic security gaps, and drives durable engineering solutions. Provides hands-on technical leadership, architecture reviews, debugging, incident response, mentorship, and cross-organizational influence while enabling authentic Red Team operations with strong defensive visibility and control.

Provides security engineering and architecture expertise for FedRAMP Cloud Service Provider assessments. Reviews full-stack architectures, authorization packages, security controls, policies, assessment reports, vulnerability scans, and penetration tests for compliance with FedRAMP, NIST, FISMA, RMF, and agency requirements. Leads vendor interviews, identifies technical and documentation gaps, supports continuous monitoring, advises government program leaders and CISOs, and provides security recommendations for cloud systems.

Implements Tanium cybersecurity solutions for enterprise customers, advises cybersecurity teams, develops security content, supports technical integrations, and manages projects. The role combines customer-facing consulting, technical sales support, and cybersecurity solution deployment. Responsibilities include deploying SIEM, SOAR, threat intelligence, and endpoint detection solutions from provisioning through production while advising on ransomware, attack frameworks, Zero Trust, threat hunting, malware intelligence, and cloud security posture management.

Leads enterprise security architecture for cloud and on-premises systems supporting a federal agency. Develops security standards, reference architectures, diagrams, policies, procedures, and hardening guidance; assesses architectures and security postures; identifies gaps and privacy requirements; supports Zero Trust, RMF, acquisition, compliance, risk management, and technical briefings. Partners with stakeholders to translate business needs into secure technical solutions and maintains architecture documentation throughout the system lifecycle.

Designs and governs enterprise cybersecurity data architecture, including conceptual, logical, semantic, and physical models; data contracts; metadata; lineage; quality controls; integration patterns; and security telemetry standards. The role supports threat detection, exposure management, identity analytics, logging, monitoring, and compliance reporting. Responsibilities include architecture reviews, governance and privacy alignment, data virtualization, pipeline strategy, stakeholder communication, technical leadership, mentorship, and solution delivery across multi-source security environments.

Provides technical leadership for SIEM, security logging, telemetry, and security data architecture. Designs scalable security solutions, optimizes data pipelines, improves normalization and data quality, and supports threat detection, hunting, incident response, and automation. Leads complex implementations, prototypes emerging technologies, advises executives and auditors, manages security risks, and influences enterprise-wide security engineering strategy.

Designs and maintains Cribl data models and security log pipelines, routing and transforming telemetry into enterprise SIEM platforms. Supports SIEM, XDR, vulnerability management, DLP, endpoint security, Linux sensors, system hardening, threat detection, and defensive security architecture. Develops Python and Bash automation, integrations, and security controls while troubleshooting complex data issues. The role is fully remote within the United States, includes occasional South Carolina onsite work, and requires on-call participation.

Implement and configure SailPoint IdentityIQ and Identity Security Cloud solutions, including identity lifecycle management, access certifications, provisioning, integrations, workflows, rules, and application onboarding. Lead or support IIQ-to-ISC migrations, gather client requirements, create technical documentation, troubleshoot deployments, and support UAT and hypercare. The role also involves client interaction, mentoring junior engineers, and contributing to reusable delivery assets in a remote consulting environment.

Provides pre-sales technical support and technical account management for Vectra’s cybersecurity platform. Leads customer discovery, product demonstrations, proofs of concept, technology reviews, integrations, and security architecture discussions. Builds technical relationships with customers and channel partners, supports sales teams, collaborates on deployments and product projects, and maintains expertise in security technologies, networking, cloud security, attacker progression, incident response, and competitive offerings. Regional travel is required as needed.

Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.

Leads cybersecurity engineering for classified and unclassified Linux, Windows, network, virtualization, cloud, container, and storage environments. Oversees vulnerability management, system hardening, monitoring, incident response, compliance, ATOs, risk reporting, detection rules, automation, and remediation. Provides technical leadership, mentorship, policy development, customer briefings, and cybersecurity guidance across mission-critical DoD laboratory environments.

Leads technical security sales engagements through demonstrations, proofs of concept, hackathons, architecture workshops, and customer consultations. Designs secure, scalable cloud and hybrid architectures, resolves technical blockers, and advises customers on Microsoft Security solutions, including Defender and Sentinel. Develops security posture recommendations, supports XDR, zero trust, cloud security, and AI adoption strategies, while influencing technical decisions and representing Microsoft in developer communities.

Designs, develops, deploys, and supports enterprise security automations, custom tools, integrations, and workflows. Responsibilities include Python-based application and API development, vulnerability enrichment, incident response automation, IAM administration, Linux and Docker platform support, and administration of SIEM, SOAR, endpoint, cloud, network, and other security technologies. The role also troubleshoots integrations, monitors operational health, supports security teams, and maintains resilient, secure configurations across enterprise systems.

Leads regional enterprise security sales by serving as a cloud security expert, shaping opportunities, advising account teams, managing executive relationships, and orchestrating technical teams and partners. Conducts architecture reviews, demos, proof-of-concepts, pilots, ROI/TCO analyses, and consultative engagements to promote Microsoft security solutions, Zero Trust adoption, and customer business outcomes.

Translates compliance guidelines into business requirements, technical specifications, and security frameworks. Collaborates with internal teams, assessors, sales, project managers, support, engineering, and customers to understand web-scale systems, meet security obligations, integrate solutions, mitigate risks, and support go-live activities. Provides guidance on security controls, DDoS mitigation, network monitoring, incident escalation, threat detection, and security documentation.