Top Cyber Security Jobs in Denver & Boulder, CO

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.

Designs and deploys enterprise IAM and Zero Trust architectures across corporate and vendor environments. The role establishes MFA, SSO, privileged access, segmentation, and security effectiveness metrics; integrates AI-driven threat detection and automation; analyzes threat intelligence; remediates vulnerabilities; and leads security architecture intake for enterprise initiatives. It requires cross-functional collaboration with IT, compliance, and business teams.

Partners with Sales to advise enterprise customers on cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Leads technical discovery, solution design, demonstrations, proof-of-value and proof-of-concept engagements, customer validation, training, and executive discussions. Translates technical capabilities into business outcomes, creates customer-facing documentation, supports events, and collaborates cross-functionally to advance sales opportunities and improve customer outcomes. Travel is typically 25–50%.

Develops and maintains spacecraft security architecture, translates system security requirements into component controls, assesses cybersecurity compliance, conducts threat analysis, and supports RMF, A&A, and ATO activities. The role collaborates with systems, hardware, software, and program teams; contributes to acquisition and protection documentation; identifies cyber risks; recommends mitigations; and promotes secure-by-design engineering practices.

Leads technical pre-sales architecture for complex security solutions serving public-sector and commercial customers. Translates business, security, compliance, and technical requirements into solution designs, bills of materials, statements of work, estimates, pricing, assessments, and deployment plans. Conducts discovery sessions, architecture workshops, solution reviews, and customer presentations while partnering with sales, delivery teams, and security vendors. Mentors architects and sellers, supports regional customer activity, and travels throughout the Southeast as needed.

Architect and build production AI security systems spanning endpoint sensors and cloud-scale infrastructure. Lead autonomous cyber defense capabilities, including detection, threat hunting, response, adversary simulation, secure agent execution, and model evaluation. Establish technical direction, benchmarks, and safety practices while mentoring senior engineers and researchers. Carry frontier AI research into the Falcon platform and represent the company through publications, open source, standards, and industry collaboration.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Build and operate secure AI platforms, agent workflows, and reusable automation patterns. Embed security into SDLC and PDLC through threat modeling, scanning, secrets detection, supply-chain controls, and automated reviews. Develop AWS identity, network, access, and infrastructure guardrails, including zero-trust and privileged-access automation. Own production services, monitoring, incident response, and on-call support while partnering with teams across the company to enable secure self-service workflows.

Lead the enterprise information security architecture strategy, roadmap, standards, governance, and security-by-design practices across cloud, hybrid, and on-premise environments. Oversee threat modeling, zero-trust principles, security baselines, architecture escalations, vulnerability mitigation, vendor evaluations, compliance mapping, and strategic program delivery. Partner with engineering, product, network operations, and executive leadership while managing security architecture teams and translating complex risks into business impacts.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. Re-architect internal PKI and machine or workload identity systems, participate in on-call incident response, support internal developers, and advise engineering teams on secure system design. The role requires software development, distributed systems expertise, Linux/UNIX administration, and hands-on security implementation experience.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Leads AI-focused application security across software, cloud, hardware, and firmware. Conducts security assessments and AI-driven red-team exercises, develops secure-code fixes and AI-enabled security tooling, validates controls for LLM and agentic systems, and shapes organization-wide AI security strategy. Partners with engineering, hardware, and executive stakeholders to identify threats, implement mitigations, and safely adopt AI within security operations.

Designs, integrates, assesses, and maintains security controls for classified DoD information systems, including Collateral, SCI, and SAP environments. Leads security engineering and cybersecurity teams, supports RMF and JSIG authorization, performs risk assessments, develops STIGs and test procedures, integrates monitoring and SIEM tools, and mitigates system threats throughout the lifecycle. The role also provides technical leadership, incident response support, operational procedures, and guidance to architects and developers.

Leads the design and implementation of secure IT infrastructure for aerospace and defense systems. Responsibilities include advanced security monitoring, threat analysis, incident response, digital forensics, risk and vulnerability assessments, security controls, breach documentation, technology evaluation, and mentoring junior engineers. The role requires active Top Secret clearance with SCI eligibility, participation in on-call incident response, and occasional travel.

Architects and manages enterprise security engineering, threat detection, vulnerability assessment, security hardening, incident response, and security policies across cloud, on-premises, and SaaS environments. The role monitors security logs, supports compliance, advises on vendors and implementations, integrates security into the development lifecycle, and participates in on-call and change management activities.

Provides technical pre-sales leadership for data security solutions, including demos, proofs of concept, architecture workshops, and secure cloud or hybrid deployments. Advises customers on data security posture, Microsoft Purview, AI application security, and scalable architectures. Builds developer and platform-lead relationships, resolves technical blockers, develops technical win strategies, and collaborates with product engineering. Represents Microsoft in customer and developer communities.

Serves as a security subject matter expert supporting sales teams and customers. The role assesses security environments, facilitates incident response and investigations, demonstrates Varonis capabilities, supports threat detection evaluations, develops technical enablement materials, communicates product updates, and gathers customer feedback for product improvement. Strong expertise in cloud and self-hosted network security, Microsoft security ecosystems, identity management, SIEM, SOAR, and threat detection is required.

Leads the engineering, integration, deployment, and support of AI-powered security operations platforms. Designs security automation, SOAR integrations, RAG architectures, agent orchestration, evidence pipelines, observability, governance, and cloud-based security workflows. Partners across security, risk, data, and technology teams to improve investigations and reduce response times while managing AI-related risks. Provides technical leadership, establishes engineering standards, mentors staff, and communicates complex security risks to senior stakeholders.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.