Top Cyber Security Jobs in Denver & Boulder, CO

Build and maintain custom security tools, middleware, automation, APIs, integrations, dashboards, and security workflows. Integrate identity, endpoint, SIEM, SaaS, and other security platforms using APIs, cloud services, containers, and CI/CD. Translate security policies into secure, code-driven solutions while supporting SOAR, continuous monitoring, compliance, and cross-functional collaboration.

Own spacecraft and embedded-platform security architecture, threat modeling, PKI, cryptography, secure boot, firmware, FPGA, RF, and supply-chain security. Build production security tooling, foundational services, test frameworks, and validation platforms for resource-constrained systems. Lead penetration testing, security assessments, secure development practices, and organization-wide hardening initiatives while mentoring engineers and addressing novel space-based threats.

Owns security architecture and defensive controls for spacecraft, flight software, firmware, FPGA designs, RF systems, and hardware platforms. Designs embedded PKI, secure boot, cryptographic systems, key management, and supply-chain protections. Leads security assessments, penetration testing, tooling, and automated validation frameworks while driving secure development practices across engineering teams. Requires deep hardware, firmware, cryptography, and software expertise in high-assurance space systems.

Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.

Lead enterprise IAM and AI access security engineering across Okta, GCP, AWS, and IGA platforms. Replace low-code automation with tested Python services, codify identity infrastructure using Terraform/OpenTofu/Pulumi, implement least-privilege and privileged-access controls, govern human and non-human identities, and secure enterprise AI platforms. Drive cross-functional initiatives, develop technical roadmaps and proposals, support compliance, and mentor engineers.

Lead security engineering across AI systems, cloud infrastructure, product security, GRC automation, GitHub controls, and compliance workflows. Develop AI-specific threat models and guardrails, automate security checks and evidence collection, strengthen AWS and GCP environments, manage CSPM tooling, and secure software supply chains. Partner with Engineering, Product, Legal, IT, and GRC to establish security programs and practical controls for Jasper’s AI platforms.

Lead the development of SailPoint’s cybersecurity architecture practice. Create holistic and reference architectures, define security domains, develop strategic roadmaps, identify security gaps, and translate architectural concepts into viable engineering solutions. Partner with leadership to prioritize initiatives, secure funding, and operationalize the practice. The role also includes hands-on security projects, cross-functional collaboration, stakeholder influence, and mentoring architects and engineers across cloud, application, identity, and network security.

Partners with Sales to advise enterprise customers on cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Leads technical discovery, solution design, demonstrations, proof-of-value and proof-of-concept engagements, customer validation, training, and executive discussions. Translates technical capabilities into business outcomes, creates customer-facing documentation, supports events, and collaborates cross-functionally to advance sales opportunities and improve customer outcomes. Travel is typically 25–50%.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Own and improve enterprise security platforms, cloud and infrastructure security, identity governance, endpoint protection, vulnerability management, incident response, network controls, and DevSecOps practices. Lead complex security initiatives, compliance controls, vendor assessments, security architecture reviews, and AI security governance. Build automation with PowerShell and Python, partner with IT Operations and DevOps, reduce manual work, and serve as the senior escalation point for technical security incidents.

Secure LLMs, generative AI systems, ML infrastructure, training pipelines, and AI applications. Responsibilities include threat modeling, architecture reviews, security controls, hardening, vulnerability remediation, data privacy, incident response runbooks, vendor reviews, governance, policy development, and AI security training. The role also supports proof-of-concept security solutions and monitors emerging AI threats.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Provide cybersecurity engineering support for programs: validate security requirements and designs, perform technical assessments and A&A documentation under NIST RMF, support incident response, identify and mitigate system risks, and implement enterprise security controls using tools like Splunk, Tenable, and HBSS. Requires coordination with engineers, PMs, and stakeholders and maintaining system Authorizations to Operate.

Provide cybersecurity engineering support for systems to achieve and maintain Authorizations to Operate (ATO). Validate security requirements and designs, perform technical security assessments, support RMF A&A documentation, incident response, risk management, and advise architects and PMs on secure implementations across the mission lifecycle.

Provide cybersecurity engineering support to develop, validate, and maintain secure systems. Manage cyber requirements, perform technical security assessments, support Incident Response and Assessment & Authorization (A&A) per NIST RMF, produce A&A documentation, mitigate risks, and advise architects and program stakeholders on security design and compliance.

Provide cybersecurity engineering support for space and mission systems: manage cyber requirements, validate technical security implementations, perform technical assessments, support RMF/A&A and authorization activities, assist incident response, advise architects on secure designs, and produce security documentation and risk mitigation strategies.

Lead applied research on agentic AI for cybersecurity: develop efficient post-trained models, agent designs, and rigorous evaluation/verification. Partner with security teams to translate research into products, run experiments, and publish novel techniques.

Entry-level System Security Engineer supporting cybersecurity engineering for space and mission systems. Manage cyber requirements, design secure systems using MBSE, validate technical security implementations, and support Assessment & Authorization (A&A) to obtain/maintain Authorizations to Operate (ATO). Collaborate with cross-functional teams, apply NIST/DISA/CIS standards, perform risk analysis and security planning, and integrate DevSecOps and software security engineering practices into system development.

Provide systems security engineering support for space/mission systems: manage cyber requirements, validate technical security implementations, support ATO/Assessment & Authorization, develop program protection and anti-tamper plans, perform threat analysis (including Threat Countermeasure Trees), brief leadership, and document security guidance and reports across the acquisition lifecycle.

Lead AI security strategy and guardrails, design and review AI gateways and tooling, scale InfoSec review processes, reduce AI-driven security noise, drive remediation and investigations, and mentor security and platform engineers.

Lead system security engineering for aerospace/defense programs: define and validate cyber requirements, design secure systems (MBSE), manage A&A/ATO processes, integrate DevSecOps and cyber tools, perform risk assessments, and coordinate with stakeholders and program leadership.

Designs and implements secure cloud architectures, IL5 controls, STIG-aligned hardening baselines, identity integrations, and cybersecurity controls for federal and DoD-aligned platforms. Performs security assessments, vulnerability analysis, continuous monitoring, secure deployment reviews, audit support, and remediation planning. Requires expertise in AWS, NIST, RMF, PKI, SIEM, and cloud security, along with mentoring junior engineers and documenting technical architectures. The role is fully remote but requires an active Top Secret clearance and substantial security engineering experience.

The Senior IT Security Engineer strengthens cybersecurity across architecture reviews, AI and emerging technology assessments, IAM governance, vulnerability management, third-party risk, security assurance, incident response, phishing simulations, automation, and regulatory compliance. The role validates security controls, supports remediation, develops risk metrics and reporting, oversees identity platforms, and partners with technology, business, audit, compliance, procurement, and vendors in a regulated banking environment.

Leads the design, implementation, and operation of information security controls across systems, networks, endpoints, and cloud environments. Responsibilities include SIEM/MDR, EDR/XDR, SOAR, vulnerability management, PAM, Zero Trust, incident response, data protection, DLP, and cloud security. The role collaborates with IT, Privacy, Compliance, and application teams, mentors engineers, supports security architecture and SDLC practices, and may provide periodic on-call incident response support.

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.