Top Cyber Security Jobs in Denver & Boulder, CO

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Build and operate secure AI platforms, agent workflows, and reusable automation patterns. Embed security into SDLC and PDLC through threat modeling, scanning, secrets detection, supply-chain controls, and automated reviews. Develop AWS identity, network, access, and infrastructure guardrails, including zero-trust and privileged-access automation. Own production services, monitoring, incident response, and on-call support while partnering with teams across the company to enable secure self-service workflows.

Lead the enterprise information security architecture strategy, roadmap, standards, governance, and security-by-design practices across cloud, hybrid, and on-premise environments. Oversee threat modeling, zero-trust principles, security baselines, architecture escalations, vulnerability mitigation, vendor evaluations, compliance mapping, and strategic program delivery. Partner with engineering, product, network operations, and executive leadership while managing security architecture teams and translating complex risks into business impacts.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. Re-architect internal PKI and machine or workload identity systems, participate in on-call incident response, support internal developers, and advise engineering teams on secure system design. The role requires software development, distributed systems expertise, Linux/UNIX administration, and hands-on security implementation experience.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Leads AI-focused application security across software, cloud, hardware, and firmware. Conducts security assessments and AI-driven red-team exercises, develops secure-code fixes and AI-enabled security tooling, validates controls for LLM and agentic systems, and shapes organization-wide AI security strategy. Partners with engineering, hardware, and executive stakeholders to identify threats, implement mitigations, and safely adopt AI within security operations.

Architects and manages enterprise security engineering, threat detection, vulnerability assessment, security hardening, incident response, and security policies across cloud, on-premises, and SaaS environments. The role monitors security logs, supports compliance, advises on vendors and implementations, integrates security into the development lifecycle, and participates in on-call and change management activities.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Lead the design, implementation, and maintenance of secure IT infrastructure. Harden Windows systems, Active Directory domains, hypervisors, and security configurations; manage PKI and Group Policy; conduct threat monitoring, vulnerability assessments, incident response, and digital forensics. Develop security controls, document breaches, evaluate security technologies, and mentor junior engineers. The role requires an active Secret clearance, ability to obtain Top Secret with SCI eligibility, and occasional travel.

Build and operate security controls, telemetry, detections, and enforcement for NVIDIA’s large-scale EDA compute, storage, and networking infrastructure across on-premises and multi-cloud environments. Investigate threats, respond to incidents, automate secure configurations and compliance evidence, threat-model infrastructure, and manage security technology lifecycles. The role requires hands-on Linux, networking, programming, infrastructure security, and collaboration with infrastructure and security teams.

Lead enterprise security architecture across software procurement, on-premises data centers, networks, infrastructure, identity, encryption, privileged access, and zero-trust design. Establish security standards, conduct practical third-party software and SaaS reviews, support cloud and application security architects, identify cross-domain gaps, and advise executives and engineering teams. The role requires broad cybersecurity expertise, regulated-industry experience, and strong risk-based decision-making.

Secure and maintain ServiceNow platforms across federal environments by implementing NIST, RMF, FedRAMP, and security hardening controls. Manage ATO packages, SSPs, POA&Ms, vulnerability remediation, monitoring, SIEM integrations, access governance, incident response, audits, configuration baselines, and secure ServiceNow development. Collaborate with platform teams, assessors, auditors, and system owners while reporting security posture metrics and leading security capability rollouts.

Design, administer, optimize, and support enterprise endpoint security platforms across a global environment. The role develops security baselines, hardening standards, automation workflows, and detection capabilities; investigates security events; supports incident response; evaluates security technologies; and partners with Cyber Operations, Infrastructure, Desktop Engineering, Identity, and DevOps/SecOps teams. Responsibilities include managing EDR, PAM, firewall, device control, API integrations, and security projects while improving overall endpoint security posture.

Leads technical pre-sales engagements for Microsoft security and compliance solutions. Designs architectures, delivers presentations, demonstrations, workshops, pilots, and proof-of-concept solutions focused on XDR, zero trust, cloud security, Purview, data protection, governance, privacy, and compliance. Partners with sales, consulting, and internal and external technical teams to resolve blockers, influence competitive strategy, and help customers implement Microsoft and third-party cloud security technologies.

Leads the design, development, and delivery of complex cybersecurity data solutions. Builds and optimizes data pipelines, architectures, transformations, and large-scale datasets while ensuring quality, governance, metadata management, and performance. Partners with engineering and product teams, supports testing and troubleshooting, manages CI/CD and release processes, researches new technologies, leads proofs of concept, documents operational procedures, and mentors junior engineers. The role requires strong data engineering, software development, cloud, big data, SQL, and cybersecurity expertise.

Implements and operates data security controls across cloud analytics platforms, databases, data lakes, storage, and pipelines. Responsibilities include encryption, key and secrets management, least-privilege access, data classification, masking, tokenization, database hardening, secure integrations, entitlement reviews, automation, telemetry, compliance evidence, threat modeling, documentation, and technical support. The role collaborates with security, data, governance, engineering, and IT teams while working remotely.

Owns and strengthens the security posture of cloud-based SaaS and Microsoft 365 environments. Responsibilities include vulnerability management, incident response, cloud and endpoint hardening, identity and data protection, secure configuration, monitoring, compliance evidence, customer security reviews, and risk management aligned with HITRUST, HIPAA, NIST, and related frameworks.

Designs, implements, configures, and supports enterprise cybersecurity solutions across IAM, endpoint, network, email, application, cloud, and security awareness domains. Conducts vulnerability assessments, threat hunting, incident investigation, security tool tuning, policy development, and security architecture reviews. Serves as a security subject matter expert on technology projects, collaborates with an MSSP, provides incident escalation support, and maintains availability for critical security operations.

Leads enterprise security architecture for commercial banking and payments, developing secure, scalable strategies across cloud, infrastructure, applications, data, and security platforms. Establishes architecture standards and reference patterns, embeds security into software development and CI/CD, advises on regulatory and risk requirements, and guides cloud modernization, identity, API, container, and data security initiatives. Partners with architects, engineering, DevOps, SRE, security, business, and executive stakeholders to influence technology decisions in a highly matrixed organization.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.