Top Senior Cyber Security Jobs in Denver & Boulder, CO

Leads the design, implementation, and operation of information security controls across systems, networks, endpoints, and cloud environments. Responsibilities include SIEM/MDR, EDR/XDR, SOAR, vulnerability management, PAM, Zero Trust, incident response, data protection, DLP, and cloud security. The role collaborates with IT, Privacy, Compliance, and application teams, mentors engineers, supports security architecture and SDLC practices, and may provide periodic on-call incident response support.

Build Ent’s endpoint data-protection layer for classifying sensitive data, tracing provenance, and enforcing egress policies across devices, applications, networks, removable media, browsers, and AI tools. Develop cross-platform interception and content inspection capabilities, integrate on-device language models, optimize performance, produce forensic evidence, investigate compatibility issues, and improve detection precision for enterprise customers.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Lead enterprise network segmentation projects using Guardicore Micro Segmentation across data center and cloud environments. Responsibilities include architecture design, project planning, installation, integration, configuration, policy deployment, documentation, customization, training, optimization, and troubleshooting. The role partners with customers, Support, and Engineering teams to deliver successful implementations and improve post-sales satisfaction.

Leads cybersecurity solutions engineering for government and education customers across managed security, network monitoring, cloud security, and related services. Provides technical discovery, solution design, demonstrations, proofs of concept, onboarding, deployment guidance, escalations, and post-sales support. Partners with sales and technical account teams, mentors engineers, develops enablement materials, informs product strategy, identifies expansion opportunities, and manages customer activity in Salesforce.

Leads a distributed team securing NVIDIA DGX Cloud’s large-scale GPU infrastructure. Responsibilities include hiring and developing engineers, setting strategy for security control planes and foundational services, delivering measurable risk reduction, maintaining engineering standards, communicating security risks to executives, and collaborating with platform, SRE, networking, and security teams. The role requires strong engineering management, infrastructure or security expertise, cloud-native fluency, and influence across partner organizations.

Leads the design and implementation of secure IT infrastructure, advanced security monitoring, threat analysis, incident response, digital forensics, risk assessments, and security controls. Maintains Windows environments, Active Directory forests, domain controllers, certificate services, hypervisors, and hardened Group Policy configurations. Evaluates security technologies, documents breaches, mentors junior engineers, and participates in on-call incident response.

Designs, deploys, and supports enterprise network security systems, including BGP routing, DDoS mitigation, cloud network security, and WAF solutions. Leads security engineering initiatives, defines requirements, manages technical risks and vulnerabilities, develops test plans, reports metrics, collaborates with stakeholders, resolves complex security issues, and mentors team members.

Architects, deploys, and configures data security solutions for federal, DoD, and IC clients. Designs Zero Trust architectures, develops custom policies for hybrid cloud data control, and interfaces with agency stakeholders and internal engineering teams. Documents technical architectures and applies DSPM, DLP, data labeling, and tagging technologies. Requires TS/SCI clearance and experience with data security tools.

Designs, automates, and supports complex cybersecurity solutions across cloud and infrastructure environments. Responsibilities include security alert monitoring, incident and vulnerability management, security architecture, SIEM tuning, access reviews, compliance with frameworks such as SOC 2 and CMMC, risk assessments, third-party security reviews, scripting, and secure technology guidance. The role also mentors team members and partners with technical and business stakeholders to improve security posture.

Lead pre-sales security architecture engagements by designing and validating defense-in-depth solutions across hybrid, cloud, application, identity, endpoint, network, and data environments. Conduct security assessments, create remediation roadmaps, integrate security platforms, and support DevSecOps, SOC, detection engineering, incident response, compliance, and risk programs. Collaborate with sales, engineering, clients, and executive stakeholders to communicate technical trade-offs and deliver scalable enterprise security strategies.

Owns the company-wide IT and cybersecurity program, including SOC 2 compliance, cloud security, penetration-test remediation, business continuity testing, endpoint management, access controls, onboarding and offboarding, AI security governance, vendor reviews, security training, incident response, and employee IT support. The role partners with engineering, HR, Finance, leadership, auditors, and healthcare customers while managing security across AWS, Heroku, Cloudflare, Google Workspace, GitHub, and related tools.

Build and automate security infrastructure across AWS and Kubernetes, including cryptographic material lifecycle, telemetry pipelines, policy-as-code, compliance monitoring, and incident-response tooling. Develop agentic AI workflows using coding assistants, MCP integrations, and custom harnesses. Apply threat modeling and secure architecture review while partnering with engineering, risk, auditors, vendors, and clients. The role emphasizes production software, cloud-native automation, continuous control monitoring, and eliminating manual security toil.

Build and operate a reliable security platform across hundreds of AWS environments. Responsibilities include security telemetry and OpenSearch infrastructure, GitOps deployments, Kubernetes and AWS security controls, cross-account and multi-region architecture, Python automation, and agentic AI workflows. The role participates in on-call support, security incident enablement, audit evidence automation, and reliability improvements while collaborating with Security Operations, Risk, and SRE teams.

Lead design and implementation of security infrastructure and administer mission-critical engineering and DevOps applications. Manage Linux/RHEL systems, JFrog Artifactory, GitLab/GitHub, 3DX/Cameo/Jama/Teamcenter platforms, integrations, DISA STIG hardening, CI/CD integrations, and provide Tier 2/3 troubleshooting, compliance support, and ATO/RMF evidence for a classified defense program.

Conduct offensive security assessments and red team operations to identify network and system vulnerabilities; perform malware and packet analysis; develop scripts and tools; deliver written and oral briefings to clients and management; and train and mentor junior operators.

Lead research and produce high‑impact network security insights. Advise clients on evaluation, selection and deployment of network security technologies, present at events, support sales, mentor analysts, and drive research agenda and process improvements.

Perform advanced offensive security work: conduct complex penetration tests, teach and integrate offensive tradecraft into the AI platform, harden product and company defenses, and collaborate with core engineers to build and ship capabilities that automate red-team techniques.

Provide cybersecurity engineering and architecture for mission and enterprise systems, translate NIST/CNSS controls into secure designs, troubleshoot Linux/Windows servers and endpoints, Cisco network devices, and enterprise storage, implement continuous monitoring (vulnerability scanning, SIEM), perform technical security assessments using Tenable and DISA STIGs, prioritize risk, and lead remediation efforts to maintain compliance and mission assurance.

Manage and grow a security engineering team responsible for product and platform security, embedding security into the SDLC, running red team/adversarial testing, performing hands-on web application pentesting, threat modeling, secure-coding guidance, and defining AI security guardrails.

Lead strategy, execution, and operational excellence for multiple security engineering domains. Build and develop leaders, deliver multi-year roadmaps, drive platform evolution, automation, vendor strategy, and cross-functional programs to reduce risk and scale secure operations.

Support cybersecurity engineering for a VA healthcare modernization project: secure AWS and hybrid environments, support RMF/ATO and compliance, configure and monitor AWS security services, produce SSPs/POA&Ms/SOPs, perform vulnerability assessments and DISA STIG hardening, integrate security into DevSecOps and CI/CD, and collaborate with stakeholders on security controls and remediation.

Build and maintain scalable data pipelines and data products to enable security and fraud detection. Implement ETL, data models, and distributed processing (Spark/Presto/Flink/Kafka) to centralize signals, support analytics and machine learning, and partner with security teams to improve detection and mitigation of fraud and account compromise.

Provide engineering-first customer support for security, privacy, and assurance tooling. Triage and resolve authentication and access issues, build automation and runbooks, maintain support tooling, and improve developer experience. Use Generative AI responsibly to accelerate triage, documentation, and automation while advocating for customers and collaborating with product and engineering partners.