Top Cyber Security Jobs in Denver & Boulder, CO

Secure LLMs, generative AI systems, ML infrastructure, training pipelines, and AI applications. Responsibilities include threat modeling, architecture reviews, security controls, hardening, vulnerability remediation, data privacy, incident response runbooks, vendor reviews, governance, policy development, and AI security training. The role also supports proof-of-concept security solutions and monitors emerging AI threats.

Designs, builds, operates, and integrates workforce identity and access management solutions for employees, contractors, and partners. Responsibilities include federated authentication, provisioning and deprovisioning, identity governance, compliance, access management, vendor integrations, acquisition-related migrations, solution rollout, and cloud-based service operation. The role requires hands-on IAM expertise, strong communication, programming familiarity, CI/CD experience, and AWS experience.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Leads KeyBank’s Red Team and offensive security program, including adversary emulation, penetration testing, physical and application assessments, cloud security testing, AI security evaluations, and purple team exercises. Develops testing strategy, methodologies, tooling, metrics, and maturity roadmaps; mentors engineers; coordinates internal and third-party engagements; validates remediation and attack paths; and presents findings and strategic recommendations to executives and cybersecurity stakeholders.

Designs, implements, configures, and supports enterprise cybersecurity solutions across IAM, endpoint, network, email, application, cloud, and security awareness domains. Conducts vulnerability assessments, threat hunting, incident investigation, security tool tuning, policy development, and security architecture reviews. Serves as a security subject matter expert on technology projects, collaborates with an MSSP, provides incident escalation support, and maintains availability for critical security operations.

Leads an engineering team responsible for designing, building, and operating data security products and controls. Provides technical direction, hands-on engineering leadership, and delivery ownership across DLP policy, data discovery and classification, data access controls, policy-as-code workflows, automation, integrations, testing, deployment, reliability, and operational support. Translates data security requirements into scalable solutions while mentoring engineers and driving adoption of secure engineering practices.

Lead Prelim’s security program across secure SDLC, application and cloud security, IAM, incident response, endpoint management, vendor risk, security reviews, and SOC 2 Type II compliance. Partner with DevOps and engineering, coordinate penetration testing, develop policies and risk roadmaps, manage audits and customer questionnaires, and improve detection and access controls. The role is the company’s first dedicated security hire and requires strong judgment, communication, and hands-on technical skills.

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.

Designs, implements, and maintains secure IT systems for aerospace and defense programs. Leads CI/CD automation, software configuration management, Configuration Control Board governance, baseline and release control, incident response, and digital forensics. Collaborates with product and engineering teams on requirements, acceptance criteria, UAT, and SDLC quality. Requires advanced cybersecurity knowledge, experience with NIST and ISO 27001, and an active Secret clearance.

Owns company-wide security across product, infrastructure, corporate systems, and IT. Responsibilities include fixing authentication and authorization issues, managing keys and secrets, hardening internal tools, improving permissions, contributing to backend engineering, and leading security reviews, incident response, and security tooling. This hands-on role requires broad security expertise, strong software engineering ability, and comfort working in an ambiguous early-stage startup environment.

Owns Albedo’s IT and security systems, including identity, endpoints, AWS infrastructure, networks, Linux, logging, detection and response, vulnerability management, and compliance controls. Builds infrastructure-as-code automation, operates Entra ID, Intune, Sentinel, and Defender XDR, supports CMMC, NIST 800-171, and ITAR programs, responds to incidents, and improves underlying systems. The role requires independent prioritization, production software ownership, security engineering judgment, and on-site work in Broomfield, Colorado.

Build and operate automated security infrastructure across AWS and Kubernetes, including cryptographic-material lifecycles, security telemetry, compliance automation, policy-as-code, threat modeling, and CI/CD security controls. Develop agentic AI workflows using tools such as Claude Code and MCP integrations. Support incident response, review security architecture, automate evidence collection, and partner with engineering, audit, risk, vendors, and clients to improve security posture at scale.

Leads OT network security engineering across manufacturing sites, translating enterprise architecture into segmentation, firewall, DMZ, access-control, and remote-access implementations. Coordinates production-sensitive cutovers with plant, IT, and safety teams while protecting manufacturing operations. Develops site-specific designs, compensating controls, implementation playbooks, and network documentation. Requires deep ICS expertise, knowledge of industrial protocols and security standards, and 10+ years of OT or industrial network security experience.

Owns the architecture and technical roadmap for the Ping Identity platform. Designs enterprise SSO, MFA, identity governance, application integrations, RBAC and ABAC frameworks, lifecycle management, and cloud or hybrid deployments. Leads migration and multi-region availability strategies while producing architecture designs, solution blueprints, integration standards, and audit-ready runbooks.

Designs, deploys, configures, migrates, and troubleshoots Palo Alto Networks security infrastructure in customer environments. Responsibilities include firewall, Panorama, Prisma, Strata Cloud Manager, and GlobalProtect implementation; migration from legacy platforms; routing and switching support; change-window execution; technical design and migration documentation; post-deployment stabilization; and communication with customers, account teams, and engineering. Travel to customer sites and evening, overnight, or weekend maintenance windows may be required.

Provide cybersecurity engineering support for programs: validate security requirements and designs, perform technical assessments and A&A documentation under NIST RMF, support incident response, identify and mitigate system risks, and implement enterprise security controls using tools like Splunk, Tenable, and HBSS. Requires coordination with engineers, PMs, and stakeholders and maintaining system Authorizations to Operate.

Provide cybersecurity engineering support to develop, validate, and maintain secure systems. Manage cyber requirements, perform technical security assessments, support Incident Response and Assessment & Authorization (A&A) per NIST RMF, produce A&A documentation, mitigate risks, and advise architects and program stakeholders on security design and compliance.

Build and deploy highly reliable endpoint security agents for Windows, macOS, and Linux. Lead technical execution, system design, architecture documentation, code quality, performance, and reliability initiatives. Mentor engineers and collaborate with Product, Security, and DevOps teams. The role requires strong systems programming, operating system internals, cybersecurity, threat detection, security data processing, and technical leadership experience.

Leads enterprise information security architecture strategy and design across network, application, data, identity, on-premises, hybrid, and cloud environments. Assesses risks, develops mitigation strategies, integrates advanced security technologies, automates security capabilities, and establishes identity and access management best practices. Influences stakeholders, drives organizational change, mentors technical teams, and ensures security initiatives align with business objectives and regulatory requirements.

Lead development of security enforcement integrations that warn or block unsafe AI artifact installations, serve sanitized alternatives, and record audit events. Build reliable event-driven backend systems with queues, webhooks, idempotency, retries, back-pressure, approval flows, dry runs, audit logs, and rollback mechanisms. Integrate third-party security, infrastructure, and identity APIs, with potential future work on fleet-wide revocation controls and security platform integrations.

Leads information security architecture and program initiatives across IT and business projects. Provides security consulting, develops enterprise data, network, and application protection requirements, conducts threat analysis, vulnerability assessments, penetration testing, and remediation planning. Researches emerging threats and technologies, supports control testing and incident response, and guides security team members. Requires extensive information security leadership, application and network security expertise, secure architecture knowledge, and strong communication skills.

Designs, implements, verifies, and assesses secure IT infrastructure and information systems. Provides security engineering support for ATO extensions, authorization packages, RMF compliance, and technical security controls. Conducts configuration, vulnerability, and risk assessments; deploys security monitoring and protection tools; documents SSPs and POA&Ms; analyzes system changes; and supports incident remediation, root-cause analysis, and corrective actions.

Develop backend systems for large-scale web applications and security products primarily in Go. Write robust, modular code, optimize performance, participate in code reviews and documentation, and collaborate across technical and product teams. The role requires strong HTTP and networking knowledge, Linux, automation, shell scripting, and backend operations experience. Engineers participate in core US business hours and an on-call rotation, with occasional travel as needed.

Designs and delivers Qualys-based security and compliance solutions for enterprise customers across cloud and on-premises environments. Supports technical sales engagements, proofs of concept, architecture workshops, proposals, deployment health checks, and customer advisory activities. The role addresses asset and vulnerability management, patching, compliance, threat detection, application security, and remediation. It also contributes to product roadmap feedback, sales enablement, technical content, field training, and industry events, with at least 30% customer travel.

Leads cryptographic engineering for secure space and ground communications systems. Responsibilities include crypto unit trade studies, hardware and firmware integration, interface definition, testing, verification, key management, lifecycle management, requirements traceability, and compliance with cybersecurity and NSA standards. The role supports PKMA, represents crypto engineering in technical reviews, collaborates with government and industry partners, and mentors junior engineers. The position is on-site in El Segundo, California, or Colorado Springs, Colorado, with approximately monthly travel.