Top Senior Cyber Security Jobs in Denver & Boulder, CO

Develop backend systems for large-scale web applications and security products primarily in Go. Write robust, modular code, optimize performance, participate in code reviews and documentation, and collaborate across technical and product teams. The role requires strong HTTP and networking knowledge, Linux, automation, shell scripting, and backend operations experience. Engineers participate in core US business hours and an on-call rotation, with occasional travel as needed.

Designs and delivers Qualys-based security and compliance solutions for enterprise customers across cloud and on-premises environments. Supports technical sales engagements, proofs of concept, architecture workshops, proposals, deployment health checks, and customer advisory activities. The role addresses asset and vulnerability management, patching, compliance, threat detection, application security, and remediation. It also contributes to product roadmap feedback, sales enablement, technical content, field training, and industry events, with at least 30% customer travel.

Leads cryptographic engineering for secure space and ground communications systems. Responsibilities include crypto unit trade studies, hardware and firmware integration, interface definition, testing, verification, key management, lifecycle management, requirements traceability, and compliance with cybersecurity and NSA standards. The role supports PKMA, represents crypto engineering in technical reviews, collaborates with government and industry partners, and mentors junior engineers. The position is on-site in El Segundo, California, or Colorado Springs, Colorado, with approximately monthly travel.

Designs and implements secure cloud architectures, IL5 controls, STIG-aligned hardening baselines, identity integrations, and cybersecurity controls for federal and DoD-aligned platforms. Performs security assessments, vulnerability analysis, continuous monitoring, secure deployment reviews, audit support, and remediation planning. Requires expertise in AWS, NIST, RMF, PKI, SIEM, and cloud security, along with mentoring junior engineers and documenting technical architectures. The role is fully remote but requires an active Top Secret clearance and substantial security engineering experience.

Leads the design, implementation, and operation of information security controls across systems, networks, endpoints, and cloud environments. Responsibilities include SIEM/MDR, EDR/XDR, SOAR, vulnerability management, PAM, Zero Trust, incident response, data protection, DLP, and cloud security. The role collaborates with IT, Privacy, Compliance, and application teams, mentors engineers, supports security architecture and SDLC practices, and may provide periodic on-call incident response support.

Build Ent’s endpoint data-protection layer for classifying sensitive data, tracing provenance, and enforcing egress policies across devices, applications, networks, removable media, browsers, and AI tools. Develop cross-platform interception and content inspection capabilities, integrate on-device language models, optimize performance, produce forensic evidence, investigate compatibility issues, and improve detection precision for enterprise customers.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Leads cybersecurity solutions engineering for government and education customers across managed security, network monitoring, cloud security, and related services. Provides technical discovery, solution design, demonstrations, proofs of concept, onboarding, deployment guidance, escalations, and post-sales support. Partners with sales and technical account teams, mentors engineers, develops enablement materials, informs product strategy, identifies expansion opportunities, and manages customer activity in Salesforce.

Leads the design and implementation of secure IT infrastructure, advanced security monitoring, threat analysis, incident response, digital forensics, risk assessments, and security controls. Maintains Windows environments, Active Directory forests, domain controllers, certificate services, hypervisors, and hardened Group Policy configurations. Evaluates security technologies, documents breaches, mentors junior engineers, and participates in on-call incident response.

Designs, deploys, and supports enterprise network security systems, including BGP routing, DDoS mitigation, cloud network security, and WAF solutions. Leads security engineering initiatives, defines requirements, manages technical risks and vulnerabilities, develops test plans, reports metrics, collaborates with stakeholders, resolves complex security issues, and mentors team members.

Manage and enhance the firm’s information security systems, threat lifecycle, incident response, risk management, and security technology. Review and investigate security events, coordinate threat mitigation, lead third-party assessments, design scalable security environments, provide security consulting, and support users. The role requires expertise in SIEM, network and endpoint security, cloud technologies, incident response, Linux, and enterprise security controls.

Architects, deploys, and configures data security solutions for federal, DoD, and IC clients. Designs Zero Trust architectures, develops custom policies for hybrid cloud data control, and interfaces with agency stakeholders and internal engineering teams. Documents technical architectures and applies DSPM, DLP, data labeling, and tagging technologies. Requires TS/SCI clearance and experience with data security tools.

Designs, automates, and supports complex cybersecurity solutions across cloud and infrastructure environments. Responsibilities include security alert monitoring, incident and vulnerability management, security architecture, SIEM tuning, access reviews, compliance with frameworks such as SOC 2 and CMMC, risk assessments, third-party security reviews, scripting, and secure technology guidance. The role also mentors team members and partners with technical and business stakeholders to improve security posture.

Lead pre-sales security architecture engagements by designing and validating defense-in-depth solutions across hybrid, cloud, application, identity, endpoint, network, and data environments. Conduct security assessments, create remediation roadmaps, integrate security platforms, and support DevSecOps, SOC, detection engineering, incident response, compliance, and risk programs. Collaborate with sales, engineering, clients, and executive stakeholders to communicate technical trade-offs and deliver scalable enterprise security strategies.

Owns the company-wide IT and cybersecurity program, including SOC 2 compliance, cloud security, penetration-test remediation, business continuity testing, endpoint management, access controls, onboarding and offboarding, AI security governance, vendor reviews, security training, incident response, and employee IT support. The role partners with engineering, HR, Finance, leadership, auditors, and healthcare customers while managing security across AWS, Heroku, Cloudflare, Google Workspace, GitHub, and related tools.

Lead design and implementation of security infrastructure and administer mission-critical engineering and DevOps applications. Manage Linux/RHEL systems, JFrog Artifactory, GitLab/GitHub, 3DX/Cameo/Jama/Teamcenter platforms, integrations, DISA STIG hardening, CI/CD integrations, and provide Tier 2/3 troubleshooting, compliance support, and ATO/RMF evidence for a classified defense program.

Conduct offensive security assessments and red team operations to identify network and system vulnerabilities; perform malware and packet analysis; develop scripts and tools; deliver written and oral briefings to clients and management; and train and mentor junior operators.

Lead research and produce high‑impact network security insights. Advise clients on evaluation, selection and deployment of network security technologies, present at events, support sales, mentor analysts, and drive research agenda and process improvements.

Perform advanced offensive security work: conduct complex penetration tests, teach and integrate offensive tradecraft into the AI platform, harden product and company defenses, and collaborate with core engineers to build and ship capabilities that automate red-team techniques.

Provide cybersecurity engineering and architecture for mission and enterprise systems, translate NIST/CNSS controls into secure designs, troubleshoot Linux/Windows servers and endpoints, Cisco network devices, and enterprise storage, implement continuous monitoring (vulnerability scanning, SIEM), perform technical security assessments using Tenable and DISA STIGs, prioritize risk, and lead remediation efforts to maintain compliance and mission assurance.

Manage and grow a security engineering team responsible for product and platform security, embedding security into the SDLC, running red team/adversarial testing, performing hands-on web application pentesting, threat modeling, secure-coding guidance, and defining AI security guardrails.

Lead strategy, execution, and operational excellence for multiple security engineering domains. Build and develop leaders, deliver multi-year roadmaps, drive platform evolution, automation, vendor strategy, and cross-functional programs to reduce risk and scale secure operations.

Support cybersecurity engineering for a VA healthcare modernization project: secure AWS and hybrid environments, support RMF/ATO and compliance, configure and monitor AWS security services, produce SSPs/POA&Ms/SOPs, perform vulnerability assessments and DISA STIG hardening, integrate security into DevSecOps and CI/CD, and collaborate with stakeholders on security controls and remediation.

Build and maintain scalable data pipelines and data products to enable security and fraud detection. Implement ETL, data models, and distributed processing (Spark/Presto/Flink/Kafka) to centralize signals, support analytics and machine learning, and partner with security teams to improve detection and mitigation of fraud and account compromise.

Provide engineering-first customer support for security, privacy, and assurance tooling. Triage and resolve authentication and access issues, build automation and runbooks, maintain support tooling, and improve developer experience. Use Generative AI responsibly to accelerate triage, documentation, and automation while advocating for customers and collaborating with product and engineering partners.