Top Cyber Security Jobs in Denver & Boulder, CO

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. Re-architect internal PKI and machine or workload identity systems, participate in on-call incident response, support internal developers, and advise engineering teams on secure system design. The role requires software development, distributed systems expertise, Linux/UNIX administration, and hands-on security implementation experience.

Designs, validates, and verifies cybersecurity solutions across the systems lifecycle. Performs threat modeling, vulnerability analysis, cyber risk assessments, supply chain risk management, security architecture, and cybersecurity testing. Coordinates with architects and developers, supports Assessment and Authorization activities, and ensures compliance with security requirements. The role focuses on cyber capabilities for satellite and ground systems and requires an active TS/SCI clearance.

Designs, develops, validates, and verifies cybersecurity solutions across the systems lifecycle. Performs threat modeling, vulnerability analysis, cyber risk assessments, supply chain risk management, security architecture, and cybersecurity testing. Supports Risk Management Framework assessment and authorization activities while coordinating with cyber architects, systems engineers, and developers. The role applies cybersecurity engineering practices to hardware, software, satellite, and ground systems and requires an active Top Secret clearance.

Own and improve network, firewall, cloud, endpoint, identity, email, and SaaS security controls. Responsibilities include firewall administration, VPNs, segmentation, secure architecture, traffic and log analysis, incident investigation, vulnerability remediation, security monitoring, technical project support, compliance evidence, and automation. The role collaborates with Infrastructure and DevOps teams, troubleshoots complex connectivity and security issues, and applies least-privilege, Zero Trust, and defense-in-depth principles.

Leads technical security sales engagements for K-12 and community college customers through demonstrations, workshops, whiteboarding, hackathons, and proofs of concept. Designs secure cloud and hybrid architectures, resolves technical blockers, advises on Zero Trust, XDR, AI security, and compliance, and supports production deployments. Builds relationships with developers, platform leaders, partners, and customer success teams while promoting Microsoft security, cloud, and AI solutions.

Leads cybersecurity engineering for classified space-vehicle and cryptographic systems. Responsibilities include security architecture, threat modeling, vulnerability analysis, STIG hardening, security testing, RMF and Assessment and Authorization activities, EVSS administration, audit and log review, POA&M remediation, software risk assessments, and technical investigations. Coordinates across engineering, operations, deployment, government, customer, and subcontractor teams in an Agile environment.

Leads enterprise AI Security and GenAI data protection, owning the AI Gateway from evaluation through deployment and ongoing operations. Designs controls for prompts, uploads, browser traffic, copilots, agents, and integrations; implements monitoring, coaching, redaction, quarantine, and blocking. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures effectiveness, supports audit readiness, and partners with business and technology teams to enable responsible AI adoption.

Leads regional enterprise security sales by serving as a cloud security expert, shaping opportunities, advising account teams, managing executive relationships, and orchestrating technical teams and partners. Conducts architecture reviews, demos, proof-of-concepts, pilots, ROI/TCO analyses, and consultative engagements to promote Microsoft security solutions, Zero Trust adoption, and customer business outcomes.

Provides technical pre-sales leadership for data security solutions, including demos, proofs of concept, architecture workshops, and secure cloud or hybrid deployments. Advises customers on data security posture, Microsoft Purview, AI application security, and scalable architectures. Builds developer and platform-lead relationships, resolves technical blockers, develops technical win strategies, and collaborates with product engineering. Represents Microsoft in customer and developer communities.

Applies cybersecurity engineering across the system lifecycle, including threat modeling, vulnerability analysis, cyber risk assessment, supply-chain risk management, security architecture, and hardware/software testing. Coordinates with architects and developers, supports Assessment and Authorization activities, and ensures compliance with cybersecurity requirements. Requires C++, scripting, version control, Secret clearance, and DoD 8570 IAT Level II certification. Preferred experience includes DevSecOps, embedded systems, penetration testing, RMF, networking, and vulnerability analysis.

Supports cybersecurity engineering for Fleet Ballistic Missile defense systems by reviewing designs, conducting testing and risk analyses, documenting findings, contributing to security architecture and mitigation planning, and developing System Security Engineering test plans. Collaborates with systems, software, and test engineers while supporting cybersecurity compliance and requirements activities.

Evaluates defense system designs for cybersecurity gaps, conducts system and component-level testing and risk analysis, communicates findings, and supports security architecture and mitigation strategies. The role requires familiarity with DoD cybersecurity frameworks, testing environments, threat analysis, STIG, ACAS, eMASS, and penetration testing. It supports the Navy’s Fleet Ballistic Missile program and requires an active Secret Clearance, U.S. citizenship, and the ability to obtain Top Secret clearance.

Leads architecture and delivery of Salesforce’s cloud-native GRC platform, including policy-as-code, compliance-as-code, automated evidence collection, telemetry, alerting, and risk evaluation. Designs multi-cloud integrations, ensures secure engineering and CI/CD standards, evaluates human- and AI-generated code, and guides distributed feature teams. Partners with product, security, and GRC leaders to translate regulatory requirements into technical roadmaps. Mentors engineers and drives adoption of AI coding assistants and agent-enabled workflows.

Secures and governs cloud-native platforms, Kubernetes environments, CI/CD pipelines, identities, APIs, secrets, and AI workloads. The role implements vulnerability scanning, secure software supply chain controls, access governance, monitoring, threat detection, and incident response support. It partners with engineering and operations teams to establish security standards, remediate vulnerabilities, harden infrastructure, and advance secure-by-design practices across cloud and application environments.

Design, secure, administer, and improve on-premises, cloud, and hybrid infrastructure. Manage servers, networks, operating systems, virtualization, firewalls, endpoints, and monitoring tools. Strengthen security controls, investigate incidents with a third-party SOC, manage vulnerabilities and risks, maintain documentation, and lead infrastructure and security projects including upgrades, migrations, automation, and tool deployments.

Designs and implements secure architecture across cloud, on-premises, hybrid, application, infrastructure, and AI-enabled environments. Defines security controls, governance requirements, and enterprise guardrails; supports cloud transformation and emerging AI adoption. Leads architecture reviews, ensures regulatory and policy compliance, and collaborates with architecture, engineering, development, cybersecurity, compliance, risk, and operations teams to identify and mitigate security risks.

Architects, deploys, configures, and supports enterprise data security solutions for federal clients. Implements and tunes DLP policies, integrates security tools across hybrid cloud environments, develops scalable security architectures, troubleshoots complex issues, documents technical designs, and applies Zero Trust and federal data security practices. The role interfaces with agency stakeholders and internal engineering teams and requires a Secret clearance.

Architects, deploys, configures, and supports enterprise data security solutions for federal clients. Designs Zero Trust architectures, implements DLP and data protection policies across hybrid cloud environments, integrates security technologies, troubleshoots complex issues, documents technical architectures, and collaborates with agency and engineering stakeholders. Requires enterprise data security experience, Top Secret clearance, and knowledge spanning cybersecurity, networking, identity, cloud, operating systems, and infrastructure.

Lead the design, implementation, and continuous improvement of global network security architecture across enterprise, cloud, remote-access, and industrial IT/OT environments. Administer firewalls, segmentation, VPN, SASE/SSE, IDS/IPS, and related controls; conduct assessments and hardening; support incident response; manage changes, upgrades, resilience, and documentation; and coordinate security initiatives with infrastructure, cloud, SOC, plant engineering, and external providers.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Owns and improves Microsoft security platforms across Azure, Microsoft 365, and hybrid infrastructure. Implements Zero Trust, identity, endpoint, application, cloud, and data security controls; develops automation with PowerShell, Graph, KQL, APIs, Bicep, and Terraform; integrates security telemetry; supports detection and incident response; documents controls for audits and compliance; mentors engineers and partners with platform teams.

Conduct hardware, network, web, mobile, and application security assessments, including threat modeling, code review, penetration testing, firmware and binary analysis, and technical writing. Analyze embedded architectures, debug interfaces, firmware security mechanisms, proprietary protocols, IoT devices, and customer environments. Communicate findings and recommendations to customers while adapting quickly to unfamiliar technologies and delivering quality results on complex projects.

Engineers and operates corporate IT security across identity, devices, endpoints, SaaS, internal networks, and workforce AI tools. Responsibilities include access hardening, device trust, lifecycle automation, SaaS security posture, detection engineering, incident command, audit evidence, and AI guardrails. The role is primarily hands-on and partners with Security, IT, Legal, Compliance, and business leaders to investigate incidents, remediate risks, and improve corporate security controls.