Top Cyber Security Jobs in Denver & Boulder, CO

Lead system security engineering for autonomous vehicle platforms, defining security requirements, interfaces, threat models, risk analyses, trade studies, and verification plans. Integrate hardware security, secure boot, cryptography, key management, and secure communications across vehicle compute, sensors, networks, and cloud telemetry. Partner with hardware, embedded software, safety, validation, suppliers, and Tier-1 organizations to align cybersecurity with functional safety and regulatory requirements.

Designs, implements, and optimizes Microsoft 365 security, compliance, identity, and governance solutions for clients. Configures Microsoft Purview, Entra ID, Defender, DLP, information protection, access controls, and AI-agent security capabilities. Assesses environments, identifies gaps, develops remediation plans, automates administration with PowerShell, and delivers documentation, workshops, testing, and knowledge transfer. The role requires strong consulting and customer-facing skills while supporting technical project delivery across enterprise environments.

Provides pre-sales technical support and technical account management for Vectra’s cybersecurity platform. Leads customer discovery, product demonstrations, proofs of concept, technology reviews, integrations, and security architecture discussions. Builds technical relationships with customers and channel partners, supports sales teams, collaborates on deployments and product projects, and maintains expertise in security technologies, networking, cloud security, attacker progression, incident response, and competitive offerings. Regional travel is required as needed.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

Build and operate security controls, telemetry, detections, and enforcement for NVIDIA’s large-scale EDA compute, storage, and networking infrastructure across on-premises and multi-cloud environments. Investigate threats, respond to incidents, automate secure configurations and compliance evidence, threat-model infrastructure, and manage security technology lifecycles. The role requires hands-on Linux, networking, programming, infrastructure security, and collaboration with infrastructure and security teams.

Builds secure AI and agentic cybersecurity tooling, transforming research prototypes into production-ready services. Responsibilities include developing backend services, APIs, CLI tools, automation, and integration patterns; defining MVPs for ambiguous security and identity challenges; collaborating across research, product, enterprise security, and platform teams; and applying offensive security and adversarial thinking to address AI-specific risks such as injection, tool misuse, unauthorized access, data exfiltration, and unsafe delegation.

Develop and integrate network security software with firewalls, routers, switches, IPS, proxies, and other security devices. Responsibilities include gathering technical requirements, designing integrations, maintaining security-device test labs, assisting development and testing, creating test cases, troubleshooting complex integration issues, and documenting configurations. The role requires expertise in networking and security, packet analysis, major firewall vendors, virtualization, and regular expressions.

Conduct cybersecurity assessments and OT/ICS inventories at CONUS and OCONUS DoD facilities. Perform logical network scans, document topology and data flows, evaluate compliance with DoD cybersecurity standards and RMF requirements, identify vulnerabilities, and recommend remediation. The role also supports site-visit planning, stakeholder coordination, logistics, and closeout reporting.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Designs and maintains security controls for blockchain, digital asset, application, cloud, and infrastructure environments. Responsibilities include threat modeling, cryptographic key management, application and API security, AWS and Kubernetes hardening, vulnerability management, monitoring, incident response, penetration testing, and security governance. The engineer collaborates with Cybersecurity, Engineering, DevOps, and Infrastructure teams to secure distributed systems and support regulatory requirements.

The Information Systems Security Engineer will secure a USPS information system modernization project by implementing federal security controls, conducting vulnerability assessments and penetration testing, integrating security into CI/CD pipelines, maintaining SSP, RMP, and POA&M documentation, monitoring cloud security tools, supporting incident response, and delivering security training. The role requires collaboration with development, operations, and federal security stakeholders while ensuring compliance with FISMA, NIST RMF, and FedRAMP standards.

Designs and governs enterprise security architectures across applications, infrastructure, networks, endpoints, cloud environments, and sensitive data. Translates mission, business, regulatory, and federal requirements into secure designs; conducts architecture reviews and threat modeling; defines security standards and controls; guides DevSecOps, cloud, infrastructure, and application teams; and supports security technology selection and integration. The role requires extensive enterprise or federal security architecture experience, relevant certifications, U.S. citizenship, and the ability to obtain Public Trust clearance.

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.

Designs, integrates, assesses, and maintains security controls for classified DoD information systems, including Collateral, SCI, and SAP environments. Leads security engineering and cybersecurity teams, supports RMF and JSIG authorization, performs risk assessments, develops STIGs and test procedures, integrates monitoring and SIEM tools, and mitigates system threats throughout the lifecycle. The role also provides technical leadership, incident response support, operational procedures, and guidance to architects and developers.

Leads the design and implementation of secure IT infrastructure for aerospace and defense systems. Responsibilities include advanced security monitoring, threat analysis, incident response, digital forensics, risk and vulnerability assessments, security controls, breach documentation, technology evaluation, and mentoring junior engineers. The role requires active Top Secret clearance with SCI eligibility, participation in on-call incident response, and occasional travel.

Architects and manages enterprise security engineering, threat detection, vulnerability assessment, security hardening, incident response, and security policies across cloud, on-premises, and SaaS environments. The role monitors security logs, supports compliance, advises on vendors and implementations, integrates security into the development lifecycle, and participates in on-call and change management activities.

Serves as a security subject matter expert supporting sales teams and customers. The role assesses security environments, facilitates incident response and investigations, demonstrates Varonis capabilities, supports threat detection evaluations, develops technical enablement materials, communicates product updates, and gathers customer feedback for product improvement. Strong expertise in cloud and self-hosted network security, Microsoft security ecosystems, identity management, SIEM, SOAR, and threat detection is required.

Leads the engineering, integration, deployment, and support of AI-powered security operations platforms. Designs security automation, SOAR integrations, RAG architectures, agent orchestration, evidence pipelines, observability, governance, and cloud-based security workflows. Partners across security, risk, data, and technology teams to improve investigations and reduce response times while managing AI-related risks. Provides technical leadership, establishes engineering standards, mentors staff, and communicates complex security risks to senior stakeholders.

Leads the design and implementation of security solutions for AI systems across data ingestion, model training, deployment, and runtime. Develops controls against prompt injection, data poisoning, model inversion, data leakage, and unauthorized access. Secures cloud infrastructure, APIs, identities, integrations, and third-party AI platforms; implements monitoring, automated security testing, and incident response. Partners with architecture, engineering, and governance teams to ensure resilient, compliant AI security practices.

Part-time remote cybersecurity internship supporting presales, client engagement, technical writing, labs, certifications, and vendor solution research. Interns shadow consultants, build networking and security skills, practice explaining technical concepts, and gain exposure to SIEM, vulnerability scanning, endpoint security, cloud, and CTF platforms. The role requires foundational cybersecurity knowledge, self-directed learning, communication skills, and availability for 20–29 hours weekly during Central Time business hours. It may lead to full-time employment near Tulsa, Oklahoma.

Assesses and mitigates security risks across applications, systems, networks, and cloud infrastructure. Conducts security assessments, identifies vulnerabilities and compromises, deploys mitigating controls, performs compliance investigations, and develops security guidance, policies, scripts, and tools. The role requires collaboration with IT, engineering, and business units, with emphasis on NIST frameworks, adversarial techniques, malware, intrusion management, FedRAMP, and CMMC environments.

Analyze, debug, and secure diverse codebases; implement features; refactor legacy software; conduct audits and penetration tests; optimize backend performance; and document findings to improve AI training datasets.

Leads Fastly’s Platform Security organization, defining multi-year technical strategy and roadmaps for foundational infrastructure, secrets, identity, PKI, and trust services. Manages engineering teams and principal-level contributors, drives reliability and security best practices across the organization, establishes metrics and accountability, and communicates strategy and risk to executives. Requires deep experience with distributed systems, infrastructure as code, Linux, cloud and on-premises environments, and security technologies. Coding is not expected, but strong technical expertise is essential.

Sets the technical vision for enterprise security across cloud, identity, application, data, endpoint, and network environments. Leads security architecture, threat modeling, DevSecOps, incident response, compliance evidence, security roadmap planning, and AI security initiatives. Advises executives and cross-functional stakeholders, handles high-severity escalations, mentors security engineers, and strengthens healthcare security controls for AWS, Azure, FHIR, Medplum, Snowflake, HITRUST, HIPAA, and NIST requirements.

Lead product, cloud, application, infrastructure, and internal security across Hipp’s healthcare SaaS platform. Responsibilities include architecture reviews, threat modeling, vulnerability management, cloud and identity security, monitoring, incident response, AI-agent security, compliance controls, vendor risk, customer security reviews, and security mentorship.