Top Cyber Security Jobs in Denver & Boulder, CO

Leads enterprise security configuration automation and engineering strategy, roadmap, and delivery. Oversees teams developing policy-as-code, configuration baselines, preventive and detective controls, posture management improvements, and security enforcement capabilities. Partners with security, technology, risk, finance, and business stakeholders to remediate control gaps and meet regulatory and audit requirements. Establishes metrics, evaluates investments, and builds a high-performing security engineering team.

Designs and implements security controls across cloud platforms, operating systems, Kubernetes, networks, and CI/CD. Audits infrastructure for weaknesses, develops security and privacy improvements, performs threat modeling, and drives remediation. The role includes software development, infrastructure security, incident containment, and technical security analysis while collaborating with engineering teams in a distributed startup environment.

Conduct internal and external network, web application, API, mobile, cloud, social engineering, and wireless penetration tests. Advise clients on security and compliance, simulate cyberattacks, generate assessment reports, support engagement scoping and remediation, improve testing methodologies, manage escalations, and mentor junior staff while meeting delivery and utilization targets.

Defines enterprise technology strategy, architecture standards, security controls, and multi-year roadmaps across AWS, Azure, GCP, GitHub Enterprise, AI platforms, and infrastructure. Leads cloud governance, migration, modernization, FinOps, developer platform management, AI governance, and security architecture initiatives. Advises executives, ensures compliance and risk alignment, drives operational excellence, and mentors architects and engineers.

Assess and reduce security risks across AWS infrastructure, applications, CI/CD pipelines, containers, and AI/LLM integrations. Responsibilities include threat modeling, security reviews, integrating SAST/DAST/SCA tools, hardening cloud and Kubernetes environments, automating security and incident-response workflows, and remediating vulnerabilities from scans and bug bounty programs.

Designs, implements, and sustains cybersecurity capabilities across enterprise and mission systems. Performs continuous monitoring, vulnerability scanning, SIEM analysis, technical security assessments, control validation, risk prioritization, and remediation leadership. Engineers security controls into virtualized platforms, shared storage, and mission networks while troubleshooting Linux and Windows servers, endpoints, Cisco devices, and enterprise file systems. Ensures compliance with NIST, CNSS, DISA STIG, and related security frameworks.

Leads and supports offensive security consulting engagements, including network, web application, wireless, social engineering, red team, and purple team testing. Evaluates controls and security configurations, performs cybersecurity assessments, recommends remediation, and presents findings to technical and executive stakeholders. Supports client program execution, metrics, issue remediation, and continuous improvement. Mentors junior consultants and contributes to cybersecurity practice development, methodology innovation, and thought leadership.

Lead pre-sales security architecture engagements by designing and validating defense-in-depth solutions across hybrid, cloud, application, identity, endpoint, network, and data environments. Conduct security assessments, create remediation roadmaps, integrate security platforms, and support DevSecOps, SOC, detection engineering, incident response, compliance, and risk programs. Collaborate with sales, engineering, clients, and executive stakeholders to communicate technical trade-offs and deliver scalable enterprise security strategies.

Designs, implements, administers, and improves enterprise cybersecurity controls across endpoints, identities, cloud, email, networks, and applications. Investigates incidents, leads vulnerability management, performs architecture reviews and risk assessments, supports audits and compliance, and develops security standards, playbooks, documentation, and automation. Provides technical leadership and mentoring while aligning security practices with HIPAA, HITRUST, NIST, PCI DSS, and related requirements.

Leads enterprise cryptography consulting engagements for executives and security leaders. Responsibilities include cryptographic risk assessments, post-quantum readiness, enterprise key management, HSM strategy, PKI architecture, encryption modernization, crypto-agility design, and migration roadmaps. The role develops governance, policies, standards, and risk-based transformation programs aligned with NIST, ISO, and regulatory requirements. It also includes client presentations, executive advisory, thought leadership, cross-functional coordination, workshops, and mentoring.

Designs, implements, and operates SASE and ZTNA architecture across GCCH and commercial environments. Owns identity-driven access controls, session management, telemetry, compliance mapping, dashboards, and audit evidence. Serves as the senior escalation point for incidents, performs root-cause analysis, integrates device posture and SOAR workflows, develops AI-enabled automations, collaborates with identity, network, compliance, and vendors, and mentors junior engineers.

Owns the company-wide IT and cybersecurity program, including SOC 2 compliance, cloud security, penetration-test remediation, business continuity testing, endpoint management, access controls, onboarding and offboarding, AI security governance, vendor reviews, security training, incident response, and employee IT support. The role partners with engineering, HR, Finance, leadership, auditors, and healthcare customers while managing security across AWS, Heroku, Cloudflare, Google Workspace, GitHub, and related tools.

Build and automate security infrastructure across AWS and Kubernetes, including cryptographic material lifecycle, telemetry pipelines, policy-as-code, compliance monitoring, and incident-response tooling. Develop agentic AI workflows using coding assistants, MCP integrations, and custom harnesses. Apply threat modeling and secure architecture review while partnering with engineering, risk, auditors, vendors, and clients. The role emphasizes production software, cloud-native automation, continuous control monitoring, and eliminating manual security toil.

Build and operate a reliable security platform across hundreds of AWS environments. Responsibilities include security telemetry and OpenSearch infrastructure, GitOps deployments, Kubernetes and AWS security controls, cross-account and multi-region architecture, Python automation, and agentic AI workflows. The role participates in on-call support, security incident enablement, audit evidence automation, and reliability improvements while collaborating with Security Operations, Risk, and SRE teams.

Lead enterprise security architecture across hybrid and multi-cloud environments. Develop and govern reference architectures, perform architecture reviews, drive remediation, and define security standards for identity, network segmentation, data protection, monitoring, CI/CD, and AI platforms. Partner with engineering teams, support incident response and audits, and ensure secure integration of acquisitions and research/AI workloads.

Senior technical authority for security architecture, engineering design, and enterprise risk mitigation. Designs, implements, and configures security solutions across firewalls, endpoints, monitoring, vulnerability management, incident response, and forensics. Leads tactical implementation, performs assessments, product evaluations, project support, and supports the Information Security program and strategic objectives.

Lead design and implementation of security infrastructure and administer mission-critical engineering and DevOps applications. Manage Linux/RHEL systems, JFrog Artifactory, GitLab/GitHub, 3DX/Cameo/Jama/Teamcenter platforms, integrations, DISA STIG hardening, CI/CD integrations, and provide Tier 2/3 troubleshooting, compliance support, and ATO/RMF evidence for a classified defense program.

Define and manage security infrastructure roadmap; design, plan, test and troubleshoot network/security solutions; lead implementation of access and security infrastructure; produce technical specifications; manage large IT vendors; contribute to projects deploying next-generation security components.

Lead design, roadmap and implementation of network security infrastructure. Provide technical design, testing, troubleshooting, and vendor management for next-generation access and security solutions.

Conduct offensive security assessments and red team operations to identify network and system vulnerabilities; perform malware and packet analysis; develop scripts and tools; deliver written and oral briefings to clients and management; and train and mentor junior operators.

Lead research and produce high‑impact network security insights. Advise clients on evaluation, selection and deployment of network security technologies, present at events, support sales, mentor analysts, and drive research agenda and process improvements.

Lead and remain hands-on for security engineering and operations: design and harden controls, build automation and detection, manage MDR, run incident response, and own vulnerability management, metrics, and cross-functional security integration.

Perform advanced offensive security work: conduct complex penetration tests, teach and integrate offensive tradecraft into the AI platform, harden product and company defenses, and collaborate with core engineers to build and ship capabilities that automate red-team techniques.

Lead security engineering for an AI-native cybersecurity product: architect product security, build and evolve operational security and incident response, collaborate with ML engineers to integrate security into AI agents, implement protections and automation, and represent Cogent externally through writing and speaking.

Lead and scale the Email Security engineering team, own roadmap delivery, drive architecture for high-throughput distributed systems, partner with Product and Security, mentor engineers, and oversee on-call, incident response, and system reliability.