Top Hybrid Cybersecurity Jobs in CO

Design and implement secure AWS-based systems, integrate DevSecOps practices, manage security incidents, run vulnerability assessments, and support CI/CD using CloudFormation, Terraform, GitHub, and Jenkins while collaborating with clients and cross-functional teams.

Lead and deliver vulnerability management and security operations programs across security, AIT, R&D, infrastructure, and GRC. Define strategy, run prioritization, expand detection and remediation coverage, build AI-driven security workflows and dashboards, manage vendors, budgets, audits, and stakeholder communications to harden the SDLC and scale security for an AI-native company.

Manage a portfolio of enterprise customers to drive adoption of the Tufin platform and Guided Success service. Develop and execute adoption plans, monitor customer health and success metrics, coordinate cross-functional teams (TAMs, Professional Services, Support, Sales), handle escalations, support renewals and expansions, and represent customer feedback to Product Management.

Design and train LLMs and agentic systems for cybersecurity using RLHF/RLAIF and supervised fine-tuning. Build agent architectures, tooling, retrieval/memory, and evaluation pipelines with rigorous statistical benchmarking. Optimize prompts and inference, collaborate with engineers to productionize prototypes, and drive research on agent planning, safety, and reliability.

The role involves managing strategic partnerships with cloud providers, enhancing offerings on AWS Marketplace, and driving business growth through program management and cross-functional collaboration.

Lead federal cloud security and compliance efforts to achieve and sustain ATOs. Implement and automate FedRAMP/IL-5/RMF controls, manage continuous monitoring, coordinate 3PAO audits, drive cloud security architecture, oversee change control/SCRs, and lead incident response and POA&M remediation using AI-enabled automation and monitoring across high-security GovCloud environments.

Lead end-to-end Application Security product and program: set strategy, prioritize roadmap, ship AI-powered threat modeling and code-evaluation surfaces, enable secure-by-design SDLC, enforce CI/CD gates, drive vulnerability prioritization/remediation, establish governance and metrics, and align security initiatives with engineering and executive stakeholders.

Investigate and respond to confirmed endpoint compromises for MDR customers using EDR tools. Analyze, contain, and remediate threats, produce technical reports, improve response strategies, and collaborate with Detection, Threat Hunting, Intel, and Product teams. Participate in a monthly 24x7 on-call rotation and work Monday–Friday 8:00am–4:00pm MT.

Hands-on senior application security engineer partnering with product and engineering teams to perform threat modeling and secure architecture reviews, embed secure SDLC practices, integrate CI/CD security tooling, manage vulnerabilities, secure cloud, API, identity and AI-enabled features, create reusable security patterns, mentor engineers, and support incident response and compliance readiness.

Provide cybersecurity engineering support for programs: validate security requirements and designs, perform technical assessments and A&A documentation under NIST RMF, support incident response, identify and mitigate system risks, and implement enterprise security controls using tools like Splunk, Tenable, and HBSS. Requires coordination with engineers, PMs, and stakeholders and maintaining system Authorizations to Operate.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Lead strategy, engineering, and lifecycle management for enterprise directory and machine identity platforms. Own Active Directory, Entra ID, PKI/CLM (e.g., Venafi), HSMs, hybrid identity integrations, automation/IaC, resilience, and governance while driving platform roadmaps, modernizations, and cross-functional IAM collaboration.