Top Hybrid Cybersecurity Jobs in CO

Leads the Cloud Detection Platform organization, strategy, architecture, roadmap, and multiple engineering teams. Owns large-scale detection engines, content delivery infrastructure, reliability, latency, cost, SLOs, capacity, and quota management. Drives unified detection architecture, safe content deployment, testing, observability, and cross-functional roadmap execution while managing organizational planning, talent development, and operational excellence.

Conduct incident response engagements, threat hunting, intrusion investigations, and host or network forensics across Windows, macOS, and Linux. Analyze network data, malware, and cloud environments; support remediation planning; and prepare reports, presentations, recommendations, and findings for customers, regulators, legal counsel, and internal teams. Consultants collaborate with project leadership and customers while using AI technologies to improve investigative workflows and decision-making.

Leads partner-delivered incident response engagements, coordinating CrowdStrike, customer, partner, legal, and executive stakeholders. Oversees forensic investigations, project tasks, deliverables, scope, quality reviews, and workflow execution. Coaches partners on host and network forensics, malware analysis, threat hunting, and executive communications. Provides security posture recommendations, manages process improvements and documentation, and supports cross-functional teams in high-pressure investigations involving ransomware, eCrime, and business email compromise.

Owns Cleo’s application and product security strategy across SaaS and customer-hosted products. Responsibilities include maturing the SSDLC, threat modeling, security scanning, vulnerability triage, penetration testing, coordinated disclosure, CVE management, product security controls, customer-facing advisories, and NIST CSF evidence. The role also leads security enablement, roadmap prioritization, AI security reviews, and hands-on exploit reproduction and patch validation while guiding engineers and security partners.

Supports cybersecurity incident management projects by analyzing alerts, logs, and incident data; assisting with triage, containment, remediation, and post-incident documentation; coordinating technical workstreams; and preparing client-ready updates. The role develops familiarity with security operations, threat detection, vulnerability management, incident response planning, threat intelligence, and forensic investigation while supporting client engagements.

Leads AI-focused application security across software, cloud, hardware, and firmware. Conducts security assessments and AI-driven red-team exercises, develops secure-code fixes and AI-enabled security tooling, validates controls for LLM and agentic systems, and shapes organization-wide AI security strategy. Partners with engineering, hardware, and executive stakeholders to identify threats, implement mitigations, and safely adopt AI within security operations.

Perform penetration testing across applications, APIs, cloud environments, infrastructure, and client-side components. Identify, validate, score, and document vulnerabilities; support remediation and secure design with Engineering; triage bug bounty submissions; develop testing tools and scripts; and communicate findings to researchers, technical teams, and executives. The role also applies threat modeling, security frameworks, and emerging threat intelligence to improve organizational security.

Provide first-line technical support for complex security and networking issues, including troubleshooting SSL, SAML, HTTP, TCP/IP, connectivity, and performance problems. Partner with Engineering, document resolutions, manage enterprise escalations, contribute product feedback, develop training, and mentor support engineers. The role requires expertise in web security, network infrastructure, security proxies, VPNs, firewalls, DLP, SD-WAN, and related technologies, along with U.S. citizenship.

Designs and maintains privacy controls and privacy-enhancing technologies across products and enterprise systems. Embeds privacy by design into the software development lifecycle, builds automation for consent and data subject rights, supports privacy impact assessments, and develops data protection solutions. Partners with Engineering, Product, Security, Legal, and Compliance to translate regulations into technical requirements. Also supports AI governance, privacy tooling, reusable standards, documentation, and engineering training.

Own multi-year identity security adoption roadmaps for strategic enterprise accounts. Architect governance across human, machine, and AI agent identities; advise C-suite and engineering leaders; translate regulations into security architectures; quantify breach-risk reduction, compliance gains, and cost avoidance; support renewals and expansions; synthesize cross-account patterns for product and engineering teams; contribute thought leadership and mentor advisors.

Supports customers using Rapid7’s Vector Command Red Team service through attack surface analysis, reconnaissance, OSINT, reporting, customer communications, and request prioritization. The role coordinates with Red Team, MDR, and MVM teams; conducts manual network and service reconnaissance; develops scripts to analyze attack surface data; monitors customer exposures; and performs entry-level external penetration testing. It also includes customer onboarding, monthly reporting, update calls, and translating technical security concepts for nontechnical stakeholders.

Supports information security initiatives through automation for vulnerability management, detection engineering, cloud identity management, and SOC 2/SOX ITGC compliance. Learns security tooling, identifies process improvements, and performs Level 1 security alert triage and investigations. The internship is full-time for 12 weeks in summer 2027 and requires hybrid work in Denver three days per week.