Top Hybrid Cybersecurity Jobs in CO

The Application Security Architect leads secure design and architecture reviews, threat modeling, source-code reviews, and security initiatives across application, cloud, infrastructure, and identity layers. The role develops security architectures and documentation, mentors security and engineering teams, supports AI-assisted product security workflows, and advances security awareness through the Security Champions program. Responsibilities include communicating risks to technical and executive audiences and embedding secure practices throughout software development and deployment.

Lead product security assessments and penetration testing across MongoDB products and cloud environments. Conduct threat modeling, code analysis, architecture reviews, vulnerability verification, and attack research. Use AI and automation to improve assessment workflows, collaborate with engineering teams on remediation and secure coding, and advise on container security and secrets management. Coordinate with red and detection teams while mentoring others and communicating findings to technical and non-technical stakeholders.

Assess customers’ Falcon environments, identify security-posture gaps, recommend remediation, and contact customers regarding standards misalignment. Document and resolve issues within SLAs, produce service reports, coordinate troubleshooting with support and internal teams, and promote customer satisfaction. The role requires cybersecurity experience, threat detection and incident response knowledge, operating-system proficiency, strong customer communication, and the ability to use AI technologies to improve workflows and decisions.

Represent security compliance with customers, map frameworks to Zscaler capabilities, create reusable playbooks, educate sales teams, and complete security questionnaires and assessments. Translate technical security and data-protection concepts into business and sales messaging while supporting frameworks including NIST, ISO 27001, DORA, GDPR, PCI, and HIPAA. The role requires customer-facing credibility, compliance expertise, security architecture knowledge, and the ability to leverage AI-driven workflows.

Design and implement identity and access management strategies, manage user identities and access rights, develop federated identity and verification solutions, and apply encryption technologies. The role involves Azure Active Directory, CyberArk, RBAC, identity governance, cybersecurity enhancements, data analysis, client collaboration, and IT governance. It requires navigating complex situations while delivering secure solutions and maintaining professional standards.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. Re-architect internal PKI and machine or workload identity systems, participate in on-call incident response, support internal developers, and advise engineering teams on secure system design. The role requires software development, distributed systems expertise, Linux/UNIX administration, and hands-on security implementation experience.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.