Top Hybrid Cybersecurity Jobs in CO

Conduct proactive, hypothesis-driven threat hunts across endpoint, identity, cloud, and network telemetry. Use cyber threat intelligence and red-team findings to identify novel techniques, misconfigurations, and long-dwell intrusions. Map findings to MITRE ATT&CK, create detection packages, recommend configuration fixes, and partner with tooling, SOC, CTI, and red teams. Document reusable hunting methods and provide threat context during major incidents.

Sell Immersive's cyber resilience SaaS to large enterprise clients in the US East region, acquire net-new flagship accounts, retain and grow account value, coordinate with marketing, pre-sales, channel partners and customer success, and represent the company at industry events.

Leads large-scale identity and access management projects, develops tailored IAM solutions, advises clients, and improves security and operational effectiveness. Builds and coaches high-performing teams, guides project outcomes, ensures alignment with industry standards and regulatory requirements, and applies advanced technologies, Agile methodologies, and DevOps tools. The role requires deep IAM expertise, client engagement management, business process development, and strategic leadership.

Designs and maintains privacy controls and privacy-enhancing technologies across products and enterprise systems. Embeds privacy by design into the software development lifecycle, builds automation for consent and data subject rights, supports privacy impact assessments, and develops data protection solutions. Partners with Engineering, Product, Security, Legal, and Compliance to translate regulations into technical requirements. Also supports AI governance, privacy tooling, reusable standards, documentation, and engineering training.

Own multi-year identity security adoption roadmaps for strategic enterprise accounts. Architect governance across human, machine, and AI agent identities; advise C-suite and engineering leaders; translate regulations into security architectures; quantify breach-risk reduction, compliance gains, and cost avoidance; support renewals and expansions; synthesize cross-account patterns for product and engineering teams; contribute thought leadership and mentor advisors.

Perform real-time detection, containment, and remediation of security incidents across Windows, macOS, and Linux. Conduct malware and forensic analysis, develop detection processes and countermeasures, produce customer communications, and contribute thought leadership and public-facing content.

Drive technical marketing for Zero Trust Branch and Digital Experience solutions through customer proof-of-value pilots, architectural demos, networking lab design, troubleshooting, technical collateral, and field enablement. Serve as the technical bridge between field teams and engineering while validating solutions, supporting enterprise evaluations, and improving post-sales time-to-value. The role requires deep networking, packet analysis, cloud networking, monitoring, and customer-facing technical expertise.

Develops and maintains SOC monitoring content, detections, alerts, threat-hunting procedures, playbooks, and documentation. Provides senior investigative guidance and escalates complex security issues, leads security improvement initiatives, ensures compliance with governance requirements, recommends corrective actions, and mentors junior analysts. The role also conducts security assessments, forensic investigations, risk mitigation, and data security activities.

Supports customers using Rapid7’s Vector Command Red Team service through attack surface analysis, reconnaissance, OSINT, reporting, customer communications, and request prioritization. The role coordinates with Red Team, MDR, and MVM teams; conducts manual network and service reconnaissance; develops scripts to analyze attack surface data; monitors customer exposures; and performs entry-level external penetration testing. It also includes customer onboarding, monthly reporting, update calls, and translating technical security concepts for nontechnical stakeholders.

Supports information security initiatives through automation for vulnerability management, detection engineering, cloud identity management, and SOC 2/SOX ITGC compliance. Learns security tooling, identifies process improvements, and performs Level 1 security alert triage and investigations. The internship is full-time for 12 weeks in summer 2027 and requires hybrid work in Denver three days per week.