Top Hybrid Cybersecurity Jobs in CO

Designs and engineers secure network and cloud architectures across AWS, GCP, Azure, and physical data centers. Responsibilities include threat modeling, network segmentation, monitoring, alerting, automation, attack-surface reduction, and secure connection patterns. The role drives strategic security improvements, partners with product and infrastructure teams, communicates architectural decisions, and mentors engineers. Candidates need deep hybrid networking and cloud security expertise, protocol knowledge, scripting ability, independent problem-solving skills, and strong communication.

Deliver generative AI-enabled source code review and application security engagements. Coordinate with leadership, organize resources, refine and present assessment findings, document recommendations, and mentor junior red team members. Support penetration testing projects, including external and web application testing, while managing engagement delivery and improving security assessment technologies and workflows.

Conduct AWS cloud threat hunting for global clients using Falcon, threat intelligence, cloud logs, queries, and scripts. Review configurations, identify adversarial activity and unauthorized access risks, develop defensive recommendations, and manage client projects. Communicate findings through technical reports, presentations, and stakeholder briefings, including to CISO-level audiences, regulators, and legal counsel.

Own and improve enterprise security platforms, cloud and infrastructure security, identity governance, endpoint protection, vulnerability management, incident response, network controls, and DevSecOps practices. Lead complex security initiatives, compliance controls, vendor assessments, security architecture reviews, and AI security governance. Build automation with PowerShell and Python, partner with IT Operations and DevOps, reduce manual work, and serve as the senior escalation point for technical security incidents.

Lead KPA's enterprise security platforms and technical security initiatives across cloud, identity, endpoints, network, and DevOps. Own vulnerability management, incident response, SOC 2 compliance, vendor security assessments, and security automation. Partner with IT and DevOps to embed security in CI/CD, IaC, containers, and cloud workloads while improving posture through detection engineering, automation, and governance.

Manage and maintain compliance with security and privacy frameworks (ISO 27001, SOC 2, HIPAA, PCI DSS). Coordinate audits, drive remediation, improve controls and evidence management, support security questionnaires for deal cycles, and design compliance training while partnering across teams to integrate controls into the SDLC.

Perform manual and automated dynamic security testing and ethical hacking of web and mobile applications to discover OWASP Top 10 vulnerabilities. Use Burp Suite, DAST tools and Agentic AI, validate findings, review results with stakeholders, rate risks, develop testing techniques, assist designing security solutions, and mentor others.

Serve as a Sales Engineer for Armis, delivering virtual and in-person technical demos, deploying proof-of-value installations, leading technical training, supporting conferences, developing prospect-facing documentation, troubleshooting, and collaborating with sales to close enterprise cybersecurity SaaS deals. Travel up to 40%.

Lead go-to-market and sales for Cyber Managed Services by developing strategies, identifying and qualifying opportunities, building executive relationships, orchestrating solution teams, and partnering with delivery to drive revenue growth and client satisfaction. Mentor leaders and shape engagement approaches while staying current on threat landscape and competitive insights.

Lead design and implementation of cloud security strategies across IaaS, PaaS, and SaaS. Conduct risk assessments, implement IaC and automated enforcement, integrate security scanning into CI/CD, mentor junior staff, build client relationships, and deliver practical solutions to complex cloud security problems while maintaining professional standards.

Provide technology risk consulting within Global Risk Management: analyze complex technology risks, propose solutions, mentor junior staff, manage deliverables, ensure compliance and rigorous standards, and communicate findings to leadership and stakeholders.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

Lead delivery of FedRAMP High authorization and future regulated environments on a multi-tenant SaaS platform. Translate compliance controls into engineering work, manage evidence collection and audit readiness, coordinate Engineering/Product/Compliance, establish reusable control/evidence pipelines and governance, and transition to sustainment post-authorization.

Lead and grow a security engineering team to design and operate cloud-native security controls, drive DevSecOps practices, conduct threat modeling and incident response, partner cross-functionally on security roadmaps, and ensure compliance with frameworks (NIST, SOC 2, ISO, etc.). Responsible for vulnerability management, identity and access controls, observability/SIEM, and security automation.

Secure LLMs, generative AI systems, ML infrastructure, training pipelines, and AI applications. Responsibilities include threat modeling, architecture reviews, security controls, hardening, vulnerability remediation, data privacy, incident response runbooks, vendor reviews, governance, policy development, and AI security training. The role also supports proof-of-concept security solutions and monitors emerging AI threats.

Lead application security engineering across the SDLC using AI-assisted threat modeling, automated security testing, vulnerability prioritization, and secure-by-default controls. Partner with Engineering, Product, QA, DevOps, and AI platform teams to secure applications, APIs, cloud infrastructure, data, and AI/ML systems. Build security automation, CI/CD controls, policy-as-code guardrails, developer enablement, and proactive defenses against emerging threats such as prompt injection and data poisoning.