Top Hybrid Cybersecurity Jobs in CO

Deploys, configures, optimizes, and supports the CrowdStrike Falcon platform and related applications for enterprise customers. Responsibilities include troubleshooting, software deployment engineering, API scripting, integrations, vulnerability and asset management support, incident response deployment assistance, customer project planning, technical workshops, mentoring, and collaboration with customer IT and internal services teams. Travel may reach 25%.

Perform red team engagements, penetration tests, adversary emulation, and threat actor simulations across operating systems, applications, databases, and networks. Plan and execute assessments, identify vulnerabilities, produce executive and technical reports, provide security recommendations, and support customers during crisis scenarios. Collaborate with leadership and technical teams, improve information security programs, operate with an OPSEC mindset, and use automation, scripting, and AI technologies to enhance assessment effectiveness.

Delivers virtual and occasional onsite cloud security training covering Falcon Cloud Security, CNAPP, CSPM, CWPP, containers, and incident response. Develops curricula, certification exams, and hands-on labs; maintains expertise in cloud threats and CrowdStrike products; and supports broader endpoint, identity, logging, and SIEM topics. Requires strong technical education, cloud security, communication, project management, AI technology, and occasional travel experience.

Investigates and responds to AI-related security threats across models, applications, agents, identities, APIs, and infrastructure. Responsibilities include AI security monitoring, identity threat detection, forensic analysis, incident response, remediation guidance, detection rule development, and regulatory risk support. The role collaborates with security, identity, engineering, threat intelligence, and governance teams to reduce enterprise AI risk.

Leads technical compliance and federal authorization programs for MongoDB’s public-sector cloud products. Responsibilities include managing FedRAMP High, DoD IL5+, CJIS, and ITAR assessments; coordinating auditors, 3PAOs, agencies, and engineering teams; maintaining continuous monitoring, POA&Ms, security plans, evidence, dashboards, and remediation workflows; mapping NIST controls; advising on cloud security configurations; and mentoring stakeholders. The role requires deep public-sector GRC expertise, strong communication, and the ability to manage complex audits through Authorization to Operate.

Serves as an Information System Security Officer supporting RMF accreditation and compliance for sensitive defense information systems. Develops and maintains SSPs, RARs, CONMON plans, POA&Ms, ATOs, and related security documentation. Evaluates controls, conducts vulnerability scanning, manages remediation, uses Splunk for audits and incident investigations, supports spill containment, and coordinates incident response. The role is fully on-site and requires collaboration with IT, security, network, and program teams.

Conduct application security assessments, threat modeling, code reviews, and manual penetration testing across web applications, APIs, cloud services, appliances, and AI-enabled features. Coordinate external penetration tests, validate vulnerabilities, track remediation, and verify fixes. Improve SAST, SCA, secrets detection, container scanning, SBOM, supply-chain, and CI/CD security workflows while advising Engineering on secure design and risk prioritization.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Manages audit, certification, customer assurance, and vendor compliance operations. Coordinates evidence collection, audit schedules, questionnaires, due diligence, corrective actions, and assessment records. Maintains compliance workflows and documentation, improves processes, prepares dashboards, monitors service levels, and coordinates stakeholders across Cybersecurity, Legal, Procurement, Sales, Finance, and technology teams. Oversees assigned personnel, assigns work, coaches team members, and escalates overdue actions or resource constraints.

Leads vulnerability intelligence research focused on rapidly analyzing and exploiting newly disclosed or actively exploited vulnerabilities. Develops Metasploit modules and framework improvements, conducts zero-day research, publishes technical analyses, advises detection teams, supports emergent threat response, presents research publicly, and mentors other researchers. The role requires advanced exploitation, reverse engineering, operating system, networking, and exploit mitigation expertise, plus cross-functional communication during time-sensitive security events.

Designs and develops IAM and security software, automation, APIs, and microservices. Integrates security into cloud and CI/CD environments, conducts code reviews and threat modeling, monitors security events, supports incident response, and advises teams on identity architecture and best practices. Requires extensive IAM administration, programming, cloud, containerization, and secure-coding experience.

Leads complex cybersecurity incidents and digital forensics and incident response investigations. Responsibilities include incident command, threat hunting, triage, root-cause analysis, corrective-action reporting, process development, technical project leadership, executive presentations, global on-call participation, and mentoring junior analysts. The role supports cybersecurity strategy and protects critical aerospace systems.