Top Hybrid Cybersecurity Jobs in CO

Plans, deploys, configures, optimizes, and supports the CrowdStrike Falcon platform and related applications. Provides troubleshooting, integrations, vulnerability and asset management support, API-based scripting, customer project planning, and collaboration with IT and incident response teams. Develops customer-facing materials, leads skills workshops, mentors colleagues, and may travel up to 25%.

Serves as an embedded technical advisor for strategic customers, supporting CrowdStrike Falcon deployment, configuration, troubleshooting, optimization, integrations, and operational excellence. Advises security teams on best practices, threat hunting, incident management, vulnerability and asset management, and platform adoption. Develops scripts and API-based solutions, mentors customer teams, coordinates projects, and collaborates with IT and Professional Services. Requires strong cybersecurity expertise, client-facing consulting experience, communication skills, and up to 20% travel.

Serves as a technical advisor to strategic customers, supporting CrowdStrike Falcon deployment, configuration, troubleshooting, optimization, integrations, and operational use. Mentors customer security teams on best practices and threat hunting, supports vulnerability and asset management, guides incident management, develops API-based solutions, and collaborates with IT and Professional Services teams. Requires cybersecurity expertise, strong communication and problem-solving skills, remote independence, and up to 20% travel.

Develops and maintains SOC monitoring content, detections, alerts, threat-hunting procedures, playbooks, and documentation. Provides senior investigative guidance and escalates complex security issues, leads security improvement initiatives, ensures compliance with governance requirements, recommends corrective actions, and mentors junior analysts. The role also conducts security assessments, forensic investigations, risk mitigation, and data security activities.

Provide first-line technical support for complex security and networking issues, including troubleshooting SSL, SAML, HTTP, TCP/IP, connectivity, and performance problems. Partner with Engineering, document resolutions, manage enterprise escalations, contribute product feedback, develop training, and mentor support engineers. The role requires expertise in web security, network infrastructure, security proxies, VPNs, firewalls, DLP, SD-WAN, and related technologies, along with U.S. citizenship.

Supports customers using Rapid7’s Vector Command Red Team service through attack surface analysis, reconnaissance, OSINT, reporting, customer communications, and request prioritization. The role coordinates with Red Team, MDR, and MVM teams; conducts manual network and service reconnaissance; develops scripts to analyze attack surface data; monitors customer exposures; and performs entry-level external penetration testing. It also includes customer onboarding, monthly reporting, update calls, and translating technical security concepts for nontechnical stakeholders.

Provide systems security engineering support for space/mission systems: manage cyber requirements, validate technical security implementations, support ATO/Assessment & Authorization, develop program protection and anti-tamper plans, perform threat analysis (including Threat Countermeasure Trees), brief leadership, and document security guidance and reports across the acquisition lifecycle.

Design and implement secure AWS infrastructure, integrate development, operations, and security practices, automate infrastructure with CloudFormation and Terraform, assess vulnerabilities, manage incident remediation, and deploy scalable CI/CD solutions using Jenkins and GitLab. The role also involves applying cybersecurity tools, troubleshooting security infrastructure, analyzing data, advising clients, and leading others while maintaining professional and technical standards.

Supports information security initiatives through automation for vulnerability management, detection engineering, cloud identity management, and SOC 2/SOX ITGC compliance. Learns security tooling, identifies process improvements, and performs Level 1 security alert triage and investigations. The internship is full-time for 12 weeks in summer 2027 and requires hybrid work in Denver three days per week.

Owns security trust and compliance programs, audits, policies, control design, continuous monitoring, evidence pipelines, and security automation. Leads framework implementations, identifies risks, manages auditor relationships, develops control health metrics, and mentors practitioners without direct authority. The role requires deep knowledge of security and privacy frameworks, GRC engineering, cloud infrastructure, SaaS environments, identity governance, and modern security practices.

Supports the third-party risk management lifecycle by applying risk methodologies, assessing standard vendor relationships, reviewing documentation, coordinating stakeholder and subject matter expert reviews, tracking remediation, maintaining assessment records, and preparing status reports. The role performs data-quality checks, communicates with third parties regarding lower-risk gaps, escalates complex or high-risk issues, and contributes to TPRM process improvements and audit readiness.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.