Top Hybrid Cybersecurity Jobs in CO

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Leads cybersecurity strategy and operational engagement with AI product, strategy, engineering, and business leaders. Assesses workflows and security controls, identifies risks, develops mitigation roadmaps, communicates threat intelligence, coordinates security work across technology projects, supports incident response and remediation, and develops cybersecurity maturity metrics. Requires substantial IT and cybersecurity experience, technical customer engagement, project coordination, AI/ML understanding, and the ability to translate complex security issues into business recommendations.

Monitor and respond to real-time security alerts across endpoint, identity, email, and cloud environments. The analyst communicates with customers, investigates EDR telemetry, logs, forensic artifacts, Microsoft 365 threats, BEC, and AITM attacks, and provides remediation guidance. The role also supports incident detection processes and countermeasures while developing cybersecurity, systems administration, network analysis, scripting, and AI-assisted security operations skills. Candidates must work a hybrid 4x10 schedule, including one weekend day.

The Application Security Architect leads secure design and architecture reviews, threat modeling, source-code reviews, and security initiatives across application, cloud, infrastructure, and identity layers. The role develops security architectures and documentation, mentors security and engineering teams, supports AI-assisted product security workflows, and advances security awareness through the Security Champions program. Responsibilities include communicating risks to technical and executive audiences and embedding secure practices throughout software development and deployment.

Lead product security assessments and penetration testing across MongoDB products and cloud environments. Conduct threat modeling, code analysis, architecture reviews, vulnerability verification, and attack research. Use AI and automation to improve assessment workflows, collaborate with engineering teams on remediation and secure coding, and advise on container security and secrets management. Coordinate with red and detection teams while mentoring others and communicating findings to technical and non-technical stakeholders.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Leads privileged access management workstreams across client engagements, overseeing access reviews, privileged account remediation, identity governance, and role-based access controls. Reviews Azure Active Directory, Microsoft Active Directory, CyberArk, and cloud identity configurations; translates security requirements into solutions and documentation; identifies control gaps; coaches teams; manages project timelines and risks; and improves identity security through automation and stronger governance.

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. Re-architect internal PKI and machine or workload identity systems, participate in on-call incident response, support internal developers, and advise engineering teams on secure system design. The role requires software development, distributed systems expertise, Linux/UNIX administration, and hands-on security implementation experience.

Owns Cleo’s application and product security strategy across SaaS and customer-hosted products. Responsibilities include maturing the SSDLC, threat modeling, security scanning, vulnerability triage, penetration testing, coordinated disclosure, CVE management, product security controls, customer-facing advisories, and NIST CSF evidence. The role also leads security enablement, roadmap prioritization, AI security reviews, and hands-on exploit reproduction and patch validation while guiding engineers and security partners.