Top Hybrid Cybersecurity Jobs in CO

Investigates, triages, and resolves DNS abuse and compliance cases involving phishing, malware, botnets, spam, and pharming. Applies policy-based actions to domains and accounts, maintains audit-ready records, supports legal and law enforcement requests, communicates with reporters and partners, tracks case metrics, identifies abuse trends, and improves workflows. The role requires sound judgment, careful documentation, timely escalation of complex cases, and collaboration across global teams.

Own the information security risk register, risk assessments, vendor risk reviews, risk exceptions, security findings remediation, compliance training, policies, and governance reporting. Partner with engineering and company leaders to enforce remediation and strengthen the control environment. Scale GRC through AI, scripting, and automation while supporting HIPAA, SOC 2, ISO 27001, and HITRUST compliance.

Deploys, configures, optimizes, and supports the CrowdStrike Falcon platform and related applications for enterprise customers. Responsibilities include troubleshooting, software deployment engineering, API scripting, integrations, vulnerability and asset management support, incident response deployment assistance, customer project planning, technical workshops, mentoring, and collaboration with customer IT and internal services teams. Travel may reach 25%.

Investigates and responds to AI-related security threats across models, applications, agents, identities, APIs, and infrastructure. Responsibilities include AI security monitoring, identity threat detection, forensic analysis, incident response, remediation guidance, detection rule development, and regulatory risk support. The role collaborates with security, identity, engineering, threat intelligence, and governance teams to reduce enterprise AI risk.

Leads technical compliance and federal authorization programs for MongoDB’s public-sector cloud products. Responsibilities include managing FedRAMP High, DoD IL5+, CJIS, and ITAR assessments; coordinating auditors, 3PAOs, agencies, and engineering teams; maintaining continuous monitoring, POA&Ms, security plans, evidence, dashboards, and remediation workflows; mapping NIST controls; advising on cloud security configurations; and mentoring stakeholders. The role requires deep public-sector GRC expertise, strong communication, and the ability to manage complex audits through Authorization to Operate.

Serves as an Information System Security Officer supporting RMF accreditation and compliance for sensitive defense information systems. Develops and maintains SSPs, RARs, CONMON plans, POA&Ms, ATOs, and related security documentation. Evaluates controls, conducts vulnerability scanning, manages remediation, uses Splunk for audits and incident investigations, supports spill containment, and coordinates incident response. The role is fully on-site and requires collaboration with IT, security, network, and program teams.

Conduct application security assessments, threat modeling, code reviews, and manual penetration testing across web applications, APIs, cloud services, appliances, and AI-enabled features. Coordinate external penetration tests, validate vulnerabilities, track remediation, and verify fixes. Improve SAST, SCA, secrets detection, container scanning, SBOM, supply-chain, and CI/CD security workflows while advising Engineering on secure design and risk prioritization.

Manages audit, certification, customer assurance, and vendor compliance operations. Coordinates evidence collection, audit schedules, questionnaires, due diligence, corrective actions, and assessment records. Maintains compliance workflows and documentation, improves processes, prepares dashboards, monitors service levels, and coordinates stakeholders across Cybersecurity, Legal, Procurement, Sales, Finance, and technology teams. Oversees assigned personnel, assigns work, coaches team members, and escalates overdue actions or resource constraints.

Leads vulnerability intelligence research focused on rapidly analyzing and exploiting newly disclosed or actively exploited vulnerabilities. Develops Metasploit modules and framework improvements, conducts zero-day research, publishes technical analyses, advises detection teams, supports emergent threat response, presents research publicly, and mentors other researchers. The role requires advanced exploitation, reverse engineering, operating system, networking, and exploit mitigation expertise, plus cross-functional communication during time-sensitive security events.

Designs and develops IAM and security software, automation, APIs, and microservices. Integrates security into cloud and CI/CD environments, conducts code reviews and threat modeling, monitors security events, supports incident response, and advises teams on identity architecture and best practices. Requires extensive IAM administration, programming, cloud, containerization, and secure-coding experience.