Top Hybrid Cybersecurity Jobs in CO

Engineer and optimize Palo Alto Networks XSIAM security operations capabilities, including alert tuning, rule validation, incident investigation, automation, data-source onboarding, and SOC efficiency improvements. The role also supports threat intelligence, vulnerability management, cloud and network security, forensic analysis, documentation, and client-facing cybersecurity consulting. Candidates should have at least three years of experience, cybersecurity platform expertise, and preferably Palo Alto certifications, SOC experience, scripting skills, and familiarity with SIEM and SOAR tools.

Design and implement cloud security controls across IaaS, PaaS, and SaaS environments. Conduct risk assessments, vulnerability reviews, security testing, and threat monitoring; support remediation of vulnerabilities and control gaps; document technical findings and requirements; advise clients on cloud security improvements; collaborate with technical teams; mentor junior staff; and build client relationships within PwC’s Advisory practice.

Own security operations initiatives, lead incident response, improve cloud and corporate threat detection, build Python automation, conduct threat hunting, and govern non-human identities and AI-agent connections. The role includes monitoring AWS and GCP security tools, managing post-incident improvements, collaborating across teams, mentoring teammates, and participating in a lightweight after-hours escalation rotation.

Own and improve Octus’s enterprise security technology across endpoints, identity, SaaS, email, DLP, AI tools, cloud, and applications. Responsibilities include managing security platforms, hardening systems, tuning SIEM detections, responding to incidents, driving remediation, supporting audits and client reviews, assessing vendor risk, automating workflows, and mentoring teammates. The role requires broad hands-on cybersecurity expertise across Mac and Windows environments, identity platforms, secure web gateways, DLP, compliance frameworks, scripting, and REST APIs.

Lead product strategy, roadmap, and execution for Zscaler’s threat detection and response offerings within its Agentic SOC and MDR business. Translate threat intelligence and customer needs into innovative security products, coordinate engineering and go-to-market teams, and measure product impact. The role owns commercialization, technical direction, product quality, and business outcomes while requiring deep cybersecurity expertise and experience with enterprise security products.

Owns end-to-end enterprise DSPM delivery, including multi-cloud architecture, data connector deployment, classification pipelines, security policies, identity controls, Zero Trust integrations, troubleshooting, and customer consulting. Partners with engineering, product, sales, and enterprise customers to reduce cloud data risks, support AI governance, and optimize Zscaler security solutions across complex environments.

Investigates, triages, and resolves DNS abuse and compliance cases involving phishing, malware, botnets, spam, and pharming. Applies policy-based actions to domains and accounts, maintains audit-ready records, supports legal and law enforcement requests, communicates with reporters and partners, tracks case metrics, identifies abuse trends, and improves workflows. The role requires sound judgment, careful documentation, timely escalation of complex cases, and collaboration across global teams.

Own the information security risk register, risk assessments, vendor risk reviews, risk exceptions, security findings remediation, compliance training, policies, and governance reporting. Partner with engineering and company leaders to enforce remediation and strengthen the control environment. Scale GRC through AI, scripting, and automation while supporting HIPAA, SOC 2, ISO 27001, and HITRUST compliance.

Deploys, configures, optimizes, and supports the CrowdStrike Falcon platform and related applications for enterprise customers. Responsibilities include troubleshooting, software deployment engineering, API scripting, integrations, vulnerability and asset management support, incident response deployment assistance, customer project planning, technical workshops, mentoring, and collaboration with customer IT and internal services teams. Travel may reach 25%.

Investigates and responds to AI-related security threats across models, applications, agents, identities, APIs, and infrastructure. Responsibilities include AI security monitoring, identity threat detection, forensic analysis, incident response, remediation guidance, detection rule development, and regulatory risk support. The role collaborates with security, identity, engineering, threat intelligence, and governance teams to reduce enterprise AI risk.

Leads technical compliance and federal authorization programs for MongoDB’s public-sector cloud products. Responsibilities include managing FedRAMP High, DoD IL5+, CJIS, and ITAR assessments; coordinating auditors, 3PAOs, agencies, and engineering teams; maintaining continuous monitoring, POA&Ms, security plans, evidence, dashboards, and remediation workflows; mapping NIST controls; advising on cloud security configurations; and mentoring stakeholders. The role requires deep public-sector GRC expertise, strong communication, and the ability to manage complex audits through Authorization to Operate.

Serves as an Information System Security Officer supporting RMF accreditation and compliance for sensitive defense information systems. Develops and maintains SSPs, RARs, CONMON plans, POA&Ms, ATOs, and related security documentation. Evaluates controls, conducts vulnerability scanning, manages remediation, uses Splunk for audits and incident investigations, supports spill containment, and coordinates incident response. The role is fully on-site and requires collaboration with IT, security, network, and program teams.