Top Hybrid Cybersecurity Jobs in CO

Hunt for historical and active threats across enterprise environments by analyzing logs, system artifacts, forensic evidence, and threat intelligence. Develop actionable remediation recommendations and communicate findings through reports and presentations to technical stakeholders, executives, and legal counsel. Help mature threat-hunting capabilities through research, methodology development, search-query creation, and scripting. The role also values incident response, cloud-platform knowledge, remediation planning, and responsible use of AI technologies.

Leads internal and external compliance audits, assessments, attestations, and certifications across security, privacy, and enterprise frameworks. Develops system integrations and scalable automation to streamline audit and compliance programs. Communicates with internal and external stakeholders, evaluates risks, improves information security processes, and applies AI technologies to enhance workflows and decision-making.

Own hardware certification and cybersecurity compliance for connected vehicle devices and OEM partnerships. Coordinate audits, translate ISO 21434 and other requirements into engineering controls, support threat modeling and firmware analysis, manage FirstNet certification, identify compliance gaps, automate evidence gathering, and communicate security posture and risk to engineering teams, customers, partners, and auditors.

Protect corporate data through DLP implementation, tuning, alert review, false-positive reduction, and control optimization across web, endpoint, email, cloud, and SaaS environments. The engineer will review data protection programs, improve monitoring and blocking controls, collaborate with business partners, and use automation and emerging AI tools to strengthen security operations.

Leads implementation, administration, configuration, maintenance, troubleshooting, and technical support for Imprivata enterprise access management environments. Provides customer lifecycle ownership, solution assessments, workflow analysis, project planning, technical leadership, training, documentation, roadmap guidance, and stakeholder communication. Integrates Imprivata with Active Directory, VDI, and EMR platforms while monitoring system health, certificates, audit records, and service metrics. Requires onsite and remote customer engagement, including travel of up to 25%.

Leads strategy, roadmap, and execution for Rapid7’s SIEM and threat detection products. Translates customer, market, and competitive insights into prioritized capabilities for data ingestion, detection, search, and reporting. Aligns global engineering, detection science, SOC operations, marketing, sales, and customer success teams while driving delivery excellence, data-backed decisions, and improvements to the MDR customer experience.

Provide technology risk consulting within Global Risk Management: analyze complex technology risks, propose solutions, mentor junior staff, manage deliverables, ensure compliance and rigorous standards, and communicate findings to leadership and stakeholders.

Administer and improve Workday and multi-platform HR security, including role-based access, security groups, access reviews, request approvals, audit support, governance documentation, and compliance controls. Evaluate elevated access requests, identify risks, resolve routine issues, coordinate remediation, and escalate complex decisions. Partner with HR, IT, Legal, and Compliance stakeholders to strengthen policies, processes, and least-privilege access across Workday, Peakon, UKG, Prism, and HR data platforms.

Supports IT compliance across SOX ITGC/ITAC, SOC 1, SOC 2, and ISO 27001. Leads control testing, audit coordination, risk assessments, gap remediation, and evidence collection. Identifies opportunities to automate compliance workflows using scripting, RPA, GRC platforms, and AI technologies. Builds an automation roadmap, measures efficiency gains, documents controls, and advises stakeholders on compliance requirements and emerging technologies.

Lead complex security investigations across endpoint, identity, cloud, email, SaaS, and network environments. Own incidents through containment, remediation coordination, documentation, and post-incident review. Tune detections, queries, dashboards, workflows, and SOAR playbooks; improve SOC metrics, threat coverage, alert fidelity, and response processes. Partner on vulnerability and cloud-risk remediation, participate in global on-call rotation, use approved AI capabilities responsibly, and mentor analysts.

Own attack surface management across cloud, SaaS, APIs, domains, and internal assets. Automate discovery, attribution, vulnerability analysis, threat-informed prioritization, remediation workflows, and continuous validation through BAS and purple teaming. Partner with engineering, IT, cloud, offensive, and defensive security teams to reduce exposure, improve detection, enforce remediation SLAs, and mature ASM capabilities. Mentor junior analysts and shape tooling, policies, metrics, and security roadmaps.