Top Hybrid Cybersecurity Jobs in CO

Designs and implements secure AWS infrastructure, integrating development, operations, and security practices. Automates infrastructure with CloudFormation and Terraform, conducts vulnerability assessments, implements security controls, manages incident remediation, and supports CI/CD through Jenkins and GitLab. The role also uses Python, CrowdStrike, and Palo Alto Networks while collaborating with clients and technical teams to improve cybersecurity, reliability, and infrastructure performance.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Monitor and respond to real-time security alerts across endpoint, identity, email, and cloud environments. The analyst communicates with customers, investigates EDR telemetry, logs, forensic artifacts, Microsoft 365 threats, BEC, and AITM attacks, and provides remediation guidance. The role also supports incident detection processes and countermeasures while developing cybersecurity, systems administration, network analysis, scripting, and AI-assisted security operations skills. Candidates must work a hybrid 4x10 schedule, including one weekend day.

Lead incident response engagements, investigate intrusions and advanced threats, conduct host and network forensics across Windows, macOS, and Linux, perform malware analysis, develop remediation plans, communicate findings to executives and legal stakeholders, mentor teams, and contribute industry thought leadership. The role requires strong consulting, project management, communication, and cybersecurity expertise, with travel of up to 30%.

Leads strategic enterprise engagements by delivering technical positioning, executive architecture workshops, competitive differentiation, and technical sales closure for Zero Trust and SASE solutions. Partners with Sales, Product, Engineering, Marketing, and Enablement to translate customer requirements into initiatives, accelerate go-to-market execution, and support complex security and network transformation opportunities.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Designs, implements, and governs secure AWS, Azure, and GCP cloud architectures across IaaS, PaaS, and SaaS environments. Defines security standards, IAM strategies, network controls, and guardrails; leads cloud security reviews, threat modeling, and risk assessments; integrates security into DevOps and CI/CD workflows; evaluates security tooling; supports compliance; and mentors engineering teams. The role also drives cloud security posture improvements, documentation, remediation, and long-term security architecture maturity.

Leads and matures the third-party risk management program across cybersecurity, privacy, and AI governance. Conducts vendor risk assessments, evaluates data protection and AI practices, manages onboarding through offboarding, monitors continuous and Nth-party risk, tracks remediation, reviews contract terms, supports audits, and maintains governance reporting. Partners with Legal, Privacy, Security, Procurement, AI Governance, and business teams to improve workflows, communicate risks, and develop scalable assessment processes.

Serve as a hands-on technical security leader addressing complex product, infrastructure, architecture, and risk challenges. Evaluate security across compute, network, and storage; influence cross-functional decisions; lead M&A diligence and partner risk assessments; mentor senior individual contributors; and build a technical security community across product, enterprise, and security operations.

Develops and maintains SOC monitoring content, detections, alerts, threat-hunting procedures, playbooks, and documentation. Provides senior investigative guidance and escalates complex security issues, leads security improvement initiatives, ensures compliance with governance requirements, recommends corrective actions, and mentors junior analysts. The role also conducts security assessments, forensic investigations, risk mitigation, and data security activities.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Own Cleo’s application and product security program across SaaS and customer-hosted products. Lead SSDLC practices, threat modeling, security tooling, vulnerability management, penetration testing, coordinated disclosure, CVE publication, and NIST CSF controls. Define product security standards, roadmap, secure defaults, access controls, and customer-facing advisories. Partner with engineering, product, architecture, and customers while guiding security engineers and consultants. Also establish protections for LLM applications, AI agents, and AI-assisted development workflows.