Top Hybrid Cybersecurity Jobs in CO

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Own the security architecture and implementation of Datadog’s Bits Code cloud coding agent from design through production. Build threat models for agentic risks such as prompt injection, secure untrusted workload execution through sandboxing, develop security libraries, guide engineering processes, and support production operations. Collaborate across engineering, product, infrastructure, and security teams while making pragmatic trade-offs and participating in on-call responsibilities.

The Security Specialist manages the workforce identity access management product and backlog, collaborates with engineering teams, supports delivery planning, and ensures compliance with security protocols while acting as a liaison to business stakeholders.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Manages Microsoft Entra ID and identity access management workstreams, designing role-based access controls, authorization frameworks, access governance processes, and privileged access workflows. Configures Azure and Microsoft Active Directory components, analyzes access risks, documents technical requirements, develops client recommendations, and supports issue resolution. Mentors junior team members, reviews deliverables, and coordinates project timelines across client environments.

Lead SailPoint identity and access management engagements, including identity governance, access administration, RBAC, privileged access management, and lifecycle workflows. Manage project plans, budgets, timelines, deliverables, and client relationships while overseeing platform configuration and deployment. Analyze access risks and control gaps, review technical work, improve processes, and mentor junior professionals. Apply Azure Active Directory, Microsoft Active Directory, and cloud IAM expertise to deliver secure access solutions.

Leads privileged access management workstreams across client engagements, overseeing access reviews, privileged account remediation, identity governance, and role-based access controls. Reviews Azure Active Directory, Microsoft Active Directory, CyberArk, and cloud identity configurations; translates security requirements into solutions and documentation; identifies control gaps; coaches teams; manages project timelines and risks; and improves identity security through automation and stronger governance.

Leads delivery of cybersecurity training across CrowdStrike technologies, manages technical instructors, and oversees coaching, performance, scheduling, budgets, reporting, and resource allocation. Partners with sales and internal teams to scope customer engagements, recommend training, and improve enablement and revenue outcomes. Serves as a technical training subject matter expert, develops courses, analyzes training effectiveness and KPIs, and communicates with executive and technical audiences. Requires cybersecurity expertise, training management experience, LMS and virtual delivery platform proficiency, project management, and occasional travel.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Owns Cleo’s application and product security strategy across SaaS and customer-hosted products. Responsibilities include maturing the SSDLC, threat modeling, security scanning, vulnerability triage, penetration testing, coordinated disclosure, CVE management, product security controls, customer-facing advisories, and NIST CSF evidence. The role also leads security enablement, roadmap prioritization, AI security reviews, and hands-on exploit reproduction and patch validation while guiding engineers and security partners.

Leads AI-focused application security across software, cloud, hardware, and firmware. Conducts security assessments and AI-driven red-team exercises, develops secure-code fixes and AI-enabled security tooling, validates controls for LLM and agentic systems, and shapes organization-wide AI security strategy. Partners with engineering, hardware, and executive stakeholders to identify threats, implement mitigations, and safely adopt AI within security operations.

Perform penetration testing across applications, APIs, cloud environments, infrastructure, and client-side components. Identify, validate, score, and document vulnerabilities; support remediation and secure design with Engineering; triage bug bounty submissions; develop testing tools and scripts; and communicate findings to researchers, technical teams, and executives. The role also applies threat modeling, security frameworks, and emerging threat intelligence to improve organizational security.