Top Hybrid Cybersecurity Jobs in CO

Owns security trust and compliance programs, audits, policies, control design, continuous monitoring, evidence pipelines, and security automation. Leads framework implementations, identifies risks, manages auditor relationships, develops control health metrics, and mentors practitioners without direct authority. The role requires deep knowledge of security and privacy frameworks, GRC engineering, cloud infrastructure, SaaS environments, identity governance, and modern security practices.

Leads enterprise adoption of tokenization and data protection services. Develops adoption strategies, prioritizes implementation opportunities, advises application and business teams, governs onboarding and readiness, manages risks, communicates with executives, and tracks KPIs, KRIs, coverage, and sensitive-data reduction. The role supports cybersecurity transformation, regulatory compliance, application security, cryptographic strategy, and scalable data protection across a complex financial-services environment.

Performs red team operations, penetration testing, adversary emulation, and security assessments across systems, applications, databases, and networks. Develops customer-facing reports and recommendations, communicates findings to technical and executive audiences, supports information security programs, and provides operational guidance during crisis scenarios. Requires advanced security tooling, networking, systems, scripting, and red team expertise, with occasional travel.

Supports the third-party risk management lifecycle by applying risk methodologies, assessing standard vendor relationships, reviewing documentation, coordinating stakeholder and subject matter expert reviews, tracking remediation, maintaining assessment records, and preparing status reports. The role performs data-quality checks, communicates with third parties regarding lower-risk gaps, escalates complex or high-risk issues, and contributes to TPRM process improvements and audit readiness.

Lead insider risk detection engineering and investigations using EDR/XDR, UEBA, SIEM, and SOAR tools. Refine detection rules, reduce alert noise, close coverage gaps, manage investigations, develop playbooks, document evidence, mentor analysts, and collaborate discreetly with HR, Legal, business leaders, and executives. The role also requires investigative workflow automation using Python or JavaScript and ownership of scalable security processes.

Supports systems security engineering for defense and space programs by managing cyber requirements, validating security implementations, developing threat analyses, and supporting Assessment & Authorization activities. Contributes to security designs, Program Protection and Anti-Tamper plans, SSE plans, policies, briefings, and technical reports. Collaborates with architects, systems engineers, and subject matter experts while supporting firmware, gateware, software, embedded-system, and mission security initiatives.

Designs and implements security measures across IaaS, PaaS, and SaaS environments. Conducts risk assessments, vulnerability testing, audits, forensic investigations, and incident response. Collaborates with cloud service providers, develops security architectures and frameworks, monitors for breaches, manages cloud resources, and supports compliance. The role also involves client relationship management, solving complex cybersecurity challenges, and advancing cloud security strategies.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Leads implementation, administration, configuration, maintenance, troubleshooting, and technical support for Imprivata enterprise access management environments. Provides customer lifecycle ownership, solution assessments, workflow analysis, project planning, technical leadership, training, documentation, roadmap guidance, and stakeholder communication. Integrates Imprivata with Active Directory, VDI, and EMR platforms while monitoring system health, certificates, audit records, and service metrics. Requires onsite and remote customer engagement, including travel of up to 25%.

Leads strategy, roadmap, and execution for Rapid7’s SIEM and threat detection products. Translates customer, market, and competitive insights into prioritized capabilities for data ingestion, detection, search, and reporting. Aligns global engineering, detection science, SOC operations, marketing, sales, and customer success teams while driving delivery excellence, data-backed decisions, and improvements to the MDR customer experience.