Top Hybrid Cybersecurity Jobs in CO

Monitor, triage, investigate, and respond to security incidents across endpoint, identity, email, network, and cloud environments. Analyze EDR telemetry, logs, forensic artifacts, malware, Microsoft 365 threats, and network activity to determine compromise scope and recommend remediation. Communicate findings and guidance to customers, improve detection and response processes, and use scripting and AI technologies to streamline investigations. The role requires independent technical work and a 4x10 schedule including one weekend day.

Assesses customer Falcon environments, identifies security-standard misalignment, recommends remediation, and communicates directly with customers. Documents and resolves issues within SLAs, prepares service reports, partners with internal teams, and coordinates troubleshooting. The role requires cybersecurity experience, customer-facing communication, knowledge of Windows, Linux, and macOS, threat detection and incident response expertise, relevant education or experience, and cybersecurity certifications. Government customer requirements may include periodic drug testing and background and fingerprint checks.

Analyzes intrusions and adversary activity using endpoint and security telemetry, communicates findings to customers, conducts active and passive threat hunting, and researches emerging threats. The role also improves detection capabilities, investigates cloud and identity activity, builds tools, and collaborates with cybersecurity teams to protect customer networks from threat actors.

Protect corporate data through DLP implementation, tuning, alert review, false-positive reduction, and control optimization across web, endpoint, email, cloud, and SaaS environments. The engineer will review data protection programs, improve monitoring and blocking controls, collaborate with business partners, and use automation and emerging AI tools to strengthen security operations.

Leads implementation, administration, configuration, maintenance, troubleshooting, and technical support for Imprivata enterprise access management environments. Provides customer lifecycle ownership, solution assessments, workflow analysis, project planning, technical leadership, training, documentation, roadmap guidance, and stakeholder communication. Integrates Imprivata with Active Directory, VDI, and EMR platforms while monitoring system health, certificates, audit records, and service metrics. Requires onsite and remote customer engagement, including travel of up to 25%.

Leads strategy, roadmap, and execution for Rapid7’s SIEM and threat detection products. Translates customer, market, and competitive insights into prioritized capabilities for data ingestion, detection, search, and reporting. Aligns global engineering, detection science, SOC operations, marketing, sales, and customer success teams while driving delivery excellence, data-backed decisions, and improvements to the MDR customer experience.

Leads product strategy, roadmap, and execution for Rapid7’s managed detection and response portfolio, Endpoint agent, and SOAR/response capabilities. Aligns SOC Operations, Engineering, Detection Science, Vulnerability Research, Customer Success, Sales, and Marketing teams. Translates customer needs, operational data, market intelligence, and emerging AI and automation opportunities into prioritized improvements that enhance service quality, analyst efficiency, customer outcomes, retention, and growth.

Deploy and configure Rapid7 security products for post-sales customers, applying security best practices and documenting implementation decisions. Build custom dashboards, reporting workflows, integrations, and data pipelines using Python, SQL, and REST APIs. Support pre-sales scoping, resolve deployment challenges, collaborate across teams, improve internal delivery processes, and occasionally travel for customer engagements.

Provide technology risk consulting within Global Risk Management: analyze complex technology risks, propose solutions, mentor junior staff, manage deliverables, ensure compliance and rigorous standards, and communicate findings to leadership and stakeholders.

Administer and improve Workday and multi-platform HR security, including role-based access, security groups, access reviews, request approvals, audit support, governance documentation, and compliance controls. Evaluate elevated access requests, identify risks, resolve routine issues, coordinate remediation, and escalate complex decisions. Partner with HR, IT, Legal, and Compliance stakeholders to strengthen policies, processes, and least-privilege access across Workday, Peakon, UKG, Prism, and HR data platforms.

Supports IT compliance across SOX ITGC/ITAC, SOC 1, SOC 2, and ISO 27001. Leads control testing, audit coordination, risk assessments, gap remediation, and evidence collection. Identifies opportunities to automate compliance workflows using scripting, RPA, GRC platforms, and AI technologies. Builds an automation roadmap, measures efficiency gains, documents controls, and advises stakeholders on compliance requirements and emerging technologies.

Lead complex security investigations across endpoint, identity, cloud, email, SaaS, and network environments. Own incidents through containment, remediation coordination, documentation, and post-incident review. Tune detections, queries, dashboards, workflows, and SOAR playbooks; improve SOC metrics, threat coverage, alert fidelity, and response processes. Partner on vulnerability and cloud-risk remediation, participate in global on-call rotation, use approved AI capabilities responsibly, and mentor analysts.

Own attack surface management across cloud, SaaS, APIs, domains, and internal assets. Automate discovery, attribution, vulnerability analysis, threat-informed prioritization, remediation workflows, and continuous validation through BAS and purple teaming. Partner with engineering, IT, cloud, offensive, and defensive security teams to reduce exposure, improve detection, enforce remediation SLAs, and mature ASM capabilities. Mentor junior analysts and shape tooling, policies, metrics, and security roadmaps.

Build and maintain detection and response capabilities across enterprise, cloud, and product environments. Responsibilities include developing detections-as-code, triaging alerts, investigating and responding to incidents, conducting digital forensics and threat hunting, automating workflows, building security tooling, supporting SIEM and security data lake pipelines, developing AI-enabled security systems, participating in on-call rotations, and mentoring engineers.