Top Hybrid Cybersecurity Jobs in CO

Evaluates clients’ digital environments, internal controls, cybersecurity measures, governance, and regulatory compliance. Performs audit and assurance assessments, data quality testing, and digital asset reviews while interpreting data to develop recommendations. Builds client relationships, collaborates with teams, leverages cloud and AI platforms, and maintains professional, technical, and independence standards.

Lead policy and controls governance for cross-functional security risk and compliance programs. Own policy lifecycle, common controls framework, issue remediation, governance tooling (Jira/GRC), executive reporting, KPIs, and team development. Partner with Security, Engineering, Product, and Legal to ensure audit readiness, scalable controls, and continuous improvement of governance workflows.

Design, build, and operate secure, resilient distributed systems for secrets and key management across Cloudflare's global network. Re-architect and strengthen internal PKI and machine/workload identity, support and run services (including on-call), and consult with teams to ensure secure system design and usage.

Designs and engineers secure network and cloud architectures across AWS, GCP, Azure, and physical data centers. Responsibilities include threat modeling, network segmentation, monitoring, alerting, automation, attack-surface reduction, and secure connection patterns. The role drives strategic security improvements, partners with product and infrastructure teams, communicates architectural decisions, and mentors engineers. Candidates need deep hybrid networking and cloud security expertise, protocol knowledge, scripting ability, independent problem-solving skills, and strong communication.

Deliver generative AI-enabled source code review and application security engagements. Coordinate with leadership, organize resources, refine and present assessment findings, document recommendations, and mentor junior red team members. Support penetration testing projects, including external and web application testing, while managing engagement delivery and improving security assessment technologies and workflows.

Conduct AWS cloud threat hunting for global clients using Falcon, threat intelligence, cloud logs, queries, and scripts. Review configurations, identify adversarial activity and unauthorized access risks, develop defensive recommendations, and manage client projects. Communicate findings through technical reports, presentations, and stakeholder briefings, including to CISO-level audiences, regulators, and legal counsel.

Own and improve enterprise security platforms, cloud and infrastructure security, identity governance, endpoint protection, vulnerability management, incident response, network controls, and DevSecOps practices. Lead complex security initiatives, compliance controls, vendor assessments, security architecture reviews, and AI security governance. Build automation with PowerShell and Python, partner with IT Operations and DevOps, reduce manual work, and serve as the senior escalation point for technical security incidents.

Manage and maintain compliance with security and privacy frameworks (ISO 27001, SOC 2, HIPAA, PCI DSS). Coordinate audits, drive remediation, improve controls and evidence management, support security questionnaires for deal cycles, and design compliance training while partnering across teams to integrate controls into the SDLC.

Perform manual and automated dynamic security testing and ethical hacking of web and mobile applications to discover OWASP Top 10 vulnerabilities. Use Burp Suite, DAST tools and Agentic AI, validate findings, review results with stakeholders, rate risks, develop testing techniques, assist designing security solutions, and mentor others.

Serve as a Sales Engineer for Armis, delivering virtual and in-person technical demos, deploying proof-of-value installations, leading technical training, supporting conferences, developing prospect-facing documentation, troubleshooting, and collaborating with sales to close enterprise cybersecurity SaaS deals. Travel up to 40%.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

Lead and grow a security engineering team to design and operate cloud-native security controls, drive DevSecOps practices, conduct threat modeling and incident response, partner cross-functionally on security roadmaps, and ensure compliance with frameworks (NIST, SOC 2, ISO, etc.). Responsible for vulnerability management, identity and access controls, observability/SIEM, and security automation.