Top Hybrid Cybersecurity Jobs in CO

Own and improve Octus’s enterprise security technology across endpoints, identity, SaaS, email, DLP, AI tools, cloud, and applications. Responsibilities include managing security platforms, hardening systems, tuning SIEM detections, responding to incidents, driving remediation, supporting audits and client reviews, assessing vendor risk, automating workflows, and mentoring teammates. The role requires broad hands-on cybersecurity expertise across Mac and Windows environments, identity platforms, secure web gateways, DLP, compliance frameworks, scripting, and REST APIs.

Lead product strategy, roadmap, and execution for Zscaler’s threat detection and response offerings within its Agentic SOC and MDR business. Translate threat intelligence and customer needs into innovative security products, coordinate engineering and go-to-market teams, and measure product impact. The role owns commercialization, technical direction, product quality, and business outcomes while requiring deep cybersecurity expertise and experience with enterprise security products.

Owns end-to-end enterprise DSPM delivery, including multi-cloud architecture, data connector deployment, classification pipelines, security policies, identity controls, Zero Trust integrations, troubleshooting, and customer consulting. Partners with engineering, product, sales, and enterprise customers to reduce cloud data risks, support AI governance, and optimize Zscaler security solutions across complex environments.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Design and implement cloud security controls across IaaS, PaaS, and SaaS environments. Conduct risk assessments, vulnerability reviews, security testing, and threat monitoring; support remediation of vulnerabilities and control gaps; document technical findings and requirements; advise clients on cloud security improvements; collaborate with technical teams; mentor junior staff; and build client relationships within PwC’s Advisory practice.

Investigates, triages, and resolves DNS abuse and compliance cases involving phishing, malware, botnets, spam, and pharming. Applies policy-based actions to domains and accounts, maintains audit-ready records, supports legal and law enforcement requests, communicates with reporters and partners, tracks case metrics, identifies abuse trends, and improves workflows. The role requires sound judgment, careful documentation, timely escalation of complex cases, and collaboration across global teams.

Own the information security risk register, risk assessments, vendor risk reviews, risk exceptions, security findings remediation, compliance training, policies, and governance reporting. Partner with engineering and company leaders to enforce remediation and strengthen the control environment. Scale GRC through AI, scripting, and automation while supporting HIPAA, SOC 2, ISO 27001, and HITRUST compliance.

Deploys, configures, optimizes, and supports the CrowdStrike Falcon platform and related applications for enterprise customers. Responsibilities include troubleshooting, software deployment engineering, API scripting, integrations, vulnerability and asset management support, incident response deployment assistance, customer project planning, technical workshops, mentoring, and collaboration with customer IT and internal services teams. Travel may reach 25%.

Investigates and responds to AI-related security threats across models, applications, agents, identities, APIs, and infrastructure. Responsibilities include AI security monitoring, identity threat detection, forensic analysis, incident response, remediation guidance, detection rule development, and regulatory risk support. The role collaborates with security, identity, engineering, threat intelligence, and governance teams to reduce enterprise AI risk.

Leads technical compliance and federal authorization programs for MongoDB’s public-sector cloud products. Responsibilities include managing FedRAMP High, DoD IL5+, CJIS, and ITAR assessments; coordinating auditors, 3PAOs, agencies, and engineering teams; maintaining continuous monitoring, POA&Ms, security plans, evidence, dashboards, and remediation workflows; mapping NIST controls; advising on cloud security configurations; and mentoring stakeholders. The role requires deep public-sector GRC expertise, strong communication, and the ability to manage complex audits through Authorization to Operate.

Serves as an Information System Security Officer supporting RMF accreditation and compliance for sensitive defense information systems. Develops and maintains SSPs, RARs, CONMON plans, POA&Ms, ATOs, and related security documentation. Evaluates controls, conducts vulnerability scanning, manages remediation, uses Splunk for audits and incident investigations, supports spill containment, and coordinates incident response. The role is fully on-site and requires collaboration with IT, security, network, and program teams.

Conduct application security assessments, threat modeling, code reviews, and manual penetration testing across web applications, APIs, cloud services, appliances, and AI-enabled features. Coordinate external penetration tests, validate vulnerabilities, track remediation, and verify fixes. Improve SAST, SCA, secrets detection, container scanning, SBOM, supply-chain, and CI/CD security workflows while advising Engineering on secure design and risk prioritization.