Top Hybrid Cybersecurity Jobs in CO

Supports cybersecurity incident management projects by analyzing alerts, logs, and incident data; assisting with triage, containment, remediation, and post-incident documentation; coordinating technical workstreams; and preparing client-ready updates. The role develops familiarity with security operations, threat detection, vulnerability management, incident response planning, threat intelligence, and forensic investigation while supporting client engagements.

Designs and configures privileged access management solutions, manages identity lifecycle and access governance activities, analyzes authorization requirements, reviews access controls, and identifies remediation needs. The role uses CyberArk, Active Directory, Azure Active Directory, and cloud identity technologies while developing documentation, resolving complex security issues, advising clients, and mentoring junior team members.

Leads Microsoft Entra ID identity and access management workstreams, including identity governance, privileged access, authentication, role-based access control, and lifecycle management. Manages client engagements, delivery plans, technical documentation, access policies, integrations, and security alignment. Coaches teams, reviews IAM designs and deliverables, resolves escalations, and identifies improvements to access administration and service delivery.

Manage and enhance identity infrastructure operations in CrowdStrike’s federal cloud environments. Responsibilities include identity provider operations, application lifecycle management, access troubleshooting, security control compliance, automation, monitoring, alerting, tier 2/3 support, root cause analysis, stakeholder communication, and on-call support. The role focuses on IAM security, scalability, FedRAMP and DoD requirements, and collaboration with Engineering and IT teams.

Leads AI-focused application security across software, cloud, hardware, and firmware. Conducts security assessments and AI-driven red-team exercises, develops secure-code fixes and AI-enabled security tooling, validates controls for LLM and agentic systems, and shapes organization-wide AI security strategy. Partners with engineering, hardware, and executive stakeholders to identify threats, implement mitigations, and safely adopt AI within security operations.

Perform penetration testing across applications, APIs, cloud environments, infrastructure, and client-side components. Identify, validate, score, and document vulnerabilities; support remediation and secure design with Engineering; triage bug bounty submissions; develop testing tools and scripts; and communicate findings to researchers, technical teams, and executives. The role also applies threat modeling, security frameworks, and emerging threat intelligence to improve organizational security.

Provide first-line technical support for complex security and networking issues, including troubleshooting SSL, SAML, HTTP, TCP/IP, connectivity, and performance problems. Partner with Engineering, document resolutions, manage enterprise escalations, contribute product feedback, develop training, and mentor support engineers. The role requires expertise in web security, network infrastructure, security proxies, VPNs, firewalls, DLP, SD-WAN, and related technologies, along with U.S. citizenship.

Designs and maintains privacy controls and privacy-enhancing technologies across products and enterprise systems. Embeds privacy by design into the software development lifecycle, builds automation for consent and data subject rights, supports privacy impact assessments, and develops data protection solutions. Partners with Engineering, Product, Security, Legal, and Compliance to translate regulations into technical requirements. Also supports AI governance, privacy tooling, reusable standards, documentation, and engineering training.

Own multi-year identity security adoption roadmaps for strategic enterprise accounts. Architect governance across human, machine, and AI agent identities; advise C-suite and engineering leaders; translate regulations into security architectures; quantify breach-risk reduction, compliance gains, and cost avoidance; support renewals and expansions; synthesize cross-account patterns for product and engineering teams; contribute thought leadership and mentor advisors.

Develops and maintains SOC monitoring content, detections, alerts, threat-hunting procedures, playbooks, and documentation. Provides senior investigative guidance and escalates complex security issues, leads security improvement initiatives, ensures compliance with governance requirements, recommends corrective actions, and mentors junior analysts. The role also conducts security assessments, forensic investigations, risk mitigation, and data security activities.

Supports customers using Rapid7’s Vector Command Red Team service through attack surface analysis, reconnaissance, OSINT, reporting, customer communications, and request prioritization. The role coordinates with Red Team, MDR, and MVM teams; conducts manual network and service reconnaissance; develops scripts to analyze attack surface data; monitors customer exposures; and performs entry-level external penetration testing. It also includes customer onboarding, monthly reporting, update calls, and translating technical security concepts for nontechnical stakeholders.

Supports information security initiatives through automation for vulnerability management, detection engineering, cloud identity management, and SOC 2/SOX ITGC compliance. Learns security tooling, identifies process improvements, and performs Level 1 security alert triage and investigations. The internship is full-time for 12 weeks in summer 2027 and requires hybrid work in Denver three days per week.