Top Hybrid Cybersecurity Jobs in CO

Leads SailPoint’s compliance and audit program across SOC 2, ISO 27001, FedRAMP, C5, and related frameworks. Manages and develops compliance professionals, oversees concurrent audits and questionnaires, improves processes through automation, evaluates emerging obligations, and integrates compliance into business processes. Serves as the subject matter expert and primary liaison for leadership, cross-functional teams, customers, external auditors, and certification bodies.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

Support pre-sales and post-sales for SLED customers: demonstrate CrowdStrike Falcon, run demos/POVs, advise on endpoint, cloud, identity, and AI security, drive onboarding/adoption/expansion/renewals, partner with Account Executives, mentor peers, and perform occasional customer travel.

Lead Zeta’s AI-native Application Security function by defining strategy, building the team, embedding security agents and policy-as-code into IDEs, pull requests, CI/CD, and AI/ML pipelines, and overseeing continuous threat modeling and validation. Own security for AI systems, models, prompts, and agents, including adversarial testing for prompt injection, model abuse, and data leakage. Mentor engineers and promote automated, secure software development practices.

Partners with Sales to advise enterprise customers on cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Leads technical discovery, solution design, demonstrations, proof-of-value and proof-of-concept engagements, customer validation, training, and executive discussions. Translates technical capabilities into business outcomes, creates customer-facing documentation, supports events, and collaborates cross-functionally to advance sales opportunities and improve customer outcomes. Travel is typically 25–50%.

Develop and maintain enterprise cybersecurity policies and standards aligned with ISO 27001, PCI-DSS, and SOC 2. Conduct vendor security and privacy risk assessments, track remediation, support audits and client questionnaires, evaluate security controls and evidence, and recommend corrective actions. Partner with IT, Engineering, vendors, and business units on security architecture, data security implementations, compliance, risk management, and organization-wide security awareness.

Manage and secure classified IT infrastructure in closed areas, including Active Directory administration, desktop and Windows endpoint support, VMware virtualization, patching and STIG compliance. Collaborate with ISSOs for RMF/NIST/JSIG adherence, maintain documentation and support accreditation, audits, logging, and incident response.

Lead customer-facing cybersecurity solution architecture from presales through post-sales. Conduct demonstrations, proof-of-concepts, executive business reviews, crisis simulations, and cyber workforce resilience programs. Advise C-level and technical stakeholders, establish security roadmaps, drive platform adoption, measure organizational risk, and support sustainable cybersecurity program operations. Collaborate with sales, product, content, engineering, and customer success teams while serving as a trusted embedded cybersecurity advisor.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Leads enterprise application security through secure code reviews, threat modeling, architecture assessments, CI/CD security controls, secure coding standards, API protections, WAF tuning, and software supply chain security. Partners with engineering, DevOps, platform, and SRE teams to remediate risks, automate controls, secure AI-enabled applications, and improve organization-wide security practices. Serves as a principal technical advisor and mentor while defining scalable guardrails, playbooks, metrics, and reference architectures.

Lead and mature detection and incident response lifecycle, run day-to-day SOC operations, manage on‑call readiness, drive SIEM detections and automation, coordinate cross‑team responses, maintain playbooks and run readiness exercises, mentor analysts, and ensure regulatory and post‑incident improvements.