Top Hybrid Cybersecurity Jobs in CO

Provide cybersecurity engineering support for programs: validate security requirements and designs, perform technical assessments and A&A documentation under NIST RMF, support incident response, identify and mitigate system risks, and implement enterprise security controls using tools like Splunk, Tenable, and HBSS. Requires coordination with engineers, PMs, and stakeholders and maintaining system Authorizations to Operate.

Provide cybersecurity engineering support to develop, validate, and maintain secure systems. Manage cyber requirements, perform technical security assessments, support Incident Response and Assessment & Authorization (A&A) per NIST RMF, produce A&A documentation, mitigate risks, and advise architects and program stakeholders on security design and compliance.

Provide cybersecurity engineering support for systems to achieve and maintain Authorizations to Operate (ATO). Validate security requirements and designs, perform technical security assessments, support RMF A&A documentation, incident response, risk management, and advise architects and PMs on secure implementations across the mission lifecycle.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Lead strategy, engineering, and lifecycle management for enterprise directory and machine identity platforms. Own Active Directory, Entra ID, PKI/CLM (e.g., Venafi), HSMs, hybrid identity integrations, automation/IaC, resilience, and governance while driving platform roadmaps, modernizations, and cross-functional IAM collaboration.

Lead a remote Vulnerability Management team to manage the full vulnerability lifecycle: discovery, triage, risk-based prioritization, remediation oversight, automation, and reporting. Partner with IT, DevOps, Security Engineering, and business units to enforce SLAs, drive threat-informed risk reduction, and deliver KPIs and dashboards for stakeholders.

Lead multi-year product strategy for non-human identity and access across MongoDB Atlas, core database, and developer platforms. Drive workload identity federation, programmatic access, AI agent authorization, and developer-first access management. Partner with engineering, UX, and GTM to validate enterprise requirements, prioritize initiatives, and measure adoption. Represent MongoDB externally and mentor PMs to elevate product quality.

Detect, contain, and remediate security incidents across Windows, macOS, and Linux. Perform malware and forensic analysis, network log review, and develop detection/remediation processes. Produce customer-facing reports and thought leadership content. Work rotating 4x10 shifts on a hybrid schedule and contribute to process improvement and incident response best practices.

Lead end-to-end integrated marketing programs for a cyber resilience SaaS product. Develop narratives and audience strategies, align campaigns with product and sales, create enablement materials, set KPIs, analyze performance, and advise senior leadership to drive revenue and customer engagement over an ~8-month fixed-term contract.

Assist in monitoring insider risks, support data protection, investigate security alerts, and maintain operational governance in a security team.

Lead design and implementation of advanced cybersecurity solutions for aerospace systems, manage CMMC compliance, perform security assessments and risk analysis, support audits and regulatory inquiries, mentor junior staff, integrate security into development lifecycles, and participate in incident response.

Lead technical security strategy and implementation for Managed Services platforms. Design and improve security controls, IAM, PAM, vulnerability management, incident response, and compliance. Embed secure-by-design and DevSecOps practices, mentor engineers, and partner with architecture, engineering, and operations to reduce risk and enable scalable growth.