Top Hybrid Cybersecurity Jobs in CO

Conduct OSINT investigations and contextual analysis of DPRK state-sponsored cyber adversaries and hacktivists. Track geopolitical, political, and economic developments; produce finished intelligence reports; answer customer RFIs; identify intelligence gaps; and collaborate with technical and customer-facing teams. The role requires high-proficiency Korean, deep knowledge of North Korean government and regional affairs, strong analytical and English writing skills, and effective use of AI technologies.

Leads incident response engagements, intrusion investigations, threat hunting, host and network forensics, malware analysis, remediation planning, and cloud incident response. The role produces executive and technical reports, communicates findings to customers and legal stakeholders, mentors teams, contributes industry thought leadership, and manages projects. Candidates need incident response or information security expertise, strong communication and leadership skills, AI technology experience, and willingness to travel up to 30%.

Design and implement application security controls across cloud environments, assess cloud architectures for vulnerabilities and identity risks, conduct security reviews and penetration testing, monitor security events, support incident response, and develop cloud security requirements. Translate technical findings into remediation recommendations, interpret risk data, collaborate with clients, and mentor junior team members.

Leads strategic enterprise engagements by delivering technical positioning, executive architecture workshops, competitive differentiation, and technical sales closure for Zero Trust and SASE solutions. Partners with Sales, Product, Engineering, Marketing, and Enablement to translate customer requirements into initiatives, accelerate go-to-market execution, and support complex security and network transformation opportunities.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Designs, implements, and governs secure AWS, Azure, and GCP cloud architectures across IaaS, PaaS, and SaaS environments. Defines security standards, IAM strategies, network controls, and guardrails; leads cloud security reviews, threat modeling, and risk assessments; integrates security into DevOps and CI/CD workflows; evaluates security tooling; supports compliance; and mentors engineering teams. The role also drives cloud security posture improvements, documentation, remediation, and long-term security architecture maturity.

Leads and matures the third-party risk management program across cybersecurity, privacy, and AI governance. Conducts vendor risk assessments, evaluates data protection and AI practices, manages onboarding through offboarding, monitors continuous and Nth-party risk, tracks remediation, reviews contract terms, supports audits, and maintains governance reporting. Partners with Legal, Privacy, Security, Procurement, AI Governance, and business teams to improve workflows, communicate risks, and develop scalable assessment processes.

Serve as a hands-on technical security leader addressing complex product, infrastructure, architecture, and risk challenges. Evaluate security across compute, network, and storage; influence cross-functional decisions; lead M&A diligence and partner risk assessments; mentor senior individual contributors; and build a technical security community across product, enterprise, and security operations.

Develops and maintains SOC monitoring content, detections, alerts, threat-hunting procedures, playbooks, and documentation. Provides senior investigative guidance and escalates complex security issues, leads security improvement initiatives, ensures compliance with governance requirements, recommends corrective actions, and mentors junior analysts. The role also conducts security assessments, forensic investigations, risk mitigation, and data security activities.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Own Cleo’s application and product security program across SaaS and customer-hosted products. Lead SSDLC practices, threat modeling, security tooling, vulnerability management, penetration testing, coordinated disclosure, CVE publication, and NIST CSF controls. Define product security standards, roadmap, secure defaults, access controls, and customer-facing advisories. Partner with engineering, product, architecture, and customers while guiding security engineers and consultants. Also establish protections for LLM applications, AI agents, and AI-assisted development workflows.