Top Hybrid Cybersecurity Jobs in CO

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Manages Microsoft Entra ID and identity access management workstreams, designing role-based access controls, authorization frameworks, access governance processes, and privileged access workflows. Configures Azure and Microsoft Active Directory components, analyzes access risks, documents technical requirements, develops client recommendations, and supports issue resolution. Mentors junior team members, reviews deliverables, and coordinates project timelines across client environments.

Lead SailPoint identity and access management engagements, including identity governance, access administration, RBAC, privileged access management, and lifecycle workflows. Manage project plans, budgets, timelines, deliverables, and client relationships while overseeing platform configuration and deployment. Analyze access risks and control gaps, review technical work, improve processes, and mentor junior professionals. Apply Azure Active Directory, Microsoft Active Directory, and cloud IAM expertise to deliver secure access solutions.

Leads privileged access management workstreams across client engagements, overseeing access reviews, privileged account remediation, identity governance, and role-based access controls. Reviews Azure Active Directory, Microsoft Active Directory, CyberArk, and cloud identity configurations; translates security requirements into solutions and documentation; identifies control gaps; coaches teams; manages project timelines and risks; and improves identity security through automation and stronger governance.

Supports systems security engineering for defense and space programs by managing cyber requirements, validating security implementations, developing threat analyses, and supporting Assessment & Authorization activities. Contributes to security designs, Program Protection and Anti-Tamper plans, SSE plans, policies, briefings, and technical reports. Collaborates with architects, systems engineers, and subject matter experts while supporting firmware, gateware, software, embedded-system, and mission security initiatives.

Leads delivery of cybersecurity training across CrowdStrike technologies, manages technical instructors, and oversees coaching, performance, scheduling, budgets, reporting, and resource allocation. Partners with sales and internal teams to scope customer engagements, recommend training, and improve enablement and revenue outcomes. Serves as a technical training subject matter expert, develops courses, analyzes training effectiveness and KPIs, and communicates with executive and technical audiences. Requires cybersecurity expertise, training management experience, LMS and virtual delivery platform proficiency, project management, and occasional travel.

Performs red team operations, penetration testing, adversary emulation, and security assessments across systems, applications, databases, and networks. Develops customer-facing reports and recommendations, communicates findings to technical and executive audiences, supports information security programs, and provides operational guidance during crisis scenarios. Requires advanced security tooling, networking, systems, scripting, and red team expertise, with occasional travel.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Owns Cleo’s application and product security strategy across SaaS and customer-hosted products. Responsibilities include maturing the SSDLC, threat modeling, security scanning, vulnerability triage, penetration testing, coordinated disclosure, CVE management, product security controls, customer-facing advisories, and NIST CSF evidence. The role also leads security enablement, roadmap prioritization, AI security reviews, and hands-on exploit reproduction and patch validation while guiding engineers and security partners.

Leads AI-focused application security across software, cloud, hardware, and firmware. Conducts security assessments and AI-driven red-team exercises, develops secure-code fixes and AI-enabled security tooling, validates controls for LLM and agentic systems, and shapes organization-wide AI security strategy. Partners with engineering, hardware, and executive stakeholders to identify threats, implement mitigations, and safely adopt AI within security operations.

Perform penetration testing across applications, APIs, cloud environments, infrastructure, and client-side components. Identify, validate, score, and document vulnerabilities; support remediation and secure design with Engineering; triage bug bounty submissions; develop testing tools and scripts; and communicate findings to researchers, technical teams, and executives. The role also applies threat modeling, security frameworks, and emerging threat intelligence to improve organizational security.

Provide first-line technical support for complex security and networking issues, including troubleshooting SSL, SAML, HTTP, TCP/IP, connectivity, and performance problems. Partner with Engineering, document resolutions, manage enterprise escalations, contribute product feedback, develop training, and mentor support engineers. The role requires expertise in web security, network infrastructure, security proxies, VPNs, firewalls, DLP, SD-WAN, and related technologies, along with U.S. citizenship.

Designs and maintains privacy controls and privacy-enhancing technologies across products and enterprise systems. Embeds privacy by design into the software development lifecycle, builds automation for consent and data subject rights, supports privacy impact assessments, and develops data protection solutions. Partners with Engineering, Product, Security, Legal, and Compliance to translate regulations into technical requirements. Also supports AI governance, privacy tooling, reusable standards, documentation, and engineering training.