Top Hybrid Cybersecurity Jobs in CO

Serves as an Information System Security Officer supporting RMF accreditation and compliance for sensitive defense information systems. Develops and maintains SSPs, RARs, CONMON plans, POA&Ms, ATOs, and related security documentation. Evaluates controls, conducts vulnerability scanning, manages remediation, uses Splunk for audits and incident investigations, supports spill containment, and coordinates incident response. The role is fully on-site and requires collaboration with IT, security, network, and program teams.

Serves as a technical advisor to strategic customers, supporting CrowdStrike Falcon planning, deployment, configuration, troubleshooting, optimization, integrations, and operational adoption. Provides guidance on security operations, threat hunting, incident management, vulnerability and asset management, and Falcon modules. Develops API-based solutions, collaborates with customer IT and Professional Services teams, delivers training, manages projects, and maintains trusted customer relationships. The role is remote and requires travel up to 20%.

Lead complex incident response engagements, investigate advanced threats, conduct host and network forensics across Windows, macOS, and Linux, perform malware analysis, and develop remediation plans. The consultant will communicate findings to executives, regulators, legal counsel, and customers; lead teams; conduct cloud incident response; contribute industry thought leadership; apply AI technologies; and travel on short notice up to 30%.

Provides customer-facing cybersecurity consulting focused on threat emulation, exposure management, red teaming, vulnerability management, penetration testing, and technical risk mitigation. Uses SafeMind, Falcon, and AI-enabled capabilities to evaluate exposures, refine risk outputs, advise technical and executive audiences, improve service delivery, and mentor junior consultants. Requires advanced security assessment, infrastructure, networking, operating system, automation, and scripting expertise, with occasional travel.

Conduct application security assessments, threat modeling, code reviews, and manual penetration testing across web applications, APIs, cloud services, appliances, and AI-enabled features. Coordinate external penetration tests, validate vulnerabilities, track remediation, and verify fixes. Improve SAST, SCA, secrets detection, container scanning, SBOM, supply-chain, and CI/CD security workflows while advising Engineering on secure design and risk prioritization.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Manages audit, certification, customer assurance, and vendor compliance operations. Coordinates evidence collection, audit schedules, questionnaires, due diligence, corrective actions, and assessment records. Maintains compliance workflows and documentation, improves processes, prepares dashboards, monitors service levels, and coordinates stakeholders across Cybersecurity, Legal, Procurement, Sales, Finance, and technology teams. Oversees assigned personnel, assigns work, coaches team members, and escalates overdue actions or resource constraints.

Leads vulnerability intelligence research focused on rapidly analyzing and exploiting newly disclosed or actively exploited vulnerabilities. Develops Metasploit modules and framework improvements, conducts zero-day research, publishes technical analyses, advises detection teams, supports emergent threat response, presents research publicly, and mentors other researchers. The role requires advanced exploitation, reverse engineering, operating system, networking, and exploit mitigation expertise, plus cross-functional communication during time-sensitive security events.

Designs and develops IAM and security software, automation, APIs, and microservices. Integrates security into cloud and CI/CD environments, conducts code reviews and threat modeling, monitors security events, supports incident response, and advises teams on identity architecture and best practices. Requires extensive IAM administration, programming, cloud, containerization, and secure-coding experience.

Leads complex cybersecurity incidents and digital forensics and incident response investigations. Responsibilities include incident command, threat hunting, triage, root-cause analysis, corrective-action reporting, process development, technical project leadership, executive presentations, global on-call participation, and mentoring junior analysts. The role supports cybersecurity strategy and protects critical aerospace systems.

Supports federal security certifications and authorizations, including FedRAMP and DoD requirements. The role assesses and mitigates risks, validates security controls, manages audits and continuous monitoring, documents compliance, and partners with engineering, legal, finance, customers, auditors, and regulators. It also evaluates AI products for regulated customers and develops compliance automation.

Build and govern Compa’s secure AI foundation across identity, access, data, endpoints, SaaS, cloud, and networks. Secure non-human identities, agent access, data flows, AI integrations, and third-party models. Design controls for prompt injection, data exfiltration, excessive agency, OAuth abuse, and unsafe tool use. Implement logging, detection, enforcement automation, and enterprise security architecture while partnering with technical, legal, privacy, and business teams.