Top Hybrid Cybersecurity Jobs in CO

Secure CrowdStrike’s software supply chain, open-source dependencies, GitHub organizations, repositories, and source-code environments. Assess risks, implement repository guardrails and secret scanning, investigate malicious packages and dependency threats, automate security checks, and guide engineering teams on secure coding and open-source compliance. The role also contributes to cross-team security initiatives, CI/CD and cloud security integrations, monitoring, and AI-enabled vulnerability triage.

Delivers strategic cybersecurity advisory engagements, assesses and develops security and incident response programs, creates exercise scenarios, and presents reports and recommendations to customer management. The role identifies emerging cyber trends, supports security policy and risk framework development, contributes thought leadership, and manages multiple projects independently. Travel to client sites may reach 30% and candidates must demonstrate AI use for improved decision-making and workflows.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

Own and improve enterprise security platforms, cloud and infrastructure security, identity governance, endpoint protection, vulnerability management, incident response, network controls, and DevSecOps practices. Lead complex security initiatives, compliance controls, vendor assessments, security architecture reviews, and AI security governance. Build automation with PowerShell and Python, partner with IT Operations and DevOps, reduce manual work, and serve as the senior escalation point for technical security incidents.

Lead KPA's enterprise security platforms and technical security initiatives across cloud, identity, endpoints, network, and DevOps. Own vulnerability management, incident response, SOC 2 compliance, vendor security assessments, and security automation. Partner with IT and DevOps to embed security in CI/CD, IaC, containers, and cloud workloads while improving posture through detection engineering, automation, and governance.

Manage and maintain compliance with security and privacy frameworks (ISO 27001, SOC 2, HIPAA, PCI DSS). Coordinate audits, drive remediation, improve controls and evidence management, support security questionnaires for deal cycles, and design compliance training while partnering across teams to integrate controls into the SDLC.

Perform manual and automated dynamic security testing and ethical hacking of web and mobile applications to discover OWASP Top 10 vulnerabilities. Use Burp Suite, DAST tools and Agentic AI, validate findings, review results with stakeholders, rate risks, develop testing techniques, assist designing security solutions, and mentor others.

Serve as a Sales Engineer for Armis, delivering virtual and in-person technical demos, deploying proof-of-value installations, leading technical training, supporting conferences, developing prospect-facing documentation, troubleshooting, and collaborating with sales to close enterprise cybersecurity SaaS deals. Travel up to 40%.

Lead go-to-market and sales for Cyber Managed Services by developing strategies, identifying and qualifying opportunities, building executive relationships, orchestrating solution teams, and partnering with delivery to drive revenue growth and client satisfaction. Mentor leaders and shape engagement approaches while staying current on threat landscape and competitive insights.

Lead design and implementation of cloud security strategies across IaaS, PaaS, and SaaS. Conduct risk assessments, implement IaC and automated enforcement, integrate security scanning into CI/CD, mentor junior staff, build client relationships, and deliver practical solutions to complex cloud security problems while maintaining professional standards.

Lead design and implementation of cloud, container, and application security across CSPs (IaaS/PaaS/SaaS). Manage client relationships and teams, apply DevSecOps practices, perform risk assessments and vulnerability testing, configure policy frameworks (CNAPP), and provide secure coding/cloud security training and mentorship to drive secure delivery and continuous improvement.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

Lead delivery of FedRAMP High authorization and future regulated environments on a multi-tenant SaaS platform. Translate compliance controls into engineering work, manage evidence collection and audit readiness, coordinate Engineering/Product/Compliance, establish reusable control/evidence pipelines and governance, and transition to sustainment post-authorization.

Lead and grow a security engineering team to design and operate cloud-native security controls, drive DevSecOps practices, conduct threat modeling and incident response, partner cross-functionally on security roadmaps, and ensure compliance with frameworks (NIST, SOC 2, ISO, etc.). Responsible for vulnerability management, identity and access controls, observability/SIEM, and security automation.

Secure LLMs, generative AI systems, ML infrastructure, training pipelines, and AI applications. Responsibilities include threat modeling, architecture reviews, security controls, hardening, vulnerability remediation, data privacy, incident response runbooks, vendor reviews, governance, policy development, and AI security training. The role also supports proof-of-concept security solutions and monitors emerging AI threats.

Lead application security engineering across the SDLC using AI-assisted threat modeling, automated security testing, vulnerability prioritization, and secure-by-default controls. Partner with Engineering, Product, QA, DevOps, and AI platform teams to secure applications, APIs, cloud infrastructure, data, and AI/ML systems. Build security automation, CI/CD controls, policy-as-code guardrails, developer enablement, and proactive defenses against emerging threats such as prompt injection and data poisoning.