Top Hybrid Cybersecurity Jobs in CO

Leads NinjaOne’s FedRAMP High and Moderate compliance program, including authorization, continuous monitoring, audits, control testing, POA&M management, vulnerability remediation, documentation, and assessor coordination. Partners with engineering and federal stakeholders to implement controls, maintain evidence, manage cloud security dependencies, track regulatory changes, and automate compliance workflows. Provides FedRAMP subject matter expertise to internal teams, customers, and prospects while improving audit efficiency and evidence quality.

Lead product strategy, roadmap, and delivery for Falcon Complete’s internal MDR tooling, including AI-powered investigation and triage, ticketing, case management, and analyst workbench systems. Partner with security operations, analysts, engineering, and data science teams to translate workflows into product requirements, prioritize automation, improve analyst productivity and response times, define success metrics, and enhance customer outcomes.

Conduct sophisticated threat hunting, dark web monitoring, and customer-specific cyber threat intelligence operations. Serve as a trusted customer advisor, research targeted threats, validate security controls using MITRE ATT&CK, prepare intelligence reports, and deliver briefings to stakeholders ranging from SOC analysts to CISOs. Collaborate across teams to develop solutions, respond to customer requests, and improve threat hunting services.

Leads Pluralsight’s enterprise-wide information security strategy across corporate and product environments. Oversees security architecture, regulatory compliance, policies, third-party audits, business continuity, disaster recovery, and security reporting. Builds operational rigor, monitors program effectiveness, translates regulations into practical controls, and communicates with executives, auditors, regulators, and technical teams. The role requires extensive information security leadership, deep knowledge of security technologies and regulations, and strong organizational communication skills.

Develop and mature an enterprise insider threat program by identifying critical assets, mapping identities and access, analyzing behavioral and technical signals, supporting investigations, and improving detection capabilities. The consultant partners with cybersecurity, HR, Legal, Privacy, and business stakeholders to assess insider risk, define protection requirements, tune security tooling, develop monitoring strategies, and produce defensible analysis and executive reporting.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Leads cybersecurity strategy and operational engagement with AI product, strategy, engineering, and business leaders. Assesses workflows and security controls, identifies risks, develops mitigation roadmaps, communicates threat intelligence, coordinates security work across technology projects, supports incident response and remediation, and develops cybersecurity maturity metrics. Requires substantial IT and cybersecurity experience, technical customer engagement, project coordination, AI/ML understanding, and the ability to translate complex security issues into business recommendations.

Lead product security assessments and penetration testing across MongoDB products and cloud environments. Conduct threat modeling, code analysis, architecture reviews, vulnerability verification, and attack research. Use AI and automation to improve assessment workflows, collaborate with engineering teams on remediation and secure coding, and advise on container security and secrets management. Coordinate with red and detection teams while mentoring others and communicating findings to technical and non-technical stakeholders.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Leads privileged access management workstreams across client engagements, overseeing access reviews, privileged account remediation, identity governance, and role-based access controls. Reviews Azure Active Directory, Microsoft Active Directory, CyberArk, and cloud identity configurations; translates security requirements into solutions and documentation; identifies control gaps; coaches teams; manages project timelines and risks; and improves identity security through automation and stronger governance.