Top Hybrid Cybersecurity Jobs in CO

Lead and scale enterprise WIAM governance: define policy and control standards, centralize governance, drive risk-to-control traceability, prioritize remediation, monitor KPIs and audit readiness, advise senior stakeholders, and mentor staff to strengthen control effectiveness and regulatory compliance.

Perform technical security evaluations, investigate incidents and data loss, review logs, recommend corrective actions, and support security posture improvements with forensic analysis and controls review.

Designs and implements security measures across IaaS, PaaS, and SaaS environments. Conducts risk assessments, vulnerability testing, audits, forensic investigations, and incident response. Collaborates with cloud service providers, develops security architectures and frameworks, monitors for breaches, manages cloud resources, and supports compliance. The role also involves client relationship management, solving complex cybersecurity challenges, and advancing cloud security strategies.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Hunt for historical and active threats across enterprise environments by analyzing logs, system artifacts, forensic evidence, and threat intelligence. Develop actionable remediation recommendations and communicate findings through reports and presentations to technical stakeholders, executives, and legal counsel. Help mature threat-hunting capabilities through research, methodology development, search-query creation, and scripting. The role also values incident response, cloud-platform knowledge, remediation planning, and responsible use of AI technologies.

Protect corporate data through DLP implementation, tuning, alert review, false-positive reduction, and control optimization across web, endpoint, email, cloud, and SaaS environments. The engineer will review data protection programs, improve monitoring and blocking controls, collaborate with business partners, and use automation and emerging AI tools to strengthen security operations.

Leads implementation, administration, configuration, maintenance, troubleshooting, and technical support for Imprivata enterprise access management environments. Provides customer lifecycle ownership, solution assessments, workflow analysis, project planning, technical leadership, training, documentation, roadmap guidance, and stakeholder communication. Integrates Imprivata with Active Directory, VDI, and EMR platforms while monitoring system health, certificates, audit records, and service metrics. Requires onsite and remote customer engagement, including travel of up to 25%.

Leads strategy, roadmap, and execution for Rapid7’s SIEM and threat detection products. Translates customer, market, and competitive insights into prioritized capabilities for data ingestion, detection, search, and reporting. Aligns global engineering, detection science, SOC operations, marketing, sales, and customer success teams while driving delivery excellence, data-backed decisions, and improvements to the MDR customer experience.

Administer and improve Workday and multi-platform HR security, including role-based access, security groups, access reviews, request approvals, audit support, governance documentation, and compliance controls. Evaluate elevated access requests, identify risks, resolve routine issues, coordinate remediation, and escalate complex decisions. Partner with HR, IT, Legal, and Compliance stakeholders to strengthen policies, processes, and least-privilege access across Workday, Peakon, UKG, Prism, and HR data platforms.

Supports IT compliance across SOX ITGC/ITAC, SOC 1, SOC 2, and ISO 27001. Leads control testing, audit coordination, risk assessments, gap remediation, and evidence collection. Identifies opportunities to automate compliance workflows using scripting, RPA, GRC platforms, and AI technologies. Builds an automation roadmap, measures efficiency gains, documents controls, and advises stakeholders on compliance requirements and emerging technologies.

Lead complex security investigations across endpoint, identity, cloud, email, SaaS, and network environments. Own incidents through containment, remediation coordination, documentation, and post-incident review. Tune detections, queries, dashboards, workflows, and SOAR playbooks; improve SOC metrics, threat coverage, alert fidelity, and response processes. Partner on vulnerability and cloud-risk remediation, participate in global on-call rotation, use approved AI capabilities responsibly, and mentor analysts.