Top Hybrid Cybersecurity Jobs in CO

Manage privileged access administration and PAM tools across client environments. Configure identity platforms, review entitlements and segregation-of-duties risks, analyze access logs, document controls, and implement RBAC and identity federation solutions. Support testing, troubleshooting, remediation, and access governance initiatives while interpreting client requirements, resolving complex security challenges, guiding junior team members, and maintaining client relationships.

Leads client-facing identity and access management initiatives, designing access controls, identity governance, privileged access, and lifecycle strategies across cloud and enterprise environments. Advises clients on federation and IAM architecture, validates security controls and documentation for audit readiness, manages complex delivery teams, and coaches professionals while aligning secure solutions with business needs.

Drives cybersecurity control assessments, compliance activities, and GRC program improvements. Conducts control testing, gathers evidence, develops recommendations, produces executive reporting, and advises technical and business stakeholders. The role supports continuous testing, aligns risk posture and control effectiveness with security frameworks, and translates complex requirements into actionable business insights.

Leads and matures the third-party risk management program across cybersecurity, privacy, and AI governance. Conducts vendor risk assessments, evaluates data protection and AI practices, manages onboarding through offboarding, monitors continuous and Nth-party risk, tracks remediation, reviews contract terms, supports audits, and maintains governance reporting. Partners with Legal, Privacy, Security, Procurement, AI Governance, and business teams to improve workflows, communicate risks, and develop scalable assessment processes.

Provides second-line support for complex security and network issues, partnering with Engineering to troubleshoot, reproduce, and resolve customer problems. Documents incidents, manages enterprise escalations, analyzes packet captures and HAR traces, and provides product feedback. Develops training programs and mentors support engineers while advising on product and code improvements. Requires extensive web security, networking, and cloud knowledge, plus experience with SSL, SAML, HTTP, TCP/IP, VPNs, SD-WAN, and related technologies.

Serve as a hands-on technical security leader addressing complex product, infrastructure, architecture, and risk challenges. Evaluate security across compute, network, and storage; influence cross-functional decisions; lead M&A diligence and partner risk assessments; mentor senior individual contributors; and build a technical security community across product, enterprise, and security operations.

Develops and maintains SOC monitoring content, detections, alerts, threat-hunting procedures, playbooks, and documentation. Provides senior investigative guidance and escalates complex security issues, leads security improvement initiatives, ensures compliance with governance requirements, recommends corrective actions, and mentors junior analysts. The role also conducts security assessments, forensic investigations, risk mitigation, and data security activities.

Leads frontier research and engineering for AI-powered cybersecurity systems. Defines research direction, designs agentic and autonomous security applications, builds evaluation environments, improves systems through feedback and adversarial simulation, and transitions prototypes into scalable production capabilities. Provides technical leadership across teams, mentors senior researchers and engineers, and contributes to research publications, open source, and the broader AI and cybersecurity communities.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Own Cleo’s application and product security program across SaaS and customer-hosted products. Lead SSDLC practices, threat modeling, security tooling, vulnerability management, penetration testing, coordinated disclosure, CVE publication, and NIST CSF controls. Define product security standards, roadmap, secure defaults, access controls, and customer-facing advisories. Partner with engineering, product, architecture, and customers while guiding security engineers and consultants. Also establish protections for LLM applications, AI agents, and AI-assisted development workflows.

Leads NinjaOne’s FedRAMP High and Moderate compliance program, including authorization, continuous monitoring, audits, control testing, POA&M management, vulnerability remediation, documentation, and assessor coordination. Partners with engineering and federal stakeholders to implement controls, maintain evidence, manage cloud security dependencies, track regulatory changes, and automate compliance workflows. Provides FedRAMP subject matter expertise to internal teams, customers, and prospects while improving audit efficiency and evidence quality.