Top Hybrid Cybersecurity Jobs in CO

Investigates and responds to AI-related security threats across models, applications, agents, identities, APIs, and infrastructure. Responsibilities include AI security monitoring, identity threat detection, forensic analysis, incident response, remediation guidance, detection rule development, and regulatory risk support. The role collaborates with security, identity, engineering, threat intelligence, and governance teams to reduce enterprise AI risk.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Leads technical compliance and federal authorization programs for MongoDB’s public-sector cloud products. Responsibilities include managing FedRAMP High, DoD IL5+, CJIS, and ITAR assessments; coordinating auditors, 3PAOs, agencies, and engineering teams; maintaining continuous monitoring, POA&Ms, security plans, evidence, dashboards, and remediation workflows; mapping NIST controls; advising on cloud security configurations; and mentoring stakeholders. The role requires deep public-sector GRC expertise, strong communication, and the ability to manage complex audits through Authorization to Operate.

Build and maintain scalable cybersecurity data infrastructure, distributed systems, and tools supporting OverWatch threat hunting across trillions of events. Develop web services and processing pipelines, integrate research projects into production, improve analyst workflows, and operate highly available cloud systems. Responsibilities include DevOps ownership, on-call support, testing, code reviews, open-source collaboration, and working with a distributed remote team.

Serves as an Information System Security Officer supporting RMF accreditation and compliance for sensitive defense information systems. Develops and maintains SSPs, RARs, CONMON plans, POA&Ms, ATOs, and related security documentation. Evaluates controls, conducts vulnerability scanning, manages remediation, uses Splunk for audits and incident investigations, supports spill containment, and coordinates incident response. The role is fully on-site and requires collaboration with IT, security, network, and program teams.

Conduct application security assessments, threat modeling, code reviews, and manual penetration testing across web applications, APIs, cloud services, appliances, and AI-enabled features. Coordinate external penetration tests, validate vulnerabilities, track remediation, and verify fixes. Improve SAST, SCA, secrets detection, container scanning, SBOM, supply-chain, and CI/CD security workflows while advising Engineering on secure design and risk prioritization.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Manages audit, certification, customer assurance, and vendor compliance operations. Coordinates evidence collection, audit schedules, questionnaires, due diligence, corrective actions, and assessment records. Maintains compliance workflows and documentation, improves processes, prepares dashboards, monitors service levels, and coordinates stakeholders across Cybersecurity, Legal, Procurement, Sales, Finance, and technology teams. Oversees assigned personnel, assigns work, coaches team members, and escalates overdue actions or resource constraints.

Leads vulnerability intelligence research focused on rapidly analyzing and exploiting newly disclosed or actively exploited vulnerabilities. Develops Metasploit modules and framework improvements, conducts zero-day research, publishes technical analyses, advises detection teams, supports emergent threat response, presents research publicly, and mentors other researchers. The role requires advanced exploitation, reverse engineering, operating system, networking, and exploit mitigation expertise, plus cross-functional communication during time-sensitive security events.

Designs and develops IAM and security software, automation, APIs, and microservices. Integrates security into cloud and CI/CD environments, conducts code reviews and threat modeling, monitors security events, supports incident response, and advises teams on identity architecture and best practices. Requires extensive IAM administration, programming, cloud, containerization, and secure-coding experience.