Top Hybrid Cybersecurity Jobs in CO

Leads large-scale identity and access management projects, develops tailored IAM solutions, advises clients, and improves security and operational effectiveness. Builds and coaches high-performing teams, guides project outcomes, ensures alignment with industry standards and regulatory requirements, and applies advanced technologies, Agile methodologies, and DevOps tools. The role requires deep IAM expertise, client engagement management, business process development, and strategic leadership.

Leads identity and access management initiatives, including Azure Active Directory, CyberArk, federated identity, identity governance, and encryption. Manages access rights, identifies vulnerabilities, validates authorization compliance, aligns security strategies with clients, and leads cybersecurity teams. Responsibilities include project ownership, budgeting, execution, staff mentoring, performance management, stakeholder collaboration, and implementing secure solutions to protect systems and sensitive data.

Designs and maintains privacy controls and privacy-enhancing technologies across products and enterprise systems. Embeds privacy by design into the software development lifecycle, builds automation for consent and data subject rights, supports privacy impact assessments, and develops data protection solutions. Partners with Engineering, Product, Security, Legal, and Compliance to translate regulations into technical requirements. Also supports AI governance, privacy tooling, reusable standards, documentation, and engineering training.

Own multi-year identity security adoption roadmaps for strategic enterprise accounts. Architect governance across human, machine, and AI agent identities; advise C-suite and engineering leaders; translate regulations into security architectures; quantify breach-risk reduction, compliance gains, and cost avoidance; support renewals and expansions; synthesize cross-account patterns for product and engineering teams; contribute thought leadership and mentor advisors.

Perform real-time detection, containment, and remediation of security incidents across Windows, macOS, and Linux. Conduct malware and forensic analysis, develop detection processes and countermeasures, produce customer communications, and contribute thought leadership and public-facing content.

Manage a team of TPRM analysts to run the vendor risk lifecycle, improve tooling and automation (ServiceNow TPRM, AI), perform assessments and audits, develop TPRM policies aligned to frameworks (NIST/ISO/SOC 2), partner with procurement/legal/IT, track KPIs, and support audit and reporting to leadership.

Plans, deploys, configures, optimizes, and supports the CrowdStrike Falcon platform and related applications. Provides troubleshooting, integrations, vulnerability and asset management support, API-based scripting, customer project planning, and collaboration with IT and incident response teams. Develops customer-facing materials, leads skills workshops, mentors colleagues, and may travel up to 25%.

Drive technical marketing for Zero Trust Branch and Digital Experience solutions through customer proof-of-value pilots, architectural demos, networking lab design, troubleshooting, technical collateral, and field enablement. Serve as the technical bridge between field teams and engineering while validating solutions, supporting enterprise evaluations, and improving post-sales time-to-value. The role requires deep networking, packet analysis, cloud networking, monitoring, and customer-facing technical expertise.

Performs cybersecurity consulting engagements including vulnerability assessments, social engineering exercises, penetration testing, risk analysis, remediation recommendations, reporting, and client presentations. Coordinates engagement activities, monitors scope and budgets, documents findings, supports service development and sales opportunities, and mentors junior consultants. The role assesses networks, applications, cloud configurations, infrastructure, and employee awareness while maintaining current cybersecurity knowledge and pursuing relevant certifications.

Develops and maintains SOC monitoring content, detections, alerts, threat-hunting procedures, playbooks, and documentation. Provides senior investigative guidance and escalates complex security issues, leads security improvement initiatives, ensures compliance with governance requirements, recommends corrective actions, and mentors junior analysts. The role also conducts security assessments, forensic investigations, risk mitigation, and data security activities.

Supports customers using Rapid7’s Vector Command Red Team service through attack surface analysis, reconnaissance, OSINT, reporting, customer communications, and request prioritization. The role coordinates with Red Team, MDR, and MVM teams; conducts manual network and service reconnaissance; develops scripts to analyze attack surface data; monitors customer exposures; and performs entry-level external penetration testing. It also includes customer onboarding, monthly reporting, update calls, and translating technical security concepts for nontechnical stakeholders.

Supports information security initiatives through automation for vulnerability management, detection engineering, cloud identity management, and SOC 2/SOX ITGC compliance. Learns security tooling, identifies process improvements, and performs Level 1 security alert triage and investigations. The internship is full-time for 12 weeks in summer 2027 and requires hybrid work in Denver three days per week.

Owns security trust and compliance programs, audits, policies, control design, continuous monitoring, evidence pipelines, and security automation. Leads framework implementations, identifies risks, manages auditor relationships, develops control health metrics, and mentors practitioners without direct authority. The role requires deep knowledge of security and privacy frameworks, GRC engineering, cloud infrastructure, SaaS environments, identity governance, and modern security practices.