Top Remote Cyber Security Jobs in Denver & Boulder, CO

Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.

Lead enterprise IAM and AI access security engineering across Okta, GCP, AWS, and IGA platforms. Replace low-code automation with tested Python services, codify identity infrastructure using Terraform/OpenTofu/Pulumi, implement least-privilege and privileged-access controls, govern human and non-human identities, and secure enterprise AI platforms. Drive cross-functional initiatives, develop technical roadmaps and proposals, support compliance, and mentor engineers.

Lead security engineering across AI systems, cloud infrastructure, product security, GRC automation, GitHub controls, and compliance workflows. Develop AI-specific threat models and guardrails, automate security checks and evidence collection, strengthen AWS and GCP environments, manage CSPM tooling, and secure software supply chains. Partner with Engineering, Product, Legal, IT, and GRC to establish security programs and practical controls for Jasper’s AI platforms.

Lead the development of SailPoint’s cybersecurity architecture practice. Create holistic and reference architectures, define security domains, develop strategic roadmaps, identify security gaps, and translate architectural concepts into viable engineering solutions. Partner with leadership to prioritize initiatives, secure funding, and operationalize the practice. The role also includes hands-on security projects, cross-functional collaboration, stakeholder influence, and mentoring architects and engineers across cloud, application, identity, and network security.

Partners with Sales to advise enterprise customers on cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Leads technical discovery, solution design, demonstrations, proof-of-value and proof-of-concept engagements, customer validation, training, and executive discussions. Translates technical capabilities into business outcomes, creates customer-facing documentation, supports events, and collaborates cross-functionally to advance sales opportunities and improve customer outcomes. Travel is typically 25–50%.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Own and improve enterprise security platforms, cloud and infrastructure security, identity governance, endpoint protection, vulnerability management, incident response, network controls, and DevSecOps practices. Lead complex security initiatives, compliance controls, vendor assessments, security architecture reviews, and AI security governance. Build automation with PowerShell and Python, partner with IT Operations and DevOps, reduce manual work, and serve as the senior escalation point for technical security incidents.

Secure LLMs, generative AI systems, ML infrastructure, training pipelines, and AI applications. Responsibilities include threat modeling, architecture reviews, security controls, hardening, vulnerability remediation, data privacy, incident response runbooks, vendor reviews, governance, policy development, and AI security training. The role also supports proof-of-concept security solutions and monitors emerging AI threats.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Own the security and identity architecture for CDW’s MyCDW ServiceNow platform. Lead consolidation of Entra, Okta, and ServiceNow authentication; architect SailPoint-to-Entra IGA migration; define RBAC, lifecycle, certification, governance, and compliance controls; and guide threat modeling, monitoring, risk reduction, and remediation. Partner across technology and compliance teams, lead IAM and security engineers, manage vendors, and develop strategic roadmaps for secure, cost-effective platform transformation.

Lead applied research on agentic AI for cybersecurity: develop efficient post-trained models, agent designs, and rigorous evaluation/verification. Partner with security teams to translate research into products, run experiments, and publish novel techniques.

Lead AI security strategy and guardrails, design and review AI gateways and tooling, scale InfoSec review processes, reduce AI-driven security noise, drive remediation and investigations, and mentor security and platform engineers.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Leads exposure management and vulnerability management across cloud, hybrid, SaaS, applications, APIs, certificates, domains, and shadow IT. Identifies, validates, prioritizes, and reports vulnerabilities, misconfigurations, leaked data, and other cybersecurity risks. Designs and implements security solutions, supports remediation and penetration testing, integrates threat intelligence, advises on security architecture, and mentors team members. Requires advanced cybersecurity expertise, cross-functional collaboration, and knowledge of security frameworks and technologies.

Own account-level security strategies for defense, aerospace, intelligence, and critical infrastructure customers. Lead security architecture, solution design, demonstrations, workshops, pilots, technical validations, and customer decision processes. Guide secure AI adoption and deployment of Microsoft security solutions, including Sentinel, Defender, Entra, Purview, Security Copilot, Microsoft 365, and Azure security services. Coordinate Microsoft and customer stakeholders, drive adoption, reduce risk, and deliver measurable security outcomes.

Lead software security for Cisco’s IT and Enterprise Operations portfolio. The role owns security posture, threat modeling, secure architecture reviews, AI and LLM security, risk-based remediation, security metrics, and release risk reporting. It partners with engineering, product, and IT leadership to drive security outcomes without direct authority, coordinate security subject-matter experts, and reduce security debt across cloud-native applications and enterprise platforms.

Serves as the senior technical authority for enterprise cybersecurity architecture and engineering supporting a federal VA program. Leads security architecture reviews, threat modeling, risk and gap analyses, modernization, governance, requirements traceability, and secure implementation across cloud, health IT, network, data, identity, and emerging technologies. Advises government and technical leadership, guides multidisciplinary teams, develops architectural standards and recommendations, supports A&A and ATO activities, presents executive briefings, reviews deliverables, and mentors cybersecurity personnel.

Leads the university’s information security architecture and engineering strategy, including cloud, network, application, endpoint, data, identity, and AI security. Directs modernization through zero trust, DevSecOps, infrastructure-as-code, automation, and AI-enabled security. Builds and manages security architecture and engineering teams, establishes enterprise reference architecture, oversees technology selection, develops strategic roadmaps and business cases, manages security initiatives, and advises executive leadership on emerging risks and AI security.

Lead enterprise network segmentation projects using Guardicore Micro Segmentation across data center and cloud environments. Responsibilities include architecture design, project planning, installation, integration, configuration, policy deployment, documentation, customization, training, optimization, and troubleshooting. The role partners with customers, Support, and Engineering teams to deliver successful implementations and improve post-sales satisfaction.

Leads cybersecurity solutions engineering for government and education customers across managed security, network monitoring, cloud security, and related services. Provides technical discovery, solution design, demonstrations, proofs of concept, onboarding, deployment guidance, escalations, and post-sales support. Partners with sales and technical account teams, mentors engineers, develops enablement materials, informs product strategy, identifies expansion opportunities, and manages customer activity in Salesforce.

Secure Agora’s applications, APIs, cloud infrastructure, Kubernetes workloads, deployment pipelines, and blockchain-related systems. Responsibilities include threat modeling, architecture and code reviews, security tooling administration, detection engineering, monitoring, incident response, vulnerability management, penetration-test coordination, security automation, and cross-functional remediation. The role partners closely with Engineering, Product, Infrastructure, Compliance, Operations, and the SOC to improve controls, telemetry, response readiness, and security risk visibility.

Designs and secures enterprise AI platform foundations for mission-critical environments. Responsibilities include threat modeling, tenant isolation, identity and authorization architecture, secure CI/CD, compliance-by-design, and protection of systems executing untrusted code, tools, or agent actions. The role partners with client engineering, product, security, and business stakeholders to deliver secure, reliable, and compliant platform capabilities.

Lead technical presales engagements for Microsoft security solutions, including Entra, Purview, Defender, and Sentinel. Deliver discovery sessions, demonstrations, whiteboarding, solution designs, and proof-of-concept efforts. Build competitive strategies, resolve technical blockers, guide customer decisions, collaborate with partners and deployment teams, and help existing customers optimize security product usage. Embed governance, security, and compliance into customer engagements while quantifying business value and supporting sales targets.

Designs, implements, and optimizes enterprise, cloud, and operational security controls. Responsibilities include managing firewalls, SIEM, EDR, SOAR, IAM, vulnerability assessments, penetration testing, incident response, security monitoring, architecture documentation, compliance alignment, and remediation support. The role collaborates with IT, DevOps, and security teams to improve detection, response, resilience, and audit readiness.