Top Remote Security Engineer Jobs in Denver & Boulder, CO

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead AI security strategy and guardrails, design and review AI gateways and tooling, scale InfoSec review processes, reduce AI-driven security noise, drive remediation and investigations, and mentor security and platform engineers.

Design and implement multitenant workload and network isolation for bare-metal and virtualized GPU infrastructure. Harden Linux kernel and container runtimes, perform threat modeling and penetration testing, write low-level security code (C/Go/Rust), mitigate GPU and PCIe security risks, and lead incident response and forensic work for ephemeral container environments.

Secure customer-facing products, APIs, and internal services through threat modeling, architecture and code reviews. Remediate vulnerabilities by coding fixes in Python/Go/JS/TS. Build and manage SAST/DAST/SCA security pipelines in CI/CD. Configure WAFs, API gateways, and bot protection. Provide secure coding guidance, run bug bounty triage, and support compliance (SOC 2, ISO 27001, GDPR).

Manage and improve vulnerability management, asset visibility, and cloud security across hybrid and multi-cloud environments. Operate tools (Wiz, Rapid7), maintain asset inventories, triage and track vulnerabilities, coordinate remediation with Engineering/SRE/IT, support incident investigations and on-call rotation, maintain compliance evidence and runbooks, and contribute to program improvements and reporting.

As a Sr. Product Security Engineer, you will focus on network security, identifying gaps, architecting solutions, and leading cross-functional security initiatives.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

The Staff Product Security Engineer will enhance security in product development, conduct threat modeling, review code, automate processes, and advise on security requirements.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

As a Product Security Engineer, you'll develop secure tools for engineering teams, conduct security reviews, and automate security processes to enhance Cedar's healthcare technology solutions.

The Security Engineer will design, build, and enhance security tools and frameworks, analyze security challenges, and contribute to AI/ML security research. Responsibilities include software development, security code review, and technical communication.

As a Security Engineer, you will conduct security assessments, develop security tools, perform architecture reviews, and collaborate on advanced security research.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

The Senior Embedded Security Engineer will enhance the security of the flight software for space vehicles, ensuring high standards for safety and secure coding practices throughout the development lifecycle.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Lead product security work across Vercel: threat modeling, secure code reviews, open-source and supply-chain security, SDLC tooling and automation, bug bounty triage, cross-team security projects, and customer-facing security support to embed security across development and platform operations.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Perform hands-on application and system security assessments: discover and validate vulnerabilities, develop proof-of-concepts and custom tooling, conduct threat modeling and architecture reviews, and communicate clear remediation guidance to clients while contributing to security research.

Partner with engineering, compliance, and security teams to embed application security into the SDLC: triage static/SCA alerts, advise on OWASP Top 10 remediation, maintain developer playbooks and training, track security metrics and evidence for audits, and help shape AI governance and GenAI-safe workflows.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.