Top Remote Security Engineer Jobs in Denver & Boulder, CO

Operate application security across the SDLC, including secure design, code reviews, threat modeling, API security, DevSecOps tooling, CI/CD security gates, cloud and container security, vulnerability management, and risk communication. Partner with engineering teams on secure coding standards, AWS, Kubernetes, Terraform, mobile ecosystems, and responsible AI integration. Participate in an on-call rotation and develop scalable security platforms, paved roads, documentation, and developer training.

Lead insider risk detection engineering and investigations using EDR/XDR, UEBA, SIEM, and SOAR tools. Refine detection rules, reduce alert noise, close coverage gaps, manage investigations, develop playbooks, document evidence, mentor analysts, and collaborate discreetly with HR, Legal, business leaders, and executives. The role also requires investigative workflow automation using Python or JavaScript and ownership of scalable security processes.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.

Assess product and application architectures, develop threat models, identify security risks, and guide engineering teams on remediation. Promote security culture through training, mentoring, vulnerability management, and internal security initiatives. Build security tooling, automation, patterns, and workflows that embed secure-by-design practices across engineering. Partner with product managers, designers, and engineers to secure complex, large-scale cloud systems.

Protect corporate data through DLP implementation, tuning, alert review, false-positive reduction, and control optimization across web, endpoint, email, cloud, and SaaS environments. The engineer will review data protection programs, improve monitoring and blocking controls, collaborate with business partners, and use automation and emerging AI tools to strengthen security operations.

Lead Affirm’s enterprise AI security review program, threat model LLM and agentic systems, review code and configurations, and develop security guardrails, tooling, policies, and monitoring. Evaluate AI-enabled SaaS vendors, identify emerging vulnerabilities, support incident response, and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance. The role requires expertise in AI security architecture, threat modeling, IAM, cloud infrastructure, policy-as-code, and regulated enterprise environments.

Partners with engineering teams to identify and remediate product security risks across the software development lifecycle. Responsibilities include threat modeling, secure architecture and coding guidance, security testing, vulnerability prioritization, penetration testing coordination, bug bounty remediation, application monitoring, developer training, and secure deployment practices. The role also advances AI-assisted security tooling, DevSecOps practices, security champions, Kubernetes and container security, and scalable risk-based remediation frameworks.

Own and improve vulnerability management across cloud, on-premises, network, and endpoint environments. Responsibilities include scanning, triage, risk-based prioritization, remediation coordination, SLA tracking, exception management, closure validation, asset reconciliation, reporting, incident support, on-call participation, and audit documentation. The role partners with Engineering, SRE, IT, and Infrastructure teams and uses security tooling and AI-assisted workflows to reduce exposure and recurring vulnerabilities.

Monitor emerging vulnerabilities, assess exploitability and business risk, prioritize remediation, and develop vulnerability intelligence frameworks. Implement asset detection and monitoring across cloud and data-center environments, maintain vulnerability management KPIs, communicate security posture to technical and executive stakeholders, use CrowdStrike Falcon capabilities, and build security tooling. The role requires scripting, threat intelligence research, cloud and Linux experience, cross-functional collaboration, and AI-enabled workflow improvements.

Lead infrastructure security for GitLab’s FedRAMP and federal cloud environments. Set technical direction, architecture, security automation, and compliance patterns; own security posture; lead threat modeling, security reviews, continuous monitoring, and authorization-impacting initiatives. Partner with SRE, engineering, compliance, and leadership to drive remediation and roadmap decisions. Apply AI to constrained security workflows, mentor engineers, and influence security practices across GitLab offerings.

Leads the architecture, modernization, resilience, security, and performance optimization of enterprise mainframe environments. Responsibilities include z/OS performance tuning, WLM and RACF administration, business continuity planning, automation, technical governance, incident resolution, stakeholder collaboration, and guidance of cross-functional engineering and operations teams. The role also evaluates cloud, DevOps, AI, and hybrid IT technologies for mainframe transformation.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Partner with sales teams to win strategic data security opportunities. Present technical solutions, gather customer requirements, lead product evaluations, configure solutions, and design evaluation test plans. The role requires extensive pre-sales experience, security and networking expertise, data protection and web technology knowledge, and collaboration across matrixed go-to-market and partner teams.

The Senior Security Engineer will secure networks, systems, applications, databases, and cloud infrastructure; embed security controls into build pipelines; manage vulnerabilities and remediation; respond to incidents through on-call rotation; and promote security awareness across engineering. The role requires cloud security, infrastructure-as-code, application security, REST API protection, IAM, and tools including AWS, Kubernetes, Terraform, Wiz, Exaforce, and CrowdStrike.

Designs and operates controlled cyber-capability evaluations for frontier AI models and agentic systems. Builds vulnerable applications, cyber ranges, exploit-development targets, and evaluation harnesses; runs experiments; collects telemetry; analyzes model behavior and evaluation artifacts; and documents security findings. The role also develops sandboxing, containment, access, and secrets-management controls while collaborating with red-team operators, researchers, engineers, and Responsible AI stakeholders.

Implements and maintains security technologies across endpoint, network, cloud, server, and mobile environments. Monitors alerts, investigates incidents, performs vulnerability assessments, develops detection rules, hardens systems, supports identity and access controls, automates security tasks, and coordinates remediation. The role also supports audits, security reviews, documentation, reporting, and continuous improvement while collaborating with IT and security teams.

Supports cybersecurity operations, incident response, vulnerability management, remediation tracking, security project execution, governance, compliance, reporting, and dashboard development. The role coordinates with technical and business stakeholders to investigate alerts, validate remediation, support audits, maintain security documentation, and improve security processes. Requires at least three years of relevant technical or information security experience, with preferred experience in CrowdStrike, Zscaler, Microsoft O365, SIEM, GRC, and security certifications.

Maintains security infrastructure, firewalls, PKI, access controls, vulnerability management, incident response, compliance documentation, and threat detection systems. Uses AI-powered SIEM, EDR, UEBA, and SOAR tools to automate security operations and identify emerging threats. Develops policies based on NIST, FISMA, PCI, PII, and CJIS requirements; performs risk assessments, system hardening, and security training. Collaborates with IT teams and evaluates AI/ML security, privacy, and supply chain risks.

Lead secure design and code reviews, conduct penetration testing and code audits, build secure-by-default systems, improve security tooling and vulnerability management, operate responsible disclosure programs, remediate production vulnerabilities, and address customer security concerns. The role partners closely with engineering teams and requires strong coding, risk assessment, offensive security, and security communication skills.

Provides security engineering and architecture expertise for FedRAMP authorization and continuous monitoring. Reviews cloud service provider architectures, security controls, authorization packages, assessment reports, vulnerabilities, and compliance documentation against NIST, FedRAMP, FISMA, RMF, and agency requirements. Leads vendor interviews, identifies technical and documentation gaps, advises government program leads and CISOs on risk posture, and supports secure, compliant, resilient system design.

Create challenging coding tasks for AI systems, implement deterministic solution verifiers, and contribute backend expertise across feature development, bug fixing, refactoring, performance optimization, testing, and security reviews. The role requires strong programming and software engineering skills, with cybersecurity experience in secure coding, application security, penetration testing, vulnerability assessment, or security-focused code reviews preferred.

Lead end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational environments. Develop offensive tooling, implants, and tradecraft; direct AI-driven autonomous agents; discover and exploit vulnerabilities; brief executive customers; provide defensive guidance; collaborate with threat intelligence and blue teams; establish operational standards; and mentor security operators.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Lead end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational security environments. Develop offensive tooling, implants, and AI-driven autonomous agents for reconnaissance, exploitation, and post-exploitation. Serve as a technical lead for customer engagements, brief security executives, collaborate with blue teams and threat intelligence organizations, establish operational standards, and mentor senior operators.