Top Remote Senior Level Cybersecurity Jobs in CO

Lead design, deployment, and scaling of enterprise DLP across cloud, endpoint, SaaS, and network with a focus on AI-driven automation. Build automated classification, remediation, and workflows, integrate DLP with SIEM/SOAR/identity/cloud, develop policies for regulatory compliance, mentor engineers, and present program insights to leadership.

Lead automation and orchestration for enterprise Vulnerability Management. Build integrations and data pipelines across security tools, cloud, and ServiceNow; automate intake, prioritization, remediation tracking, and reporting; optimize workflows, dashboards, and asset correlation; collaborate with engineering and cloud teams to scale risk-based remediation and improve data quality.

Lead and own the enterprise SSPM program: implement and manage SSPM platform, onboard SaaS apps, tune controls, integrate with SIEM/SOAR/ITSM/identity, perform threat modeling and risk assessments, drive remediation, support compliance mapping, report metrics, and partner across cyber, IT, risk, and business teams to reduce data exposure and improve SaaS security posture.

The Security Operations Engineer will build and manage cloud and enterprise security detections, lead incident response and threat hunting, automate security operations with SOAR playbooks, and maintain security telemetry pipelines. The role also involves vulnerability remediation, cloud architecture security reviews, cross-functional collaboration, on-call participation, and continuous improvement of runbooks and alert quality. Candidates need strong AWS security, SIEM, incident response, detection engineering, scripting, attacker tradecraft, and compliance framework experience.

Leads Apollo’s detection and response strategy while remaining hands-on with detection engineering, security observability, threat hunting, response automation, and incident investigations. The role owns detection architecture, telemetry coverage, incident response readiness, playbooks, tabletop exercises, and performance metrics. It leads high-severity incidents across cloud, SaaS, and corporate systems, mentors engineers, partners with technical and business teams, and establishes AI-assisted security workflows using human oversight.

Leads and matures the third-party risk management program across cybersecurity, privacy, and AI governance. Conducts vendor risk assessments, evaluates data protection and AI practices, manages onboarding through offboarding, monitors continuous and Nth-party risk, tracks remediation, reviews contract terms, supports audits, and maintains governance reporting. Partners with Legal, Privacy, Security, Procurement, AI Governance, and business teams to improve workflows, communicate risks, and develop scalable assessment processes.

Provides second-line support for complex security and network issues, partnering with Engineering to troubleshoot, reproduce, and resolve customer problems. Documents incidents, manages enterprise escalations, analyzes packet captures and HAR traces, and provides product feedback. Develops training programs and mentors support engineers while advising on product and code improvements. Requires extensive web security, networking, and cloud knowledge, plus experience with SSL, SAML, HTTP, TCP/IP, VPNs, SD-WAN, and related technologies.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Own Cleo’s application and product security program across SaaS and customer-hosted products. Lead SSDLC practices, threat modeling, security tooling, vulnerability management, penetration testing, coordinated disclosure, CVE publication, and NIST CSF controls. Define product security standards, roadmap, secure defaults, access controls, and customer-facing advisories. Partner with engineering, product, architecture, and customers while guiding security engineers and consultants. Also establish protections for LLM applications, AI agents, and AI-assisted development workflows.

Designs, implements, and operates enterprise IAM solutions across Entra ID, Active Directory, cloud, SaaS, and data centers. Manages SSO, MFA, PAM, PIM, RBAC, identity governance, lifecycle controls, provisioning automation, third-party access, and non-human identities. Troubleshoots authentication and federation issues, supports identity-threat investigations, maintains technical documentation, and contributes to audit and compliance activities.

Leads NinjaOne’s FedRAMP High and Moderate compliance program, including authorization, continuous monitoring, audits, control testing, POA&M management, vulnerability remediation, documentation, and assessor coordination. Partners with engineering and federal stakeholders to implement controls, maintain evidence, manage cloud security dependencies, track regulatory changes, and automate compliance workflows. Provides FedRAMP subject matter expertise to internal teams, customers, and prospects while improving audit efficiency and evidence quality.

Lead product strategy, roadmap, and delivery for Falcon Complete’s internal MDR tooling, including AI-powered investigation and triage, ticketing, case management, and analyst workbench systems. Partner with security operations, analysts, engineering, and data science teams to translate workflows into product requirements, prioritize automation, improve analyst productivity and response times, define success metrics, and enhance customer outcomes.