Top Remote Senior Level Cybersecurity Jobs in CO

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Designs enterprise-scale Identity Credential and Access Management architectures, translating user and enterprise needs into functional and technical requirements. Develops system designs, diagrams, integrations, authentication and authorization controls, segregation-of-duties solutions, and privileged access management. Ensures compliance with open systems architecture standards and common operating environment requirements while evaluating workflows and corrective actions. Requires five years of systems architecture experience, five years of ICAM implementation experience, an active Security+ or equivalent IAT Level II certification, relevant technical certification, and an active DoD Secret clearance.

Provides hands-on engineering support for integrating Identity and Credential Access Management requirements into enterprise systems and applications. Conducts technical research, ensures hardware, operating systems, software, and procedures comply with ICAM requirements, and documents specifications, configurations, project plans, testing, and results. Communicates complex technical designs and project status to varied audiences. Requires five years of engineering and ICAM integration experience, active Security+ or equivalent certification, relevant technical certification, and an active DoD Secret clearance.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Leads cybersecurity consulting across the customer lifecycle, supporting presales demonstrations, proof-of-concepts, executive reviews, cyber skills programs, crisis simulations, and platform adoption. Advises strategic customers on cyber resilience, risk measurement, security initiatives, and program roadmaps. Partners with sales, product, content, and engineering teams while serving as a trusted embedded advisor and escalation point.

Serve as a senior cybersecurity advisor throughout the customer lifecycle, partnering with sales and strategic customers on solution demonstrations, proof-of-concepts, executive reviews, cyber skills programs, crisis simulations, and workforce resilience roadmaps. Drive platform adoption, measure organizational risk, operationalize customer programs, provide executive insights, and influence product innovation. The role is remote on the West Coast with regional client travel.

Develop and validate high-fidelity threat detections and asset-identification analytics for industrial control system environments. Analyze threat intelligence, packet captures, host logs, network and device artifacts, and large datasets to identify adversary behaviors. Mentor detection engineers, review and triage detection requests, document analytics processes, and partner with engineering and quality teams to address platform gaps. Support ICS cyber-range activities and contribute to detection testing, tuning, and knowledge-base maintenance.

Lead second-line technology and security risk advisory coverage across critical domains, evaluating risk exposure, control effectiveness, policy alignment, and emerging issues. Partner with engineering and security teams to improve control design and risk outcomes, coordinate remediation across risk and audit functions, communicate risk tradeoffs, and manage and coach technology risk analysts.

Conduct advanced OSINT and operational tradecraft to collect, track, and report on hacktivist and state-sponsored threat actor activity across South Asia, Latin America, and North Africa. Produce contextual internal reports, collaborate on analytical products, and employ secure methods to support threat intelligence operations.

Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.

Serves as a technical security advisor during enterprise sales cycles, partnering with Account Executives and customers to uncover security requirements, design solutions, conduct demonstrations, and execute proofs of concept. Advises on data protection, DLP, data governance, DSPM, CASB, IAM, Zero Trust, compliance, and security integrations. Engages stakeholders from practitioners to executives and translates security risks into architectures, controls, workflows, and measurable business outcomes. Portuguese and English fluency is required, with domestic and international travel up to 20%.

Leads SailPoint’s compliance and audit program across SOC 2, ISO 27001, FedRAMP, C5, and related frameworks. Manages and develops compliance professionals, oversees concurrent audits and questionnaires, improves processes through automation, evaluates emerging obligations, and integrates compliance into business processes. Serves as the subject matter expert and primary liaison for leadership, cross-functional teams, customers, external auditors, and certification bodies.