Top Remote Senior Level Cybersecurity Jobs in CO

Lead cloud security strategy and hands-on execution across AWS environments. Own CNAPP and CSPM capabilities, improve IAM and container security, build infrastructure-as-code guardrails, conduct architecture reviews and threat modeling, support detection and incident response, and drive remediation programs. Establish a multi-year cloud security roadmap, influence engineering priorities, mentor teammates, and partner with platform, infrastructure, SOC, and product engineering teams.

Define and own the technical vision, product strategy, roadmap, data strategy, and AI integration for CrowdStrike’s Next-Gen SIEM and log management products. Translate customer, market, and threat intelligence into shipped capabilities; lead cross-platform integration across endpoint, cloud, identity, and exposure products; and articulate the platform consolidation narrative. Engage executives, customers, analysts, sales, engineering, and product teams while driving detection, investigation, response automation, and cybersecurity thought leadership.

Leads complex, high-severity cybersecurity investigations across endpoint, identity, email, network, and cloud environments. Performs forensic, malware, network, and threat analysis; develops remediation plans; investigates Microsoft 365 attacks; and improves detection and response through automation. Mentors analysts, creates training and SOP content, manages customer escalations, and represents CrowdStrike through thought leadership and external engagements.

Manage and enhance identity infrastructure operations in CrowdStrike’s federal cloud environments. Responsibilities include identity provider operations, application lifecycle management, access troubleshooting, security control compliance, automation, monitoring, alerting, tier 2/3 support, root cause analysis, stakeholder communication, and on-call support. The role focuses on IAM security, scalability, FedRAMP and DoD requirements, and collaboration with Engineering and IT teams.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, and support security reviews before production. Communicate vulnerabilities, risks, and remediation priorities to engineering teams while helping establish the company’s application and AI security testing standards.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Manage a global 24/7 Security Operations Center, including analyst leadership, shift coverage, operational processes, quality assurance, training, and career development. Improve workflows, playbooks, and service-level performance while collaborating with Product, Support, Tactical Response, Threat Hunting, and Detection Engineering teams. Lead initiatives, track security operations objectives, operationalize new services, and communicate technical concepts to internal stakeholders and external audiences.

Designs, implements, and governs secure AWS, Azure, and GCP cloud architectures across IaaS, PaaS, and SaaS environments. Defines security standards, IAM strategies, network controls, and guardrails; leads cloud security reviews, threat modeling, and risk assessments; integrates security into DevOps and CI/CD workflows; evaluates security tooling; supports compliance; and mentors engineering teams. The role also drives cloud security posture improvements, documentation, remediation, and long-term security architecture maturity.

Lead design, deployment, and scaling of enterprise DLP across cloud, endpoint, SaaS, and network with a focus on AI-driven automation. Build automated classification, remediation, and workflows, integrate DLP with SIEM/SOAR/identity/cloud, develop policies for regulatory compliance, mentor engineers, and present program insights to leadership.

The Security Operations Engineer will build and manage cloud and enterprise security detections, lead incident response and threat hunting, automate security operations with SOAR playbooks, and maintain security telemetry pipelines. The role also involves vulnerability remediation, cloud architecture security reviews, cross-functional collaboration, on-call participation, and continuous improvement of runbooks and alert quality. Candidates need strong AWS security, SIEM, incident response, detection engineering, scripting, attacker tradecraft, and compliance framework experience.

Leads Apollo’s detection and response strategy while remaining hands-on with detection engineering, security observability, threat hunting, response automation, and incident investigations. The role owns detection architecture, telemetry coverage, incident response readiness, playbooks, tabletop exercises, and performance metrics. It leads high-severity incidents across cloud, SaaS, and corporate systems, mentors engineers, partners with technical and business teams, and establishes AI-assisted security workflows using human oversight.

Leads and matures the third-party risk management program across cybersecurity, privacy, and AI governance. Conducts vendor risk assessments, evaluates data protection and AI practices, manages onboarding through offboarding, monitors continuous and Nth-party risk, tracks remediation, reviews contract terms, supports audits, and maintains governance reporting. Partners with Legal, Privacy, Security, Procurement, AI Governance, and business teams to improve workflows, communicate risks, and develop scalable assessment processes.