Top Remote Senior Level Cybersecurity Jobs in CO

Own the information security risk register, risk assessments, vendor risk reviews, risk exceptions, security findings remediation, compliance training, policies, and governance reporting. Partner with engineering and company leaders to enforce remediation and strengthen the control environment. Scale GRC through AI, scripting, and automation while supporting HIPAA, SOC 2, ISO 27001, and HITRUST compliance.

Lead and mature the enterprise GRC program, managing governance, risk, compliance frameworks, audits, customer assurance, third-party risk, access compliance, and executive reporting. Administer GRC platforms, oversee HITRUST, HIPAA, and ISO 27001 readiness, support contractual security reviews, and partner across Security, Engineering, Legal, Sales, and Customer Success. Build scalable processes, develop the GRC function, manage assessors, and improve security trust and operational maturity.

Analyze, curate, prioritize, and enrich vulnerability data from CVEs, NVD, CISA KEV, vendor advisories, and other sources for operational technology environments. Map vulnerabilities to products, firmware, and assets; create actionable advisories and mitigation guidance; identify coverage gaps; maintain product catalogs; mentor junior analysts; and collaborate with engineering on content workflows and quality improvements.

Deploys, configures, optimizes, and supports the CrowdStrike Falcon platform and related applications for enterprise customers. Responsibilities include troubleshooting, software deployment engineering, API scripting, integrations, vulnerability and asset management support, incident response deployment assistance, customer project planning, technical workshops, mentoring, and collaboration with customer IT and internal services teams. Travel may reach 25%.

Perform red team engagements, penetration tests, adversary emulation, and threat actor simulations across operating systems, applications, databases, and networks. Plan and execute assessments, identify vulnerabilities, produce executive and technical reports, provide security recommendations, and support customers during crisis scenarios. Collaborate with leadership and technical teams, improve information security programs, operate with an OPSEC mindset, and use automation, scripting, and AI technologies to enhance assessment effectiveness.

Leads Motive’s global security compliance, privacy, risk, audit, customer trust, and AI governance functions. Builds integrated controls across ISO, SOC, PCI DSS, FedRAMP, GDPR, and related frameworks; manages audits, privacy operations, international regulatory readiness, customer security reviews, policies, training, and human risk. The role also establishes AI-first automation, AI governance, and a path to FedRAMP while leading a distributed team and partnering across Legal, Engineering, Product, IT, Finance, Sales, and Customer Success.

Build and refine security detections, logging, telemetry, SIEM pipelines, and incident response capabilities across cloud, corporate, and SaaS environments. Conduct threat hunting, threat modeling, alert triage, and response engineering. Develop automation and AI-assisted security tooling, maintain runbooks and documentation, participate in on-call rotations, and collaborate with engineering and business teams on security initiatives.

Build and operate central security systems, automation, tooling, and controls across cloud infrastructure, identity, access, products, partners, and vendors. Develop AI-assisted security workflows, lead external assessments through verified remediation, identify and validate vulnerabilities, guide engineering teams, and participate in incident response. The role requires production security engineering experience, strong programming skills, cloud security expertise, and fintech, payments, or crypto experience.

Leads technical compliance and federal authorization programs for MongoDB’s public-sector cloud products. Responsibilities include managing FedRAMP High, DoD IL5+, CJIS, and ITAR assessments; coordinating auditors, 3PAOs, agencies, and engineering teams; maintaining continuous monitoring, POA&Ms, security plans, evidence, dashboards, and remediation workflows; mapping NIST controls; advising on cloud security configurations; and mentoring stakeholders. The role requires deep public-sector GRC expertise, strong communication, and the ability to manage complex audits through Authorization to Operate.

Conduct application security assessments, threat modeling, code reviews, and manual penetration testing across web applications, APIs, cloud services, appliances, and AI-enabled features. Coordinate external penetration tests, validate vulnerabilities, track remediation, and verify fixes. Improve SAST, SCA, secrets detection, container scanning, SBOM, supply-chain, and CI/CD security workflows while advising Engineering on secure design and risk prioritization.

Lead product marketing for cloud data protection: define strategy and positioning, run GTM launches and campaigns, produce content and sales enablement, manage competitive and analyst relations, and partner cross-functionally to drive revenue, adoption, and market awareness.