Top Remote Senior Level Cybersecurity Jobs in CO

Lead product operations for Falcon Complete by integrating new features, driving technical and process optimizations, leading cross-functional projects, managing Agile workflows, defining metrics and governance, documenting technical specifications, and collaborating with product and engineering to ensure seamless operational integration and adoption.

Embedded technical advisor who partners with strategic customers to plan, deploy, optimize, and support Next-Gen SIEM environments. Responsibilities include data ingestion, detection engineering, dashboarding, migrations from legacy SIEMs, troubleshooting, health checks, automation, and customer enablement through mentoring and training.

Lead program management for bespoke, high-touch Tailored Solutions that translate strategic customer needs into repeatable, scalable platform growth. Advise executives, coordinate cross-functional teams, influence core engineering and GTM roadmaps, design experiments to drive ARR growth, and apply AI to improve decision-making and workflows for strategic global accounts.

Lead GitLab’s Security Posture Management team within Product Security. Drive governed security capability rollouts across the software estate, establish secure configuration baselines, build software supply chain security, manage risk registers and posture metrics, support audit evidence, and provide customer-zero feedback to Product and Engineering. Hire, coach, and develop the team while representing GitLab’s security practices externally and driving measurable risk reduction in a remote, asynchronous environment.

Lead and grow a security engineering team to design and operate cloud-native security controls, drive DevSecOps practices, conduct threat modeling and incident response, partner cross-functionally on security roadmaps, and ensure compliance with frameworks (NIST, SOC 2, ISO, etc.). Responsible for vulnerability management, identity and access controls, observability/SIEM, and security automation.

Leads Forward’s application and product security program, including a team of senior engineers, penetration testing, vulnerability remediation, secure SDLC practices, and AI security. Owns testing standards, remediation workflows, exposure controls, pre-production security reviews, and security services. Partners with Engineering and executives to communicate risk and priorities while securing web applications, APIs, cloud infrastructure, and AI-built software.

Lead application security engineering across the SDLC using AI-assisted threat modeling, automated security testing, vulnerability prioritization, and secure-by-default controls. Partner with Engineering, Product, QA, DevOps, and AI platform teams to secure applications, APIs, cloud infrastructure, data, and AI/ML systems. Build security automation, CI/CD controls, policy-as-code guardrails, developer enablement, and proactive defenses against emerging threats such as prompt injection and data poisoning.

Design, implement, and support enterprise identity and access management using Microsoft Entra. Build controls for Conditional Access, MFA, identity governance, privileged access, authentication modernization, and Zero Trust. Develop PowerShell automation for identity lifecycle and governance, partner with technical and business teams, improve security operations, and mentor engineers. The role also includes on-call participation and occasional after-hours work.

Execute advanced red team and purple team operations across on-premises, cloud, SaaS, hybrid, and AI-enabled environments. Responsibilities include adversary emulation, exploitation, identity abuse, privilege escalation, lateral movement, persistence, command and control, data exfiltration, AI security testing, detection validation, tooling development, reporting, and remediation tracking. Collaborate with Blue Team, Detection Engineering, Threat Intelligence, and Incident Response to improve detection, response, and overall security posture.

Leads cybersecurity compliance and AI governance across NIST, CMMC, EAR, and ITAR frameworks. Maintains SSPs, POA&Ms, audit evidence, risk assessments, and compliance policies; evaluates AI vendors and use cases; embeds guardrails, access controls, data classification, logging, and review gates into LLM, MLOps, and DevSecOps workflows. Partners with engineering, security, legal, assessors, and government stakeholders to mature organizational compliance and responsible AI practices.

Build and operate security log pipelines, SIEM detections, endpoint controls, security automation, and internal tooling across AWS, macOS, Windows, CI/CD, and infrastructure repositories. Develop primarily in Python, implement Terraform-based infrastructure and policy-as-code safeguards, integrate security tools through APIs, and embed scanning and secrets detection into developer workflows. Own the reliability and coverage of security platforms while independently driving projects and implementing fixes directly in systems managed by other teams.

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.

Staff Security Engineer partners with Product, Engineering, and DevOps to embed security into application architecture, cloud infrastructure, and CI/CD processes. Responsibilities include secure design and code review, vulnerability remediation, AWS cloud security, WAF tuning, security automation in Python, SIEM and log pipeline contributions, endpoint controls, and security standards. The role requires deep expertise in application security, cloud security, or security automation, plus threat modeling and independent project ownership.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.