Top Remote Senior Level Cybersecurity Jobs in CO

Lead enterprise eDiscovery and insider-risk investigations by collecting, preserving, analyzing, and reviewing data from cloud infrastructure, endpoints, and repositories. Build AI-powered automation, correlate activity logs into investigative timelines, manage legal holds and governance policies, support digital forensics, and produce structured evidence packages for Security, Legal, HR, and investigative teams.

Administer and improve Workday and multi-platform HR security, including role-based access, security groups, access reviews, request approvals, audit support, governance documentation, and compliance controls. Evaluate elevated access requests, identify risks, resolve routine issues, coordinate remediation, and escalate complex decisions. Partner with HR, IT, Legal, and Compliance stakeholders to strengthen policies, processes, and least-privilege access across Workday, Peakon, UKG, Prism, and HR data platforms.

Build and scale backend security platform services, including authentication, authorization, identity infrastructure, permission systems, and data models. Lead cross-team technical initiatives, standardize security solutions, collaborate with compliance and mission stakeholders, and influence architecture and engineering standards. The role requires strong system design, backend development, security expertise, technical leadership, and the ability to operate in sensitive environments.

Lead complex security investigations across endpoint, identity, cloud, email, SaaS, and network environments. Own incidents through containment, remediation coordination, documentation, and post-incident review. Tune detections, queries, dashboards, workflows, and SOAR playbooks; improve SOC metrics, threat coverage, alert fidelity, and response processes. Partner on vulnerability and cloud-risk remediation, participate in global on-call rotation, use approved AI capabilities responsibly, and mentor analysts.

Own attack surface management across cloud, SaaS, APIs, domains, and internal assets. Automate discovery, attribution, vulnerability analysis, threat-informed prioritization, remediation workflows, and continuous validation through BAS and purple teaming. Partner with engineering, IT, cloud, offensive, and defensive security teams to reduce exposure, improve detection, enforce remediation SLAs, and mature ASM capabilities. Mentor junior analysts and shape tooling, policies, metrics, and security roadmaps.

Leads the company’s information security operations and reports to the CISO. Oversees SIEM, threat detection, vulnerability management, penetration testing, incident response, SOC 2 Type II compliance, third-party risk, security awareness, cloud and endpoint security, and regulatory cybersecurity coordination. Manages security policies, breach readiness, tabletop exercises, KPIs, audits, and emerging technology evaluations while partnering with IT, infrastructure, compliance, regulators, and executive leadership.

Own the multi-year technical strategy and architecture for Coinbase’s enterprise IAM platform spanning human, AI agent, service, and workload identities. Drive adoption across 700+ systems, establish authentication and authorization standards, lead migrations and build-versus-buy decisions, automate audit and regulatory controls, reduce standing privilege, and mentor senior engineering talent. Partner across Security, Compliance, IT, Infrastructure, and product teams while influencing technical direction without direct authority.

Engineer AI-powered threat detections, automated response playbooks, and continuous adversary emulation. Apply machine learning and LLMs to security operations, conduct threat hunting and AI red teaming, map coverage to MITRE ATT&CK, and develop detection-as-code through CI/CD. Build production-grade Python integrations, measurable containment capabilities, and safe autonomous defenses with guardrails. Mentor security professionals and collaborate across threat response, cyber defense engineering, and platform teams.

Own day-to-day IT and information security operations for a fully remote Mac fleet. Responsibilities include endpoint lifecycle management, identity and access administration, Google Workspace, helpdesk support, asset coordination, CrowdStrike EDR monitoring, DLP controls, Datadog SIEM alerting, security hygiene, access reviews, and SOC 2 and PCI evidence collection. The role requires autonomous ownership, automation, clear documentation, cross-functional collaboration, and approximately 4–6 years of experience beyond ticket-only support.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.