Top Tech Jobs & Startup Jobs in Denver & Boulder, CO

Leads cybersecurity incident response and recovery engagements, coordinating teams, resources, timelines, containment, remediation, forensic investigations, threat hunting, and infrastructure recovery. Serves as the primary liaison among technical, legal, compliance, executive, and external stakeholders during security crises. Develops playbooks, improves SIEM and monitoring strategies, produces incident reports, advises on risk mitigation, and mentors junior incident response and forensic personnel.

Serves as a Tier 1 Network Operations Center responder for a federal enterprise network spanning approximately 50 sites. Responsibilities include ticket triage and ownership in ServiceNow, connectivity diagnostics, switch port resets, alarm monitoring, SLA-based escalation, stakeholder updates, service request processing, documentation, topology and asset inventory maintenance, and support for Cisco, firewall, and enterprise network infrastructure. The role also contributes to monitoring configuration, reporting, and knowledge-base development.

Leads Tier 3 cybersecurity incident response across a 24x7x365 function. Coordinates containment, remediation, recovery, investigations, stakeholders, and communications during complex incidents such as breaches and ransomware attacks. Performs advanced triage, threat analysis, log and endpoint analysis, digital forensics coordination, incident tracking, executive reporting, and post-incident reviews. Uses Splunk, Microsoft Defender, Cortex XSOAR, and related security tools while ensuring compliance with federal requirements and cybersecurity policies.

Develops competitive federal proposal cost volumes, pricing models, rate structures, BOEs, and price-to-win strategies. Ensures compliance with FAR, DFARS, CAS, TINA, and solicitation requirements across major contract types. Manages subcontractor and teaming partner pricing intake, conducts cost realism and price analysis, supports audits and negotiations, and coordinates with cross-functional teams under tight proposal deadlines. Improves pricing tools and methodologies while supporting contract administration, forecasting, and financial analysis.

Monitor and investigate security events in a 24x7x365 cybersecurity operations center. Perform Tier 2 incident triage, incident response analysis, threat hunting, log and forensic analysis, remediation coordination, and investigation tracking through closure. Serve as an incident management coordinator, assign tasks, communicate with stakeholders and federal leadership, produce required reports, and guide analysts during active incidents. Maintain compliance with federal reporting procedures and develop defensive cybersecurity practices.

Designs, implements, administers, and optimizes Cribl and Splunk data ingestion pipelines for cybersecurity environments. Responsibilities include configuring secure data inputs, managing log storage, monitoring tool health, troubleshooting incidents, performing upgrades, supporting access controls, conducting root-cause analysis, and collaborating with SOC teams on tool tuning, integrations, documentation, and incident response. The role focuses on secure, high-volume data processing, compliance with OMB M-26-14, performance optimization, and cost efficiency.

Designs, implements, and maintains Splunk data ingestion pipelines, integrations, alerts, infrastructure, and security controls across on-premises and cloud environments. Manages system performance, upgrades, access controls, troubleshooting, root cause analysis, documentation, and cybersecurity tool integrations. Collaborates with SOC teams to optimize processes, tune tools, support incident response, and ensure data integrity, compliance, and reliable high-volume data processing.

Provides security engineering and architecture expertise for FedRAMP Cloud Service Provider assessments. Reviews full-stack architectures, authorization packages, security controls, policies, assessment reports, vulnerability scans, and penetration tests for compliance with FedRAMP, NIST, FISMA, RMF, and agency requirements. Leads vendor interviews, identifies technical and documentation gaps, supports continuous monitoring, advises government program leaders and CISOs, and provides security recommendations for cloud systems.

Provides Tier III SOC support through advanced SIEM alert triage, forensic analysis, incident escalation, threat hunting, detection engineering, and malware investigation. Leads shift handovers, monitors security tool health, updates playbooks and procedures, supports Red and Purple Team exercises, prepares incident reports, mentors junior analysts, and collaborates with government and partner SOCs. Requires six or more years of SOC experience, cybersecurity certifications, AWS security telemetry expertise, and a Public Trust clearance.

Leads training, user readiness, onboarding, functional support, knowledge management, and adoption for the AirHub platform implementation. Develops role-based curricula, guides, videos, FAQs, and support processes; delivers instructor-led, virtual, and self-service training; supports UAT, Beta, production rollout, and hypercare; manages issue triage and escalation; and monitors readiness, support, training effectiveness, feedback, and adoption metrics.