Denver, CO

Cybersecurity Jobs in Denver, CO

13 jobs found

Include remote jobs

23d ago

Staff Application Security Engineer – AI & Agentic Systems

CVS Health Denver, CO

Denver, CO

23d ago

$107k - $284k/yr Full time Agent Agentic Ai Ai Enabled Security

Apply Now

Job Description

Join CVS Health in a hands-on security role focused on protecting AI-enabled applications, LLM integrations, and agentic systems. This Staff Application Security Engineer position embeds security into design, development, and operations by partnering closely with engineering, product, platform, and data teams to shape secure patterns and practical guardrails across the enterprise.

Location: Denver, CO (onsite). Pay range: USD 106,605 - 284,280 per year, with eligibility for additional incentive and equity components.

What you’ll do

Develop and maintain application and AI security standards, best practices, and guardrails.
Promote secure-by-design principles across application and AI development lifecycles.
Establish secure design patterns for AI agents, prompt management, tool integrations, memory handling, and autonomous workflows.
Partner with engineering teams to identify and mitigate AI-specific risks including prompt injection, model abuse, data leakage, and unauthorized agent actions.
Serve as a subject matter expert for the security of AI-enabled applications and agentic systems.
Review and guide architectures using large language models, retrieval augmented generation (RAG) pipelines, AI agents, and AI-powered workflows.
Define and recommend controls for AI environments including identity, authorization, data protection, observability, and governance.
Conduct threat modeling, architecture reviews, and security assessments for applications and AI-enabled systems, including analysis of AI workflows, model integrations, agent interactions, and data flows.
Support remediation by partnering with engineering teams to prioritize and address security findings.
Evaluate emerging AI security tools and technologies to improve organizational security posture and influence engineering teams to integrate controls into development processes and product roadmaps.
Align with privacy, compliance, legal, and risk teams so security controls meet organizational requirements.
Support investigation and response efforts for application and AI-related security events, including identifying root causes and driving long-term improvements.
Mentor security engineers and development teams on secure coding, threat modeling, and AI security best practices.

What you’ll need

7+ years of experience designing, building, or securing enterprise-scale applications and platforms.
5+ years of application security experience, including threat modeling, secure design, code review, and vulnerability management.
5+ years programming experience in one or more of: Python, Java, JavaScript, C#, or Go.
3+ years developing or securing AI, machine learning, or generative AI solutions.
3+ years experience with public cloud platforms: AWS, Azure, or Google Cloud Platform.
Education: Bachelor’s degree from an accredited college or university, or equivalent combination of education and relevant work experience (High School Diploma/GED plus 4 years of related experience).

Bonus considerations (preferred)

Experience securing modern architectures such as APIs, containers, microservices, and serverless technologies.
Strong understanding of secure software development lifecycle practices and application security testing methodologies.
Hands-on experience securing AI agents, RAG solutions, and large language model integrations.
Experience conducting threat modeling and security assessments for AI-enabled systems.
Familiarity with responsible AI principles, AI governance, and emerging AI security frameworks.
Experience integrating security controls into CI/CD pipelines.
Knowledge of common compliance frameworks including PCI DSS, HIPAA, NIST, HITRUST, and CSA.
Ability to influence technical decisions across multiple teams and organizations.
Experience contributing to security research, open-source projects, or industry communities.

Technologies you’ll work with

Python, Java, JavaScript, C#, Go
AWS, Azure, Google Cloud Platform
Large language models, retrieval augmented generation, AI agents

CVS Health benefits

Comprehensive benefits package designed to support the physical, emotional, and financial well-being of colleagues and their families.
Medical, dental, and vision coverage (based on eligibility).
Paid time off (based on eligibility).
Retirement savings options (based on eligibility).
Wellness programs (based on eligibility).
Other resources (based on eligibility).

Compensation details

The typical pay range for this role is $106,605.00 - $284,280.00.
This position may be eligible for a CVS Health bonus, commission, or short-term incentive program in addition to the base pay range.
This position also includes an award target in the company’s equity award program.

View full job page →

23d ago

Intermediate Penetration Tester

Cyber Defense Technologies Denver, CO

Denver, CO

23d ago

$102k - $138k/yr Full time Information Security InfoSec Intermediate

Apply Now

Job Description

Join Cyber Defense Technologies (CDT) supporting a government customer onsite in Denver, CO. This Intermediate Penetration Tester role offers a comprehensive benefits package including health, dental, and retirement plans, along with professional development and career advancement opportunities. Compensation is competitive and based on experience, with a salary range of $102,000 - $138,000 per year.

Work is focused on applying established testing methodologies to reconnaissance, vulnerability scanning, and penetration activities. An active Top Secret/SCI with CI poly is required, and OSCP is highly recommended.

Responsibilities

Perform basic reconnaissance and vulnerability scanning following established testing methodologies.
Identify common vulnerabilities that may be exploitable, document findings, and report results.
Use basic scripting skills and apply knowledge of network fundamentals and vulnerability scanning tools.
Support more complex penetration tests by performing deeper vulnerability analysis, including misconfigurations and zero-day exploits, and improving exploitation techniques.
Lead penetration tests, mentor junior testers, and provide technical guidance to stakeholders.
Apply expertise across network protocols, application security, social engineering, and advanced scripting.

Requirements

Bachelor’s degree or higher and 3 years of Pen Tester experience.
Associate’s degree and 4 years of relevant work experience, or Bachelor’s degree and 3 years of relevant work experience, or Master’s degree and 2 years of relevant work experience.
Experience in cybersecurity with a focus on red teaming, penetration testing, or threat hunting.
Clearance: An active Top Secret/SCI with CI poly is required.
Certification: OSCP is highly recommended.

Compensation and Benefits

Salary range: $102,000 - $138,000 per year.
Benefits: Comprehensive benefits package including health, dental, and retirement plans.
Growth: Opportunities for professional development and career advancement.

View full job page →

23d ago

Junior Penetration Tester

Cyber Defense Technologies Denver, CO

Denver, CO

23d ago

$79k - $108k/yr Full time Information Security InfoSec Offensive Security

Apply Now

Job Description

Join a government-focused team onsite in Denver, Colorado to support penetration testing activities as a junior tester.

Responsibilities

Perform basic reconnaissance and vulnerability scanning following established testing methodologies
Identify common vulnerabilities that may be exploitable, then document and report findings
Use basic scripting abilities to support testing tasks
Apply an understanding of network fundamentals and vulnerability scanning tools

Requirements

Education and experience options:
- High School Diploma/GED + Associates Degree + 3 years of relevant work experience
- Bachelor’s Degree + 0-2 years of relevant work experience
Experience in cybersecurity with a focus on red teaming, penetration testing, or threat hunting
Active clearance requirement: Top Secret/SCI with CI poly

Clearance

Active Top Secret/SCI with CI poly is required
Candidates who do not meet the clearance requirement will not be considered

Benefits

Competitive salary based on experience (USD 79,000 - 108,000 per year)
Comprehensive benefits package, including health, dental, and retirement plans
Professional development and career advancement opportunities

Location and Work Setup

Denver, CO onsite

Certifications

OSCP certification is highly recommended

View full job page →

25d ago

Cloud Security Engineer

ArdentMills Denver, CO 🇺🇸 Remote

Denver, CO

25d ago

$140k - $200k/yr Full time Azure Azure Developer Associate Azure Functions

Apply Now

Job Description

ArdentMills is hiring a Cloud Security Engineer to design, implement, and operate security controls across Microsoft Azure environments, with possible expansion to other leading cloud platforms.

Responsibilities

Own the design and implementation of cloud landing zones, including identity and network controls (VPC/VNet, security groups/NSGs, private endpoints).
Configure and operate cloud-native security services, including Microsoft Defender for Cloud, Microsoft Sentinel, and Defender XDR.
Build posture management (CSPM) and workload protection (CWPP) using policy-as-code and automated remediation.
Implement key management, encryption at rest and in transit, and certificate governance using KMS/Key Vault/Cloud KMS.
Establish logging, telemetry, and alerting with Azure Monitor and integrate to SIEM/XDR; collaborate with IT and Security teams to test and validate detection coverage and maturity from cloud-native sources.
Harden serverless, containers, and managed services using baseline controls, including Functions, Logic Apps, Container Apps, AKS, and ACI.
Conduct threat modeling and security reviews for cloud architectures and application designs.
Partner with platform and product teams to deliver IaC guardrails, image baselines, and patch/vulnerability workflows.
Serve as a point of escalation for cloud incidents: perform triage and containment, drive post-incident improvements, and develop automation architecture to improve cloud detection and response.
Document standards and runbooks; run enablement sessions with dev and ops teams.
Design and support the cloud security strategy and program maturity.

Requirements

Bachelor’s in computer science/engineering or equivalent experience.
4–7 years in cloud security engineering across at least one major CSP.
Strong knowledge of IAM, networking, encryption, and cloud-native security tooling.
Experience securing hybrid environments spanning on-premises and Azure cloud.
Scripting/automation skills: Python, Bash, or PowerShell.
Infrastructure as Code experience using Terraform, Bicep, or ARM.
Certifications: CCSP OR AWS Certified Security – Specialty OR Azure Security Engineer Associate (AZ-500) OR Google Professional Cloud Security Engineer.

Technologies

Microsoft Azure; VPC/VNet; security groups/NSGs; private endpoints
Microsoft Defender for Cloud; Microsoft Sentinel; Defender XDR; CSPM; CWPP; policy-as-code
KMS; Key Vault; Cloud KMS; encryption at rest/in transit; certificate governance
Azure Monitor; SIEM; XDR
Functions; Logic Apps; Container Apps; AKS; ACI
IaC; image baselines; patch/vulnerability workflows
Automation; AI-assisted capabilities
Python; Bash; PowerShell; Terraform; Bicep; ARM
CCSP; AWS Certified Security – Specialty; Azure Security Engineer Associate (AZ-500); Google Professional Cloud Security Engineer

Benefits

Medical, Dental and Vision Coverage
Health and Dependent Savings Accounts
Life and Disability Programs
Voluntary Benefit Programs
Company Sponsored Wellness Programs
Retirement Savings with Company Match
Team Member and Family Assistance Program (EAP)
Paid Time Off and Paid Holidays
Employee Recognition Program with Rewards (RAVE)

Good to Have

Experience with CIEM solutions and multi-cloud governance.
Certifications: GIAC Cloud (GCSA/GPCS); CNCF CKA/CKS; vendor pro-level architect certs.

Work Location and Schedule

Denver, CO (remote); remote eligible
Occasional after-hours support for incidents
On-call rotation for major incidents

Other Considerations

May support cloud migration programs and control design reviews.

Salary: USD 140,000 - 200,000 per yearly

View full job page →

1mo ago

Security Engineer – Cloud Security (AWS)

Xcel Energy Denver, CO

Denver, CO

1mo ago Closed

$98k - $139k/yr Full time Amazon Web Services Aws Inspector And Security Hub Cloud

This position is no longer accepting applications (closed Sep 4, 2026).

Job Description

Xcel Energy is hiring a Security Engineer – Cloud Security (AWS) for a hybrid role in Denver, CO. You will build and run the AWS cloud security program with a focus on reducing risk through visibility, guardrails, and automation. This position emphasizes clear ownership, cross-team collaboration, and actionable risk communication, while operational logging and monitoring ownership is handled by SOC/IR teams.

What you’ll do

Build and mature the AWS cloud security program with defined ownership, processes, and workflows.
Identify, prioritize, and communicate cloud security risk across commercial, GovCloud, dev, and test AWS accounts.
Implement preventative controls and guardrails to reduce risk before deployment.
Use automation and integrations to reduce manual effort and improve consistency across security workflows.
Drive remediation by routing findings to the appropriate owners and tracking outcomes.
Serve as the primary cloud security engineer for AWS environments, including support for enterprise visibility into IAM, network configuration, logging, monitoring, and workload security posture.
Identify security issues such as overly permissive access, unused accounts, misconfigurations, and exposure risks.
Develop and implement guardrails, policies, and controls to prevent insecure configurations and reduce attack surface.
Promote hardened images, containers, and standardized builds to reduce deployment-time risk.
Integrate cloud security findings into existing workflows and coordinate remediation with responsible teams.
Collaborate with Cloud Platform, SAP, Enterprise Architecture, and other groups to deliver security improvements.
Partner with Application Security to support DevSecOps practices, including CI/CD pipeline integration, gates, and automation.
Support SAP cloud security needs and maintain awareness of SAP-specific risks within AWS environments.
Use APIs, scripting, and automation to streamline data collection, analysis, and workflow execution.
Leverage AWS native security capabilities such as Inspector and Security Hub (and related services) to identify and analyze risk.
Support setup and integration of logging and monitoring capabilities while deferring operational ownership to SOC/IR teams.

What you bring

Minimum 5 years of experience in information security.
Strong hands-on experience with AWS cloud environments and cloud security concepts.
Strong understanding of AWS IAM, networking, logging, monitoring, and workload security.
Experience using AWS native security tools such as Inspector, Security Hub, or equivalent.
Strong understanding of DevSecOps principles, CI/CD pipelines, and application security fundamentals.
Basic understanding of SAP environments in cloud-hosted architectures.
Experience identifying and communicating risk related to cloud configurations and architecture.
Strong analytical and complex technical problem-solving skills.
Ability to communicate technical risk clearly to non-technical stakeholders.
Experience with APIs, scripting, or automation for data integration and workflow execution.
Ability to operate independently and build a program with limited oversight.

Preferred qualifications

Experience across multiple cloud environments, including AWS multi-account and GovCloud architectures.
Experience supporting Azure cloud environments.
Experience implementing preventative security controls such as guardrails, policy enforcement, or pipeline gating.
Experience improving data quality and visibility across multiple cloud and security data sources.
Experience working with enterprise cloud platform, networking, or architecture teams.

Tools & technologies

AWS, Inspector, Security Hub, IAM, CI/CD pipelines, DevSecOps, APIs, scripting, automation, containers, SAP, Azure, GovCloud

Certifications

AWS Certified Security – Specialty (required)
AWS Certified Solutions Architect – Professional or AWS Certified DevOps Engineer – Professional (preferred)

Compensation & location

Salary: USD 97,600 - 138,600 per year.

Location: Hybrid role requiring three days per week in the office. Must be located within Xcel Energy territory and reasonably close to an Xcel Energy facility. Denver, Colorado and Minnesota areas preferred.

Benefits

Annual Incentive Program
Medical/Pharmacy Plan
Dental
Vision
Life Insurance
Dependent Care Reimbursement Account
Health Care Reimbursement Account
Health Savings Account (HSA) (if enrolled in eligible health plan)
Limited-Purpose FSA (if enrolled in eligible health plan and HSA)
Transportation Reimbursement Account
Short-term disability (STD)
Long-term disability (LTD)
Employee Assistance Program (EAP)
Fitness Center Reimbursement (if enrolled in eligible health plan)
Tuition reimbursement
Transit programs
Employee recognition program
Pension
401(k) plan
Paid time off (PTO)
Holidays
Volunteer Paid Time Off (VPTO)
Parental Leave

View full job page →

1mo ago

Security Engineer

GuidePoint Security Denver, CO 🇺🇸 Remote

Denver, CO

1mo ago Closed

$140k - $170k/yr Full time Cybersecurity Tools Endpoint Security Engineer

This position is no longer accepting applications (closed Aug 31, 2026).

Job Description

Join GuidePoint Security's Denver Heartland team as a Security Engineer, delivering hands-on network security work and collaborating with clients to advance security outcomes. This role blends practical delivery with client-facing advisory as you grow toward broader security strategy.

Responsibilities

Provide technical support and guidance to Heartland clients, delivering hands-on security delivery, design guidance, and best practices in the network security domain
Partner with the sales team to scope solutions, conduct technical discovery, and present architectures that align with client business objectives
Develop deep expertise in network security platforms and translate technical capabilities into strategic outcomes for customers
Foster trusted advisor relationships with client stakeholders through empathy, active listening, and a commitment to solving their security challenges
Produce clear documentation such as security assessments, architecture recommendations, and implementation guides
Continuously expand knowledge across adjacent security domains to evolve into a well-rounded security strategist
Embrace emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes

Requirements

Network security foundation with hands-on experience in zero trust architecture, next-generation firewalls, AppID, micro-segmentation, and secure access concepts
Proven experience with firewall and network security platforms such as Palo Alto Networks, Check Point, and Fortinet
Ability to troubleshoot common network security issues on platforms including firewalls, routing, NAT, and VPN
Proficiency across operating systems including Windows, macOS, and Linux
Working knowledge of core security concepts aligned with CISSP domains (you don’t need the certification, but you understand the landscape)
Strong written and verbal communication skills for producing security incident reports, performance notes, and recommendations
Education: Bachelor's degree or equivalent professional experience

Technologies

Palo Alto Networks, Checkpoint, Fortinet
Windows, macOS, Linux
CrowdStrike, SentinelOne, Zscaler
Microsoft Defender, Carbon Black, Splunk
Cisco security products
AI tools

Benefits

Remote work primarily within the United States, with some roles requiring travel or on-site presence for Federal positions
Group medical insurance options, including a Zero Deductible PPO plan (GuidePoint covers 90% of employee premiums and 70% of family plans) or a High Deductible Health Plan with an HSA (GuidePoint covers 100% of employee premiums and 75% of family plans; HDHP/HSA contributions in four quarterly installments)
Group dental insurance with GuidePoint paying 100% of the employee premium and 75% of family plans
12 corporate holidays and a Flexible Time Off program
Mobile phone and home internet stipend
Retirement plan eligibility after two months during open enrollment
Pet Benefit Option

Who you are

Relentless curiosity: you probe why and what if, seeking to understand systems end-to-end
Growth mindset: you view every engagement as a chance to learn and improve
Emotional intelligence: you deliver security guidance with empathy, patience, and audience awareness
Problem-solving drive: you approach challenges with creativity and persistence
Aptitude over perfection: you can move quickly toward answers even when not everything is known
Ownership and autonomy: you manage multiple priorities and deliver results without micromanagement

Where this role takes you

Network security delivery
Client-facing support
Technical documentation
Platform expertise
Pre-sales leadership
Solution architecture
Business advisory
Enterprise influence

SOME ADDED PERKS

Remote workforce primarily (U.S. based, some travel may be required; on-site may be required for Federal positions)
Group medical insurance options: Zero Deductible PPO plan (employee premiums covered at 90%, family plans at 70%) or High Deductible Health Plan with HSA (employee premiums covered at 100%, family plans at 75%); HDHP/HSA contributions quarterly
Group dental insurance: 100% of employee premium and 75% of family plans
12 corporate holidays and a Flexible Time Off program
Healthy mobile phone and home internet allowance
Retirement plan eligibility after two months at open enrollment
Pet Benefit Option

View full job page →

1mo ago

Lead Infrastructure Engineer (Microsoft Cloud & Cybersecurity)

PCG Systems Denver, CO

Denver, CO

1mo ago Closed

$110k - $125k/yr Full time Azure Cloud Cloud Platform

This position is no longer accepting applications (closed Aug 14, 2026).

Job Description

In Denver, PCG Systems is seeking a Lead Infrastructure Engineer who specializes in Microsoft Cloud and cybersecurity. This senior role blends hands-on architectural work with mentorship, guiding multi-client environments through cloud modernization, security hardening, and operational excellence. You will collaborate with business leaders to translate technology initiatives into reliable, secure infrastructure.

Compensation

USD 110,000 - 125,000 per year

Location

Denver, CO (hybrid)

Responsibilities

Architect, deploy, and support Microsoft 365 environments
Design, implement, and support Microsoft Azure infrastructure
Design and administer Microsoft Entra ID and Microsoft Intune
Lead Microsoft 365 tenant migrations and cloud modernization projects
Design, configure, and support Fortinet security solutions
Configure business networking including VLANs, routing, switching, VPNs, wireless, and network security
Implement and support SentinelOne, Check Point Harmony Email & Collaboration, and other cybersecurity solutions
Design and support cloud backup and disaster recovery solutions
Develop PowerShell automation and scripting to improve efficiency
Lead infrastructure projects from planning through implementation
Troubleshoot and resolve complex Tier III infrastructure issues
Mentor engineers and help develop technical standards
Improve documentation and engineering processes within Hudu
Work directly with business owners and executive leadership on strategic technology initiatives

Requirements

7+ years of professional IT experience
5+ years working for a Managed Services Provider (MSP)
Demonstrated experience leading Microsoft 365 migrations
Advanced Microsoft Azure administration experience
Advanced Fortinet administration experience
Strong networking design and troubleshooting experience
Experience leading infrastructure projects
Excellent written and verbal communication skills
Strong documentation habits
Valid driver's license and reliable transportation
Ability to travel throughout the Denver Metro area as needed
Bachelor's degree in Computer Science or related field

Technical Proficiencies

Microsoft 365, Exchange Online, SharePoint Online, Microsoft Teams, OneDrive, Microsoft Entra ID, Microsoft Intune, Microsoft Azure, Azure Virtual Machines, Conditional Access, Multi-Factor Authentication, Microsoft Defender, Microsoft 365 Tenant Migrations, Fortinet Firewalls, FortiSwitch, FortiAP, VLAN Design, Routing & Switching, VPN Configuration, DNS, DHCP, Wireless Networking, Network Security Best Practices, Windows Server, Active Directory, Group Policy, Hyper-V and/or VMware, Storage & Virtualization, Server Migrations, SentinelOne, Check Point Harmony Email & Collaboration (Avanan), Endpoint Detection & Response (EDR), Email Security, Identity Security, Vulnerability Remediation, Security Hardening, Incident Response, Cove Data Protection, Datto BCDR, Axcient, Veeam, Microsoft 365 Backup Solutions, Cloud-to-Cloud Backup, Disaster Recovery Planning & Testing, Halo PSA (Preferred), NinjaOne (Preferred), Hudu, ConnectWise Control, ConnectWise Manage, Datto RMM, AutoTask, N-able, PowerShell, Microsoft Graph, Scripting, Process Automation, Terraform, Ansible, Puppet, Chef, MySQL, PostgreSQL, Oracle Database, Microsoft SQL Server, RESTful APIs, Web Services, VMware, OpenStack, Citrix, Rackspace, Docker, Kubernetes, Linux, Windows, Bash, Python, Go, Ruby, Jenkins, CI/CD

Benefits

Health insurance
401(k)
401(k) matching
Flexible schedule
Paid time off
Paid holidays
Tuition reimbursement
Monthly Healthcare Reimbursement
Company-provided equipment
Company-paid certifications and professional development
Hybrid work environment

Application Questions

How many M365 tenant migrations have you personally led?
How many Fortinet firewall/network deployments have you personally completed?
How would you rate your Microsoft Azure administration experience? (Intermediate, Advanced, Expert)
How many years have you administered Microsoft Intune?
Which PSA and RMM platforms have you used?
Describe the most technically complex infrastructure project you personally designed and implemented
Describe a PowerShell script or automation you've written that improved operations or eliminated manual work
What is your current compensation and desired compensation?