Fort Collins, CO

Cybersecurity Jobs in Fort Collins, CO

3 jobs found

Include remote jobs

Today

Senior Cybersecurity Engineer, Operational Technology

Platte River Power Authority Fort Collins, CO

Fort Collins, CO

Today

$153k - $188k/yr Full time Senior Cybersecurity Tools Engineer

Apply Now

Job Description

Platte River Power Authority is seeking a Senior Cybersecurity Engineer focused on Operational Technology (OT) security to help design, implement, and continuously improve cybersecurity controls across its OT environments. This role operates as Platte River’s dedicated OT cybersecurity subject matter expert, shaping OT security architecture, standards, and risk management practices while aligning monitoring and incident response support with enterprise objectives and applicable regulations. The position is based in Fort Collins, CO and works onsite.

What you’ll do

Define and maintain OT cybersecurity standards, including reference architectures and secure design patterns.
Design and recommend cybersecurity controls for ICS, SCADA, DCS, and broader OT network environments.
Establish and guide implementation of network segmentation between IT and OT using the ISA/IEC 62443 zone-and-conduit model, including documented Security Level targets.
Ensure alignment between the enterprise cybersecurity architecture and OT operational requirements.
Provide security guidance for emerging platforms such as DERMS and IIoT.
Deliver cybersecurity design input for new and changing generation assets (including BESS, solar, wind, DER) in coordination with resource planning.
Perform risk assessments, threat modeling, and security reviews of OT systems and architecture.
Identify, assess, and communicate OT cybersecurity risks to both technical and business stakeholders.
Define security baselines and minimum control requirements for OT environments, and support ongoing improvement of OT cybersecurity policies, standards, and procedures.
Ensure recommendations account for safety, reliability, and operational constraints.
Partner with OT teams and the OT MSSP for monitoring, escalation, and coverage (without relying on a one-person 24/7 on-call model).
Establish and tune OT detection use cases and baselines with the OT MSSP, and triage threat-hunting findings to drive continuous monitoring improvements.
Support investigation and response to OT-related security incidents, including OT incident reporting aligned to CIP-008 in coordination with the CIP Compliance Analyst.
Contribute to the development and testing of OT incident response playbooks and tabletop exercises.
Identify and assess vulnerabilities in OT systems, firmware, and applications; guide risk-based remediation and mitigation strategies with OT stakeholders.
Support patching approaches that balance cybersecurity risk with operational uptime, and assess legacy or unsupported systems to define compensating controls.
Maintain visibility into OT assets, communications, and data flows.
Develop and govern the OT roadmap for machine identity, certificate lifecycle, and trust relationships.
Guide implementation of secure authentication mechanisms for users, devices, and remote access.
Build and maintain OT asset inventory and visibility aligned to CISA OT asset inventory guidance and supporting BES Cyber System identification (CIP-002).
Define OT network security requirements, including zoning, segmentation, and access controls, and validate firewall rulesets for alignment with enterprise standards.
Analyze OT network traffic patterns, support anomaly detection, and strengthen monitoring coverage with network and OT teams.
Select, deploy, and tune OT-aware monitoring tools (including passive network monitoring and internal network security monitoring).
Align OT cybersecurity controls with applicable frameworks and standards, and support internal and external audits, assessments, and evidence collection.
Translate regulatory requirements into practical, risk-based security controls, and maintain documentation related to OT cybersecurity controls, risks, and exceptions.
Evaluate OT security technologies and recommend solutions that support operations and align with enterprise strategy.
Provide cybersecurity guidance during OT deployments and integrations, including secure remote access requirements for vendors and third parties.
Assess vendor risk for OT systems, software, and managed services by contributing OT-side technical input to the CIP-013 supply-chain process (including vendor security questionnaires, PSIRT/E-ISAC advisory monitoring, and SBOM intake).
Provide cybersecurity guidance and education to OT engineering and operations teams, and act as a liaison between enterprise cybersecurity and OT teams to improve collaboration.

Required qualifications

Bachelor’s degree in Cybersecurity, Computer Engineering, Electrical Engineering, or a related field (or equivalent experience).
Current valid driver’s license and ability to remain insurable under the vehicle liability policy.
GICSP or GCIP (GIAC Critical Infrastructure Protection) certification, or ability to earn within 12 months of hire.
7 to 10 years of cybersecurity experience with exposure to OT/ICS environments.
Knowledge of industrial protocols such as Modbus, DNP3, OPC, and IEC 61850 (and similar).
Experience with OT security tools such as Nozomi, Claroty, Dragos, Tenable.ot, and Splunk.
Experience with network segmentation, firewalls, and security architecture principles.
Practical understanding of how NERC CIP shapes OT controls, and ability to work with compliance staff on technical aspects.
Familiarity with threat detection, incident response, and security monitoring practices.

Preferred qualifications

Experience with certificate lifecycle and machine identity management in OT environments.
Familiarity with OT security platforms such as Nozomi, Claroty, Dragos, Tenable.ot, and Splunk.
Familiarity with Palo Alto, Cisco, or similar network/security platforms.
Knowledge of cloud-to-plant integrations (IIoT) and securing remote access solutions (VPN, ZTNA).
Experience in energy, utilities, or critical infrastructure sectors.
Preferred certifications: CISSP or CISM, GRID (GIAC Response and Industrial Defense), and ISA/IEC 62443 certification (Cybersecurity Fundamentals Specialist or higher).

Technologies and frameworks

ISA/IEC 62443 and zone-and-conduit model
NIST Cybersecurity Framework (CSF)
NIST SP 800-82 (ICS Security)
NERC CIP (including CIP-002, -005, -007, -010, -011, CIP-008, CIP-013)
CISA OT asset inventory guidance
Industrial protocols: Modbus, DNP3, OPC, IEC 61850
OT/security platforms: Nozomi, Claroty, Dragos, Tenable.ot, Splunk
OT/energy platforms: DERMS, IIoT, BESS, DCS, ICS, SCADA

Pay and salary range

USD 153,404 - 188,041 per year (hiring range)
Full range referenced: $153,404 to $222,458
Salaries are paid bi-weekly and are annualized for reference; actual salary may depend on skills, years of experience, education, and certifications.

Recruitment notice

Platte River Power Authority does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based placement services.
No agency emails, calls, or solicitations to staff are accepted without a valid agreement.
Any unsolicited resume submitted to staff will be considered property of Platte River Power Authority with no obligation to pay referral fees.

Work environment and demands: The role involves routine office noise and equipment, primarily sedentary work with minimal physical effort, and occasional lifting and carrying of light objects as needed. Hazards are minimal and similar to a general office environment with rarely to no exposure to injury or accident.

View full job page →

2d ago

Supervisory IT Cybersecurity Specialist (Identity, Credential & Access Management)

US Office of the Chief Information Officer Fort Collins, CO

Fort Collins, CO

2d ago

$107k - $140k/yr Full time Identity and Access Management Information Security InfoSec

Apply Now

Job Description

Supervise enterprise ICAM cybersecurity as a leadership Branch Chief in USDA OCIO’s ICAMD within CPOC. In this on-site role in Fort Collins, CO, you will oversee Identity, Credential, and Access Management (ICAM) cybersecurity functions, supporting USDA’s mission through privacy, risk management, threat protection, and compliance. The position also includes managing privileged access administration and guiding teams responsible for ICAM services across the enterprise.

Compensation: USD 107,446 - 139,684 per year. Pay varies by geographic locality adjustment, with advertised ranges representing base pay for the duty location. Minimum experience: 1 year. Citizenship eligibility: applications accepted from any U.S. citizen (and the position is open to U.S. Citizens, Nationals, or those who owe allegiance to the U.S.).

What you will do

Evaluate and improve program segment and organizational processes to monitor and enhance effectiveness, efficiency, and productivity.
Collaborate on cybersecurity designs that align with operational needs and environmental factors, including access controls, automated applications, and networked operations for high integrity environments.
Design and develop system administration and management functionality for privileged access users.
Ensure compliance with organization systems administration standard operating procedures.
Manage accounts, network rights, and access to systems and equipment.
Provide leadership, guidance, and direction to staff supporting ICAM services.
Oversee implementation, deployment, maintenance, and administration of enterprise ICAM services.
Support enabling technologies and ensure alignment with organizational policies, operational needs, and security requirements.

Requirements

Must be a U.S. Citizen or U.S. National.
Males born after 12/31/1959 must be Selective Service registered or exempt.
Subject to satisfactory background investigation and/or fingerprint check adjudication.
Must successfully pass the E-Verify employment verification check.
Direct Deposit is required for Federal employees under Public Law 104-134.
May be required to serve a probationary or trial period, and subject to a one-year supervisory/managerial probationary period unless prior service is creditable; new USDA supervisors must complete the required training program components before the end of the probationary period.
IT-related experience is required and may be demonstrated through paid/unpaid experience and/or completion of specific intensive training (for example, IT certification), as appropriate.
IT-related experience must demonstrate the competencies for the role, including Attention to Detail, Customer Service, Decision Making, Information Management, and also Interpersonal Skills, Oral Communication, Problem Solving, Reasoning, Teamwork, Technical Competence.
For GS-14 qualifying experience: one year of specialized experience comparable to GS-13 (or its non-Federal equivalent) that is directly related to the work of this position.

Benefits and eligibility

A career with the U.S. government provides employees with a comprehensive benefits package. Benefits eligibility depends on the type of position you hold and whether it is full-time, part-time, or intermittent.

How you will be evaluated

You will be evaluated based on how well you meet the qualifications, including application materials (resume and supporting documents), questionnaire responses, and required assessments.
USA Hire assessment results and cut score requirements apply; cheating or overstating qualifications may result in removal from consideration.
Evaluation areas include: Supervision, Systems Developer, Project Management.
Structured resume review: subject matter experts review only two (2) pages of your resume starting at work experience, focused on required specialized experience.
Competencies assessed include: Accountability, Customer Service, Decisiveness, Flexibility, Interpersonal Skills, Problem Solving, Project Management, Resilience, Supervision, Systems Developer.

Required documents

Resume (max 2 pages) including personal information, education, and work experience with schedule, hours per week, dates of employment, and any title/series/grade (if applicable).
If using education to qualify, submit college transcripts.
If claiming veteran’s preference, submit DD214 or required certificates (including dates and honorable conditions), plus any additional documentation for 10-point preference as applicable.
If eligible for CTAP/RPL/ICTAP priority as a surplus/displaced employee, provide proof of eligibility, SF-50 documenting separation (as applicable), current performance appraisal with at least “Fully Successful” rating, and most recent SF-50 noting position, grade level, and duty location.

Additional notes: This announcement uses Direct Hire Authority due to critical need. Category rating, veteran’s preference, and traditional rating and ranking do not apply to this vacancy. Any selections will be processed as new civil service appointments, which may require a new probationary period for current Federal employees.

View full job page →

1mo ago

Lead Penetration Tester

Revolutional, LLC Fort Collins, CO

Fort Collins, CO

1mo ago Closed

$110k - $150k/yr Full time Manager Application Security Data Security

This position is no longer accepting applications (closed Sep 12, 2026).

Job Description

Lead operational security assessment and penetration testing efforts for a federal agency portfolio, delivering evidentiary results to CIO and CISO-level stakeholders.

Responsibilities

Lead operational security assessments across federal agencies using the ISC Security Assessment Methodology and applicable rules of engagement; manage approximately 6–7 agency assessments per year
Perform web application security assessments using OWASP methodology; assess approximately 3–4 applications per year across a range of agency environments
Create end-to-end test plans for each engagement, including scope definition, objectives, methodology selection, rules of engagement, and timeline
Develop criticality matrices that prioritize findings by risk, asset value, and mission impact to support remediation planning
Author security assessment reports with findings, evidence, risk ratings, and actionable remediation guidance aligned to federal evidentiary and reporting expectations
Develop and deliver executive out-briefs to agency CIO/CISO and senior leadership audiences, explaining complex technical results clearly
Conduct FedRAMP-qualified penetration testing in support of cloud service authorization, following FedRAMP pen testing requirements and documentation standards
Apply NIST SP 800 series guidance and DISA STIG methodology across assessment planning, execution, and reporting
Coordinate with agency stakeholders before, during, and after assessments to manage expectations and ensure findings are understood and acted upon
Maintain currency on vulnerability research, offensive techniques, and emerging attack surfaces relevant to federal civilian environments

Requirements

Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience)
5+ years of hands-on penetration testing experience, including demonstrated experience leading assessments in federal environments
CISA AES (Authorized External Security) certification required, or actively in process of obtaining
FedRAMP penetration testing experience required
Active Secret clearance
Ability and willingness to travel to agency sites as required
Deep experience conducting operational security assessments aligned to ISC Security Assessment Methodology and federal rules of engagement
Proficiency applying OWASP methodology to web application assessments in federal environments
Working knowledge of NIST SP 800 series for security assessment planning, execution, and reporting
Experience applying DISA STIG methodology to assessment scope and findings documentation
Experience producing test plans, criticality matrices, and security assessment reports meeting federal evidentiary and leadership reporting standards
Demonstrated ability presenting technical security findings to CIO, CISO, and senior agency leadership audiences
FedRAMP-qualified penetration testing experience, including familiarity with FedRAMP pen test requirements, documentation, and cloud authorization processes
Proficiency with industry-standard penetration testing toolsets for network, application, and infrastructure assessments

Strongly Preferred / Additional Credentials

GPEN (GIAC Penetration Tester), GXPN (GIAC Exploit Researcher and Advanced Penetration Tester), OSCP (Offensive Security Certified Professional), or equivalent offensive security credential
GWAPT (GIAC Web Application Penetration Tester) or equivalent web application security certification

Nice to Have

Experience conducting CISA AES assessments as Assessment Lead across multiple federal civilian agencies
Familiarity with FedRAMP High, Moderate, and Low authorization boundaries and associated penetration testing implications
Background in Red Team operations or adversary emulation alongside structured assessment methodology
Experience with cloud-native application security assessments (AWS, Azure, GCP, or GovCloud)
Active TS/SCI clearance

Benefits

Traditional and HSA-eligible medical insurance plans
100% employer-paid dental and vision insurance options
100% employer-sponsored STD, LTD, and life insurance
5% 401(k) company matching
Flexible schedules and teleworking options
Paid holidays and PTO accrual plans
Paid Parental Leave
Professional development and career growth opportunities

Location / Terms

Onsite in Fort Collins, CO (project-based; onsite)
Also listed: Washington, DC, Ft. Collins, CO, or Kansas City, MO
Full-time position

Compensation / Clearance

$110,000 - $150,000 per year (DOE)
Active Secret clearance required

Travel

Yes – travel to agency sites required

View full job page →

Cybersecurity Jobs in Fort Collins, CO

Senior Cybersecurity Engineer, Operational Technology

Supervisory IT Cybersecurity Specialist (Identity, Credential & Access Management)

Lead Penetration Tester

Get Cybersecurity Jobs in Fort Collins, CO alerts