HiringCafe
Join our community

23 vulnerability engineer jobs at 19 companies in Thornton, CO

2w
Save
Mark Applied
Hide
Cybersecurity Assessment Engineer
Washington or Maryland or Virginia or Raleigh or Durham or Chapel Hill or Denver or Colorado Springs or Dallas or Fort Worth
$125k-$140k/yr RemoteFull Time
Second Front Systems
Second Front Systems: Secure cloud hosting and automated compliance for government software.
3+ YOE3+ years cybersecurity experience; hands-on cloud and DevSecOps knowledge; familiarity with NIST RMF/SP 800-53, FedRAMP, vulnerability analysis, and authorization artifacts; ability to attain DoD 8570 IAT II (CYSA+ preferred).
Anchore, Trivy, Tenable, Docker, GitLab, Kubernetes, Python, Bash, AWS, Azure, GCP
Job PostingView all
1w
Save
Mark Applied
Hide
AWS Security Engineer - Senior Associate
New York City or Tampa or Denver or Chicago or Boston or Cleveland or Philadelphia or Houston
$77k-$202k/yr OnsiteFull Time
PwC
PwC: Providing audit, tax, and management consulting services to businesses.
2+ YOEBachelor's degree required, minimum 2 years' experience, proficiency with AWS CloudFormation, Terraform, Ansible, Puppet, GitHub, Jenkins, and Python; security incident management and vulnerability assessment experience.
AWS CloudFormation, Terraform, Ansible, Puppet, GitHub, Jenkins, Python
Job PostingView all
2mo
Save
Mark Applied
Hide
Cyber Security Engineer Technical Lead
Littleton, Colorado, United States
$124k-$218k/yr OnsiteFull Time
Lockheed Martin
Lockheed MartinNYSE: LMT: Designs and manufactures global security and aerospace systems.
TS/SCI clearance and US citizenship required; DoD 8570 IAM/IAT II certifications; experience in satellite and ground operations, RMF/ATO processes, SOC operations, vulnerability scanning/EVSS, DoD cybersecurity standards, SIEM, RHEL/Windows, and incident response.
NetBrain, Zenoss, Hewlett Packard Network Automation (HPNA), eMASS, HBSS, ACAS, SCAP Compliance Checker (SCC), DISA STIGs, EVSS, RHEL, Windows Server, SIEM, LogRhythm, Splunk, Jira, Confluence
Job PostingView all
4w
Save
Mark Applied
Hide
Engineer - Cybersecurity
Denver, Colorado, United States
$100k-$133k/yr OnsiteFull Time
Frontier Airlines
Frontier AirlinesNasdaq: ULCC: Provides low-fare passenger air transportation services across the Americas.
6+ YOEBachelor's in CS/technology or equivalent, 6+ years cybersecurity engineering experience, 4+ years with EDR, SEGs, vulnerability management and SIEM, cloud (Azure/AWS) security, industry cert (CISSP, Security+, etc.) required or to be attained within 3 months.
DLP, SIEM, SOAR, EDR, SentinelOne, CrowdStrike, Cylance, Mimecast, Proofpoint, Microsoft Office365 Exchange, Nessus, Qualys, Rapid7, Splunk, LogRhythm, Wireshark, NMAP, Azure, AWS, Windows
Job PostingView all
3d
Save
Mark Applied
Hide
Senior Security Engineer
Lafayette, Colorado, United States
$110k-$130k/yr RemoteFull Time
KPA
KPA: Provides EHS software and workforce compliance consulting services.
5+ YOE5+ years security engineering experience; strong cloud, identity, endpoint, vulnerability management, incident response, and DevSecOps skills; PowerShell/Python scripting; SOC 2/NIST familiarity; excellent communication and leadership.
CrowdStrike, Rapid7, InsightIDR, InsightVM, InsightAppSec, MDR, Cisco Umbrella, Cisco Duo, KnowBe4, Cisco Meraki, VPN, Azure, AWS, Microsoft 365, Entra ID, AWS Identity Center, Auth0, SSO, SCIM, Conditional Access, PIM, Snyk, SendGrid, Amazon SES, SPF, DKIM, DMARC, PowerShell, Python, Microsoft Graph, REST APIs, ChatGPT Enterprise, Claude, MCP, Kubernetes
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Cybersecurity Engineer
Princeton or Boulder
$121k-$147k/yr OnsiteFull Time
SciTec
SciTec: Provides advanced remote sensing and missile defense technology solutions.
6+ YOEBachelor's in a related field, CySa+ (or similar), 6+ years cybersecurity engineering, 2+ years CrowdStrike EDR/NG-SIEM experience, NIST 800-171/CMMC, vulnerability scanning, Linux/Windows/AD/IAM, scripting (Python, PowerShell, Bash), DoD clearance eligible.
CrowdStrike EDR, CrowdStrike NG-SIEM, SIEM, Tenable, NinjaOne, AWS, Azure, Python, PowerShell, Bash, NIST 800-171, CMMC, Active Directory, IAM, DevSecOps
Job PostingView all
2w
Save
Mark Applied
Hide
Intermediate Cyber Security Engineer
Cedar Rapids or Denver or Philadelphia
$70k-$84k/yr HybridFull Time
Transamerica
TransamericaNYSE: AEG: Provides insurance, retirement solutions, and investment products to customers.
1+ YOE1+ years cyber security engineering experience; knowledge of application security, vulnerability management, SDLC, and security frameworks; bachelor’s in related field or equivalent; certifications desirable (OSCP,CISSP,CEH,Security+/CySA/CASP).
NIST CSF, SIEM, Rapid7, ServiceNow Vulnerability Response (VR), Synk, CrowdStrike, ServiceNow, JIRA
Job PostingView all
3w
Save
Mark Applied
Hide
Senior Offensive Security Engineer - Pentester
Denver or Washington or Seattle or Charlotte or Jacksonville or Jersey City or Chicago
$160k-$205k/yr OnsiteFull Time
Bank of America
Bank of AmericaNYSE: BAC: Provides banking, investment, and financial risk management services.
5+ YOE5+ years offensive security experience, proficiency with pentesting tools, strong understanding of networks/OS/Active Directory, ability to code (Python/Java/C#), report vulnerabilities, mentor junior engineers.
Burp Suite, Metasploit, nmap, Python, Java, C#
Job PostingView all
1mo
Save
Mark Applied
Hide
Project Cyber Engineer
Aurora, Colorado, United States
$145k-$241k/yr OnsiteFull Time
Deloitte
Deloitte: Provides professional audit, consulting, advisory, and tax services.
3+ YOEBachelor's degree and 3+ years experience, active TS/SCI or SCI eligibility, onsite Aurora CO 5 days/week, experience with identity and access management, network management, NIST RMF, and vulnerability management.
Job PostingView all
2d
Save
Mark Applied
Hide
Lead Penetration Test Engineer
Princeton or Boston or Chicago or Dallas or Houston or Englewood or Raleigh or New York or Southfield or Washington or Toronto or Calgary
$135k-$200k/yr HybridFull Time
S&P Global
S&P GlobalNYSE: SPGI: Provides independent credit ratings, market benchmarks, and financial analytics.
8+ YOE8+ years in information security focused on penetration testing, vulnerability management and application/cloud security; offensive security certification required; strong scripting skills and ability to communicate findings.
Burp Suite, Nessus, Metasploit, Nmap, MITRE ATT&CK, Bash, Python, Go, PowerShell, JavaScript, DAST, SAST, SCA, AWS, Azure, GCP
Job PostingView all
1w
Save
Mark Applied
Hide
Cyber Security Engineer III
Denver, Colorado, United States
OnsiteFull Time
Cherokee Federal
Cherokee Federal: Provides specialized professional and technical services to federal government agencies.
Perform RMF/FISMA activities, maintain SSPP and security artifacts, conduct continuous monitoring, vulnerability assessments, POA&M management, incident response support, and provide cybersecurity briefings.
Bison GRC, Xacta 360, GIS
Job PostingView all
2w
Save
Mark Applied
Hide
Information Systems Security Engineer
King of Prussia or Aurora
$75k-$158k/yr OnsiteFull Time
CACI
CACINYSE: CACI: Provides information technology and professional services to government clients.
5+ YOELead RMF lifecycle, manage NIST 800-53/171 controls, perform vulnerability assessments, maintain ATOs, and provide cloud security oversight for AWS/Azure.
Xacta, SNOW, Nessus, Splunk, Anchore, AWS, Azure
Job PostingView all
3w
Save
Mark Applied
Hide
Technology Engineer - JAVA/.NET/Security Code Review
Pittsburgh or Strongsville or Denver or Phoenix or Birmingham or Dallas or Cleveland or Lakewood
$86k-$158k/yr OnsiteFull Time
PNC Financial Services
PNC Financial ServicesNYSE: PNC: Provides banking, lending, and investment services to customers.
3+ YOE3+ years of software development experience, proficiency in Java and/or .NET, application security knowledge (OWASP Top 10), vulnerability triage/remediation, SDLC security, strong communication skills.
Java, .NET, OWASP Top 10, Interactive Application Security Testing (IAST)
Job PostingView all
1mo
Save
Mark Applied
Hide
Sr. Application Security Engineer
Denver, Colorado, United States
$130k-$165k/yr HybridFull Time
Vertafore
VertaforeNYSE: ROP: Provides cloud-based software solutions for the insurance industry.
7+ YOE7+ years in application/product/cloud security; Bachelor's in relevant field or equivalent experience; hands-on experience with threat modeling, secure SDLC, vulnerability management, CI/CD security, cloud (AWS/Azure), API and AI security; strong communication skills.
SAST, DAST, SCA, IaC scanning, container scanning, API security testing, secrets scanning, AI runtime scanning, WAF, CNAPP, CSPM, CI/CD, SIEM, AWS, Azure, OWASP ASVS, NIST CSF, NIST SSDF, OWASP SAMM
Job PostingView all
1d
Save
Mark Applied
Hide
Lead Penetration Test Engineer
Princeton or Calgary or Toronto or Englewood or Chicago or Raleigh or New York or Dallas or Houston
$135k-$200k/yr HybridFull Time
S&P Global
S&P GlobalNYSE: SPGI: Provides financial data, analytics, and credit ratings worldwide.
8+ YOE8+ years information security experience focused on penetration testing, application/cloud security, vulnerability management; offensive security certification required; scripting (Bash, Python, Go, PowerShell, JavaScript); experience with DAST/SAST/SCA and CI/CD integration; bachelor's degree or equivalent.
Burp Suite, Nessus, Metasploit, Nmap, OWASP Top 10, MITRE ATT&CK, DAST, SAST, SCA, Bash, Python, Go, PowerShell, JavaScript, AWS, Azure, GCP
Job PostingView all
2d
Save
Mark Applied
Hide
AI Security Engineer, AI Security Unit
Denver or California
RemoteFull Time
Check Point Software Technologies
Check Point Software TechnologiesNASDAQ: CHKP: Provides network, cloud, and mobile cybersecurity solutions.
Offensive security and red teaming experience against AI systems, knowledge of LLM vulnerabilities and threat modeling, ability to develop automated tooling, client-facing delivery and strong technical writing.
OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, MITRE ATLAS, Model Context Protocol (MCP)
Job PostingView all
3w
Save
Mark Applied
Hide
Senior Information Systems Security Engineer
Boulder, Colorado, United States
$112k-$196k/yr OnsiteFull Time
Parsons
ParsonsNYSE: PSN: Provides engineering and technology services for infrastructure and defense.
5+ YOEActive Top Secret clearance,5+ years relevant experience,Bachelor's or equivalent experience,Security+ required,RMF/ATO experience,Windows and Red Hat administration,security toolset operation,and vulnerability scanning.
Windows, Red Hat Enterprise Linux, Symantec, Logrhythm, Chef, Puppet, Ansible, Docker, Kubernetes, Nessus, OpenVAS, SCC
Job PostingView all
3d
Save
Mark Applied
Hide
Cybersecurity Software Engineer - Level 3 or 4
Boulder, Colorado, United States
$114k-$171k/yr OnsiteFull Time
Northrop Grumman
Northrop GrummanNYSE: NOC: Designs and manufactures advanced aerospace and defense systems.
5+ YOEDoD 8570 IAT Level II or higher, active U.S. Secret security clearance, 5+ years related experience (Level 3) or 8+ years (Level 4), experience with cyber certification, DevSecOps, NIST/RMF, and vulnerability management.
Tenable Security Center, Nessus, Splunk, LogRhythm, Python, C++, NIST SP 800-53, RMF, DISA STIGS, SCAP, HBSS, ACAS, SIEM, Linux, Windows
Job PostingView all
2mo
Save
Mark Applied
Hide
Systems Infrastructure & Network Security Operations Engineer
Spring or Fort Collins
$93k-$144k/yr OnsiteFull Time
HP
HPNYSE: HPQ: Manufacturer of personal computers, printers, and imaging devices.
6+ YOE6+ years networking and systems experience with zero-trust design, IaC and automation (Ansible, Terraform, Python), CI/CD for network assets, vulnerability management, cloud networking, and architecture governance; technical degree or equivalent experience.
Ansible, Python, Terraform, Git, Jenkins, GitLab CI, Nessus, Qualys, VMware vSphere, Proxmox, Linux, Windows, F5, InfoBlox, AWS VPC, Azure VNets, TOGAF, ArchiMate, OSPF, BGP, MPLS, VXLAN
Job PostingView all
2mo
Save
Mark Applied
Hide
Product Security Architect
Loveland, Colorado, United States
$129k-$214k/yr RemoteFull Time
Keysight Technologies
Keysight TechnologiesNew York Stock Exchange: KEYS: Manufactures hardware and software for electronic test and measurement.
8+ YOE8+ years in product/application security or security engineering; experience with threat modeling, secure architecture reviews, SAST/DAST/SCA, and vulnerability management; strong software engineering background and cloud security knowledge.
SAST, DAST, SCA, secrets detection, CI/CD, Java, C#, C, C++
Job PostingView all

Explore Jobs

Expand Your Job Search