Cybersecurity Engineer
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Tech stack
+7 more
Job description
- Develop and maintain our information security policy framework and tie implementation efforts to compliance requirements (SOC 2 Type II, ISO 27001, NIST 800-53/171), assessing risk across people, processes, and technology.
- Design, deploy, and operate our IAM infrastructure - including Okta and HashiCorp Vault. Implement network security controls (segmentation, hardening, traffic monitoring/observability) to enforce least-privilege access and detect anomalous activity across IT and site environments.
- Partner directly with cross-functional teams to embed best InfoSec practices into the product development lifecycle, providing the tools and guardrails engineers need to build and ship secure products.
- Enforce baseline security policies across macOS, Windows, Ubuntu, and embedded Linux platforms, and continuously develop our SIEM to centralize log collection and enable detection across endpoints, cloud, and SaaS.
- Support and mature vulnerability management: identification, prioritization, remediation tracking, and reporting to leadership and auditors.
- Assess and manage third-party and vendor security risk, including quantum cloud provider relationships and research partnerships, and automate processes and monitoring using Python, Bash, or similar scripting languages
- Act as a technical escalation point for security issues across IT and engineering, Senior cybersecurity practitioner embedded in DevSecOps teams to execute RMF, assess and remediate CVEs, prepare authorization artifacts, enable secure IL5/IL6 deployments, and communicate cyber risk to government stakeholders., Lead cybersecurity architecture, strategy, certification, and innovation for Block Storage products. Drive compliance and audits, evaluate and integrate new technologies, mentor engineers, influence executive decisions, and deliver defense-in-depth solutions to mitigate vulnerabilities. Top Skills: 802.1ArAgentic AiCommon CriteriaCryptographyDisa Srg/StigEu CraFipsNist Sp 800-53PqcSshTls SciTec
Requirements
- Bachelor’s in Cybersecurity, Computer Science, or Computer Engineering
- 5+ years of experience in IT, DevOps or engineering
- 2+ years of experience specific to cybersecurity, * Experience building and implementing security programs - including policies, frameworks, and compliance initiatives - in startup or rapidly scaling organizations.
- Working knowledge of NIST SP 800-53/171, (continuous monitoring) - or strong ability to ramp quickly in a federal compliance environment
- Deep hands-on Okta experience, including lifecycle management, conditional access, and MFA enforcement, and PAM Management
- Solid technical foundation across endpoint security, cloud/physical IAM, Scripting/automation ability (Python, Bash, or similar) to reduce manual security operations work and SIEM Platforms
- Strong understanding of certificate and PKI fundamentals - issuance, rotation, trust chains - ideally with hands-on Vault PKI experience
- Proficiency with Kali Linux to perform cybersecurity assessments
- Ability to execute penetration testing and blue-team exercises
Benefits & conditions
Be an Early Applicant Hybrid Boulder, CO, USA 120K-155K Annually Senior level Hybrid Boulder, CO, USA 120K-155K Annually Senior level Design, build, and operate security controls and architecture based on NIST frameworks. Deploy IAM (Okta, Vault), endpoint and network protections, SIEM, vulnerability management, and vendor risk processes. Perform penetration testing/assessments, embed security into engineering workflows, automate security operations with scripting, and support compliance (SOC 2, ISO 27001). The summary above was generated by AI
At Atom Computing, we build quantum computers using arrays of optically trapped neutral atoms that will empower customers to achieve unprecedented computational breakthroughs. Join a world-class team of scientists, engineers, and business professionals to advance the state-of-the-art in quantum computing., In-Office Boulder, CO, USA 124K-158K Annually Senior level 124K-158K Annually Senior level Hardware * Database * Defense Lead CrowdStrike implementation and integration across on-prem and cloud environments; harden servers, networks, and storage; support vulnerability management and SIEM development; drive CMMC/NIST 800-171 compliance; assist incident response and forensic readiness; communicate risks and remediation to leadership. Top Skills: Active DirectoryAWSAzureBashCmmcCrowdstrikeIamLinuxNg-SiemNinjaoneNist 800-171PowershellPythonSIEMTenableWindows
What you need to know about the Colorado Tech Scene
With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Apply on jobs.lever.coGood distractions
Talks and stories from around this role — technically off-topic, practically not.
Moments
Explore playlistsVideos
See allRelated articles
See all
How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again
Dev Digest 134 - Where pixels sing?
The Best X (Twitter) Accounts for Developers
Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.