ZipRecruiter

Log In

1

Offensive Security Jobs in Colorado (NOW HIRING)

Leidos

Senior Security Engineer

Boulder, CO · On-site

$131K - $237K/yr

Offensive security background - penetration testing, red team, or serious CTF experience * Detection engineering or SIEM experience * Experience with embedded, real-time, or otherwise constrained ...

Broadcom

R&D Engineer SW Quality 3

Broomfield, CO

$72K - $93K/yr

An individual proficient in offensive security, incident response, threat intelligence, and Python (or similar scripting languages) for test automation. Primary Responsibilities As a Software QA Test ...

Leidos

Senior Security Engineer

Boulder, CO · On-site

$131K - $237K/yr

Offensive security background -- penetration testing, red team, or serious CTF experience * Detection engineering or SIEM experience * Experience with embedded, real-time, or otherwise constrained ...

Via Logic LLC

Senior Security Engineer

Boulder, CO · On-site

$131 - $237/hr

Offensive security background - penetration testing, red team, or serious CTF experience * Detection engineering or SIEM experience * Experience with embedded, real-time, or otherwise constrained ...

Broadcom, Inc.

R&D Engineer SW Quality 3

Broomfield, CO · On-site

$72K - $93K/yr

An individual proficient in offensive security, incident response, threat intelligence, and Python (or similar scripting languages) for test automation. Primary Responsibilities As a Software QA Test ...

Bank of America

Threat Hunter

Denver, CO

$100K - $141K/yr

Experience with offensive security tools such as Cobalt Strike/Metasploit, techniques such as OSINT, and the methods used to compromise large enterprise networks. * Previous experience performing ...

Dark Wolf Solutions

Red Team Operator

Colorado Springs, CO · On-site

$155K - $180K/yr

Provide real-world offensive intelligence essential for stress-testing and refining defensive counter-measures. Directly support the evaluation of the Manticore and Kraken security platforms to ...

previous pagenext page

Showing results 21-40

All JobsOffensive Security JobsOffensive Security Jobs in Colorado

Offensive Security information

See Colorado salary details

$59.9K

$139.8K

$195.6K

How much do offensive security jobs pay per year?

As of Sep 3, 2026, the average yearly pay for offensive security in Colorado is $139,812.00, according to ZipRecruiter salary data. Most workers in this role earn between $116,700.00 and $157,700.00 per year, depending on experience, location, and employer.

What is offensive security?

An Offensive Security job involves proactively identifying and exploiting security vulnerabilities in systems, networks, and applications to help organizations strengthen their defenses. Professionals in this field, such as ethical hackers and penetration testers, simulate real-world cyberattacks to find weaknesses before malicious actors can exploit them. They use various tools, techniques, and frameworks to assess security risks, provide recommendations, and improve overall cybersecurity posture. Offensive security experts often work for security firms, enterprises, or government agencies to ensure robust digital protection.

What does a typical day look like for someone working in offensive security?

A typical day in Offensive Security involves conducting penetration tests, vulnerability assessments, and red teaming exercises to identify and exploit potential weaknesses in systems and networks. You may spend time analyzing findings, preparing detailed reports, and collaborating with IT teams to discuss remediation strategies. The role often requires staying current with emerging threats and tools, as well as participating in team meetings to review attack simulations or incident scenarios. Regular communication with clients or internal stakeholders is also common to explain technical concepts in an accessible way. The dynamic nature of the work keeps each day interesting and fosters continuous learning and problem-solving.

What are the key skills and qualifications needed to thrive in offensive security, and why are they important?

To thrive as an Offensive Security professional, you need a deep understanding of networks, operating systems, penetration testing methodologies, and typically hold a degree in computer science or a related field. Familiarity with tools such as Metasploit, Burp Suite, Nmap, as well as certifications like OSCP or CEH, is often required. Strong analytical thinking, attention to detail, effective communication, and ethical judgment are essential soft skills. These abilities are crucial for identifying vulnerabilities, communicating risks, and helping organizations improve their security posture.

What are popular job titles related to Offensive Security jobs in Colorado?

For Offensive Security jobs in Colorado, the most frequently searched job titles are:

What job categories do people searching Offensive Security jobs in Colorado look for?

The top searched job categories for Offensive Security jobs in Colorado are:

What cities in Colorado are hiring for Offensive Security jobs?

Cities in Colorado with the most Offensive Security job openings:

Offensive Security jobs near you
Infographic showing various Offensive Security job openings in Colorado as of August 2026, with employment types broken down into 100% Full Time. Highlights an 100% In-person job distribution, with an average salary of $139,812 per year, or $67.2 per hour.

Application Security Consultant

DirectDefense

Englewood, CO • On-site, Remote

$70 - $90/hr

Contractor

Posted 14 days ago

Job description

Job Description
Are you passionate about application security and ready to make an immediate impact in a contract role? We are seeking a motivated Application Security Consultant with experience in software development, DevOps, or software quality assurance-or a strong foundation in application security. In this role, you will assess customer applications, identify and validate vulnerabilities, leverage innovative security tools, and recommend practical remediation strategies.
Contract Length: Three months, with the possibility of an extension or conversion to a full-time position
Hourly Rate (1099): $70-$90 per hour
Responsibilities:
  • Conduct thorough analysis to identify and exploit vulnerabilities in customer applications.
  • Collaborate with development teams to creatively remediate identified vulnerabilities and enhance application security.
  • Perform dynamic testing and static code reviews to identify security vulnerabilities and weaknesses.
  • Utilize industry-leading tools, with a focus on application testing workspaces such as Burp Suite.
  • Stay abreast of the latest developments in application security, tools, and methodologies such as OWASP ASVS

Qualifications:
  • 1-3 years of hands-on experience in network/infrastructure security and penetration testing.
  • Bachelor's degree in Computer Science, Engineering, Math, or a related field (or equivalent hands-on experience, classroom project work, or internship).
  • Strong understanding of application security principles and common vulnerabilities.
  • Experience in performing dynamic and static code reviews.
  • Familiarity with vulnerability scanning tools, specifically Burp Suite.
  • Excellent written and verbal communication skills, with the ability to convey complex security topics clearly and concisely to diverse audiences.
  • Experience in automated and manual application testing is a big plus.

Preferred Skills:
  • Certifications such as OSCP, BSCP, OSWE, GWAPT or related offensive security certifications are a strong plus.
  • Knowledge of common web application vulnerabilities and exploitation techniques.
  • Understanding of cryptography, authentication, and authorization mechanisms.
  • Excellent problem-solving skills and a proactive approach to addressing security concerns.
  • Effective communication and collaboration skills to work with cross-functional teams.
  • Experience with automated and manual application testing is a significant plus.
  • AWS experience is a big plus.

Candidates must currently reside in the United States and be able to complete the client's required U.S.-based background-screening process. Applicants must also be legally authorized to work in the United States without current or future sponsorship.
A little about DirectDefense
Since coming together in 2011 to form DirectDefense, our team has been committed to offering Cybersecurity defense strategies that are unmatched in the industry. Whether we are performing assessments of networks, platforms, and applications or applying managed services to improve your organization's security posture, we are focused on providing world-class services that don't just work-they work for you.
OUR MISSION
We establish partnerships with our clients based on trust and results. We leverage our deep industry knowledge and expertise to identify and remediate blind spots in your security program, provide meaningful visibility of your entire enterprise, and align your organization with security best practices and compliance standards.
OUR VISION
We aim to secure organizations across all industries against advanced threats and attacks in today's world. Partnering with organizations, we provide unmatched information security services designed to improve your overall security posture, close gaps, and continuously track vulnerabilities through ongoing education and support.

Apply