Salary: $105,000.00 - $115,000.00 Annually
Location : Statewide, CO
Job Type: Full Time
Job Number: EGB93323
Department: Governor's Office of Information Technology
Opening Date: 09/04/2026
Closing Date: 9/13/2026 11:59 PM Mountain
FLSA: Determined by Position
Primary Physical Work Address: (Remote From Anywhere In CO)
FLSA Status: Exempt; position is not eligible for overtime compensation.
Department Contact Information:
Type of Announcement: This announcement is not governed by the selection processes of the classified personnel system. Applications will be considered from residents and non-residents of Colorado.
How To Apply: Please submit an online application for this position at https://www.governmentjobs.com/careers/colorado. Reach out to the Department Contact to apply using a paper application, including any supplemental questions. Failure to submit a complete and timely application may result in the rejection of your application. Applicants are responsible for ensuring that application materials are received by the appropriate Human Resources office before the closing date and time listed.

Description of Job
IMPORTANT NOTE: Please review your application to ensure completion. For the most equitable applicant experience, OIT's hiring team considers only the contents of your application to review your qualifications. Please do not include any attachments (such as resume or cover letter) with your application as these items are not used by OIT's hiring team.
Are you passionate about cybersecurity and defending vital assets? OIT is seeking a dedicated Cyber Threat Analyst II to join our enterprise cybersecurity program and serve as a subject matter expert in the fight against emerging threats. In this role, you will research and monitor the threat landscape (dark web, SIEM, industry feeds) to track malicious infrastructure and emerging risks; actively hunt for system exposures, disrupt active threats, and implement deception techniques. You will be a strategic advisor and translate complex threat intelligence into actionable reports for management and technical teams.
Essential Duties:

• Threat Intelligence & Monitoring: Actively monitor network, host, and application threats, including tracking external actors and rogue insiders.
• In-Depth Research: Conduct comprehensive research to uncover patterns and trends. Maintain a forward-thinking approach to anticipate evolving risks.
• Strategic Collaboration: Work closely with internal technical teams, business units, and external partners-including government agencies, law enforcement, and private intelligence-sharing groups.
• Actionable Reporting: Author clear, insightful reports for Senior Leadership and stakeholders to ensure situational awareness and support informed decision-making.
• Proactive Defense: Participate in simulation exercises to identify vulnerabilities. Help implement defensive solutions to disrupt threats before they impact the organization.
• Communication: Distill complex threat intelligence into clear, actionable information for both technical and non-technical audiences.

Going beyond standard monitoring, this role centers on proactively engaging threats and continuously assessing our security posture. Your efforts will directly fortify our networks, applications, and critical data, playing a pivotal role in the resilience of our public service infrastructure.
Minimum Qualifications, Substitutions, Conditions of Employment & Appeal Rights
A wide salary range is posted for this position and any job offer is based upon a salary analysis to comply with the Colorado Equal Pay for Equal Work Act. The salary analysis considers relevant experience, education, certifications, and state seniority as compared to others doing substantially similar work. While most salary offers are made within the posted range, occasionally an offer is made below or above the posted range based upon this salary analysis.

This is a skills-based job announcement. The required minimum qualifications and/or education (if substituting for the proven experience, knowledge, and skills), are as follows:
To better understand your qualifications and increase your opportunity to move forward in the selection process, please indicate in your work history for each job the outcomes you have achieved that you believe are most relevant to this job.
Minimum Qualifications:
Minimum of three (3) years of cybersecurity experience (or information technology coupled with cybersecurity), with at least two (2) years in an intelligence or incident response security practitioner role.

Substitutions:

• Additional appropriate education will substitute for the required experience on a year-for-year basis, but cannot completely substitute for these qualifications.
• Training or Certification related to the work assigned to the position will be assigned credit towards substitution for experience and/or education, but cannot completely substitute for these qualifications.
• If the minimum qualifications include a degree requirement, additional appropriate paid or unpaid experience will substitute for the required education on a year-for-year basis.

Preferred Qualifications:

• Expertise in the CTI lifecycle, adversary TTPs (MITRE ATT&CK framework), threat hunting, and incident response/tracking.
• Proficiency with SIEM, SOAR, IDS/IPS, and threat intelligence platforms; skilled in log analysis, malware assessment, and vulnerability management.
• Strong knowledge of OS security, cloud security (AWS, GCP, or Azure), and scripting languages (Python, PowerShell, Bash).
• Demonstrated experience conducting tabletop exercises and adversary emulation to strengthen organizational security posture.
• Ability to distill complex threat data for diverse audiences, maintain professional credibility, and foster an enterprise-wide security culture.

Conditions of Employment:
OIT employees must comply with any screening procedures in place at state agency locations where they might perform work.

A pre-employment background check will be conducted as part of the selection process. Post-employment background checks will be required for specific agencies as business needs dictate, which may include a polygraph exam, fingerprint-based criminal history search, reference checks, and a drug test.

This position may require travel within the specified geographic area, and to locations across the state as needed.

This position may require on-call duties as needed by the position.
Supplemental Information
If this posting indicates "remote from anywhere in CO" in the title, periodic reporting to the primary state work location designated for the position is required. All remote work must be performed in Colorado.

While candidates from out of state will be considered for this role, the candidate selected for the position must relocate and reside in Colorado on the first day of their new position. A reasonable timeframe for relocation will be established on an individual basis, while considering business needs, and determining a start date.
We know it's important to support each other, and that means having a healthy balance of work and personal time. Visit our benefits to learn more about some of our great offerings that allow us all to have fulfilling lives.

Visit our How to Apply webpage to learn more about our application process and what to expect after you apply.
01

Describe the top 3 outcomes you have achieved that you believe are relevant to this role.
02

Please describe how you learned of this job opening.
03

The Governor's Office of Information Technology (OIT) complies with Colorado's Equal Pay for Equal Work Act. While a wide salary range is posted, specific criteria (experience, education, state seniority, etc.) will be used to determine any salary offer. While most salary offers are made within the posted range, occasionally an offer is made below or above the posted range based upon this salary analysis. It is this salary analysis, rather than any negotiation process, that determines any salary offer. Please acknowledge your understanding of this process and the posted salary range for this position.

• Yes, I understand the above statement.

04

All remote work must be performed from within the State of Colorado. If you live out of state and are selected for this position you must relocate to Colorado before commencing employment. There is no form of relocation assistance, financial or otherwise, available for any position. Do you wish to proceed with your submission?

• Yes, I understand the above statement.

05

Do you currently reside in the state of Colorado?

• Yes
• No

06

If any of the State of Colorado positions listed in your employment history were performed as a contract employee, you MUST list the position/s, State Agency, and the name of the contracting company by whom you were paid during the contract position. If this does not apply, please type "N/A".
07

Do you currently require employer sponsorship for a Visa, employer-provided documentation to maintain your Visa, or employer participation in a program for the purposes of immigration status?

• Yes
• No

08

In the future, will you require employer sponsorship for a Visa, employer-provided documentation to maintain your Visa, or employer participation in a program for the purposes of immigration status?

• Yes
• No

Required Question