Top Remote Cyber Security Jobs in Washington, DC

Own hardware certification and cybersecurity compliance for connected vehicle devices and OEM partnerships. Coordinate audits, translate ISO 21434 and other requirements into engineering controls, support threat modeling and firmware analysis, manage FirstNet certification, identify compliance gaps, automate evidence gathering, and communicate security posture and risk to engineering teams, customers, partners, and auditors.

Deploys, configures, optimizes, and supports the Dragos Platform within a federal customer’s industrial environment. Responsibilities include network architecture, sensor placement, integrations, upgrades, troubleshooting, monitoring, workflow development, training, documentation, stakeholder management, and customer engagement. The role requires onsite collaboration in Washington, DC, active Top Secret clearance, extensive ICS/OT cybersecurity experience, networking expertise, scripting, Linux, Docker, SIEM, ELK, and up to 30% travel.

Partners with Sales to advise enterprise customers on cybersecurity, identity, asset visibility, exposure management, and risk solutions. Leads technical discovery, solution design, demonstrations, proof-of-value and proof-of-concept engagements, customer validation, training, and executive presentations. Translates technical capabilities into business outcomes while supporting complex sales cycles and collaborating with Product, Marketing, Customer Success, and Support. Travel is typically 25–50%.

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.

Design, build, and operate security-focused software, services, automation frameworks, APIs, and developer platforms. Integrate security controls into CI/CD and cloud-native workflows, implement identity and access-management capabilities, conduct secure code reviews and threat modeling, and maintain security telemetry systems. Collaborate with engineering, security, and compliance teams, support incident response, translate emerging threats into engineering requirements, and mentor engineers on secure coding and architecture.

Leads cybersecurity compliance and AI governance across NIST, CMMC, EAR, and ITAR frameworks. Maintains SSPs, POA&Ms, audit evidence, risk assessments, and compliance policies; evaluates AI vendors and use cases; embeds guardrails, access controls, data classification, logging, and review gates into LLM, MLOps, and DevSecOps workflows. Partners with engineering, security, legal, assessors, and government stakeholders to mature organizational compliance and responsible AI practices.

Sets application security direction and standards across engineering teams. Builds scalable security tooling, automation, and observability; leads threat modeling, risk assessments, code reviews, and multi-team remediation. Develops strategies for AI-powered systems and agentic development risks, API security, and software supply chain security. Partners with engineering and security teams, prioritizes investments, communicates risk to leadership, and mentors AppSec engineers.

Protect corporate data through DLP implementation, tuning, alert review, false-positive reduction, and control optimization across web, endpoint, email, cloud, and SaaS environments. The engineer will review data protection programs, improve monitoring and blocking controls, collaborate with business partners, and use automation and emerging AI tools to strengthen security operations.

This role involves defining and leading the security and risk strategy for Circle's products, ensuring compliance across jurisdictions while managing product security, compliance operations, and risk assessment.

The VP of Security will lead Engine’s security strategy, engineering, operations, AI security, corporate IT, and enterprise trust. Key priorities include building an AI security function, securing agent identities and AI gateways, leading AppSec, SecOps, and CloudSec, strengthening identity and access controls, managing corporate IT, supporting SOC 2 and PCI controls, and representing security to executives, the board, and enterprise customers.