Top Remote Cyber Security Jobs in Washington, DC

Staff software engineer responsible for designing, building, and operating production authorization services. The role develops role-based, attribute-based, and policy-driven access controls; leads security reviews; builds cloud-native microservices and APIs; establishes engineering standards, observability, and deployment practices; mentors engineers; and supports critical systems through on-call rotations.

Designs and deploys threat intelligence capabilities across enterprise security tooling. Integrates TIPs, SIEM, SOAR, EDR, and intelligence feeds; builds automated pipelines, detection mechanisms, enrichment workflows, and response playbooks. Develops integrations, orchestrates security tools, and applies AI, LLMs, and RAG to accelerate intelligence processing. Provides technical leadership for CTI, SOC, incident response, threat hunting, fraud, insider risk, and red-team teams.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Partners with Sales to advise enterprise customers on cybersecurity, identity, asset visibility, exposure management, and risk solutions. Leads technical discovery, solution design, demonstrations, proof-of-value and proof-of-concept engagements, customer validation, training, and executive presentations. Translates technical capabilities into business outcomes while supporting complex sales cycles and collaborating with Product, Marketing, Customer Success, and Support. Travel is typically 25–50%.

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.

Leads a team building device intelligence and reverse-engineering capabilities for xOT cybersecurity products. Sets technical strategy for device and protocol coverage, establishes documentation and testing standards, drives automation and AI-assisted development, collaborates cross-functionally, supports customer deployments and incident response, and remains hands-on with code reviews, design reviews, and production debugging. The role also owns hiring, mentoring, team growth, and engineering community development.

This role involves defining and leading the security and risk strategy for Circle's products, ensuring compliance across jurisdictions while managing product security, compliance operations, and risk assessment.

Partner with Enterprise AEs to position and sell Datadog Security products (SIEM, CSPM, CWPP, cloud workload and container/Kubernetes security) across strategic accounts. Own the security sales cycle from discovery to technical close, evangelize to security leaders, co-sell with partners and AEs, and stay current on security trends and competitors to expand customer footprint.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Leads the enterprise cybersecurity exercise and simulation program, including strategy, governance, scenario development, execution, evaluation, metrics, reporting, and continuous improvement. Manages a cybersecurity team and oversees talent development, workforce planning, and program documentation. Partners with security, resilience, technology, risk, and executive stakeholders to strengthen cyber preparedness, incident response, operational resilience, and remediation of identified gaps.

Leads enterprise AI tooling and security strategy, building secure cloud-native platforms and protecting AI models, agents, prompts, data, APIs, and outputs. Designs controls for identity, access, encryption, monitoring, threat detection, adversarial testing, governance, and incident response. Provides distinguished technical leadership, mentors engineers, establishes engineering standards, and partners across architecture, security, governance, risk, compliance, and business teams.

The Security Operations Engineer will build and manage cloud and enterprise security detections, lead incident response and threat hunting, automate security operations with SOAR playbooks, and maintain security telemetry pipelines. The role also involves vulnerability remediation, cloud architecture security reviews, cross-functional collaboration, on-call participation, and continuous improvement of runbooks and alert quality. Candidates need strong AWS security, SIEM, incident response, detection engineering, scripting, attacker tradecraft, and compliance framework experience.