Top Remote Cyber Security Jobs in Washington, DC

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.

Conduct ISO 27001 and information security management system audits for assigned clients, managing engagements from contracting and scheduling through planning, assessment, reporting, invoicing, and follow-up. Lead audit teams when needed, mentor junior auditors, maintain client records, coordinate travel, and ensure audits meet BSI, regulatory, scheme, cost, timing, and customer satisfaction requirements.

Owns company-wide security across product, infrastructure, corporate systems, and IT. Responsibilities include fixing authentication and authorization issues, managing keys and secrets, hardening internal tools, improving permissions, contributing to backend engineering, and leading security reviews, incident response, and security tooling. This hands-on role requires broad security expertise, strong software engineering ability, and comfort working in an ambiguous early-stage startup environment.

Manage security operations and lead a security engineering team defending endpoints, SaaS, infrastructure, and corporate systems. Serve as senior Incident Commander, oversee detection and response using CrowdStrike, conduct cybersecurity risk assessments, and improve vulnerability, patch, access, and configuration management. Build detection coverage across endpoint, identity, SaaS, and cloud signals while partnering with AppSec and technical leaders. Lead the company’s AI security strategy and develop specialized security capabilities.

Build and operate automated security infrastructure across AWS and Kubernetes, including cryptographic-material lifecycles, security telemetry, compliance automation, policy-as-code, threat modeling, and CI/CD security controls. Develop agentic AI workflows using tools such as Claude Code and MCP integrations. Support incident response, review security architecture, automate evidence collection, and partner with engineering, audit, risk, vendors, and clients to improve security posture at scale.

Build and operate reliable security infrastructure across hundreds of AWS environments. Responsibilities include security telemetry and log analytics, OpenSearch, GitOps deployments, Kubernetes and EKS security, cross-account cloud infrastructure, Python automation, AI-assisted engineering workflows, compliance evidence collection, incident support, and on-call operations. The role partners with Security Operations, Risk, and SRE teams to automate manual processes and improve platform resilience.

Leads OT network security engineering across manufacturing sites, translating enterprise architecture into segmentation, firewall, DMZ, access-control, and remote-access implementations. Coordinates production-sensitive cutovers with plant, IT, and safety teams while protecting manufacturing operations. Develops site-specific designs, compensating controls, implementation playbooks, and network documentation. Requires deep ICS expertise, knowledge of industrial protocols and security standards, and 10+ years of OT or industrial network security experience.

Build, integrate, and operate cloud-native security controls across infrastructure, data platforms, applications, CI/CD pipelines, and enterprise services. Develop CSPM and DLP capabilities, detection logic, automation, and incident-response mechanisms. Integrate controls with SIEM platforms, apply infrastructure-as-code and automated testing practices, and support reliable production operations. Collaborate with platform, application, and product teams to improve cloud security effectiveness and developer adoption.

Lead and develop the Security team while owning the company-wide security and compliance program. Responsibilities include managing SOC 2, PCI DSS, GDPR/CCPA, audits, policies, vendor risk, security awareness, and customer security communications. The role also provides technical direction for security tooling, cloud security, identity and access management, application security, vulnerability management, architecture reviews, and threat modeling.

Operate and improve security across cloud, endpoint, identity, SaaS, and corporate environments. Responsibilities include 24/7 alert triage, incident investigation and containment, threat hunting, phishing and fraud analysis, vulnerability management, evidence collection, and incident reporting. The role also engineers security-tool integrations and SOAR automation, supports PCI DSS and SOC 2 audits, maintains security posture, and communicates risks and remediation guidance to technical and nontechnical stakeholders.

Implements and supports security data ingestion pipelines across applications, cloud services, infrastructure, security tools, and business systems. Develops transformations, parsing, normalization, enrichment, masking, validation, and delivery workflows. Troubleshoots data quality and pipeline issues, documents architectures and data flows, coordinates with client stakeholders, and supports SIEM, detection, investigation, observability, and automation use cases. Requires data engineering experience, scripting, query languages, integration knowledge, and strong client communication.

Leads enterprise data protection initiatives, including data classification, DLP policy management, eDiscovery support, insider threat investigations, and data governance. Uses behavioral analytics, audit logs, SIEM, UEBA, and forensic tools to identify misuse and leakage. Develops security controls, incident response playbooks, and compliance updates while collaborating with Legal, HR, and Compliance. Participates in threat-hunting and red, blue, and purple team exercises. Requires five-plus years of relevant experience and eligibility for a Top Secret clearance.

Lead product security initiatives for cloud, AI, and enterprise platforms. Responsibilities include threat modeling, security architecture reviews, identifying systemic weaknesses, developing secure-by-design guidance and reference architectures, advising engineering and product leaders, leveraging AI and automation for scalable security assessments, investigating emerging attack paths, mentoring teams, and improving security review methodologies and tooling.

Leads and develops an engineering team building and operating cloud security controls as software products. Provides technical direction through architecture, design, and code reviews; owns production reliability and continuous improvement; translates security risks into automated, scalable solutions; and coordinates roadmaps and dependencies with product, platform, application, and security teams. The role also drives agile delivery, secure engineering practices, mentoring, and adoption of reusable cloud security patterns across AWS, Azure, and GCP.

Lead corporate security investigations and incident response across identity, endpoints, SaaS, email, and security platforms. Improve detection, response, Zero Trust controls, automation, and incident readiness. Conduct vendor security assessments, support customer security questionnaires, document risk decisions, and collaborate with Security, IT, Engineering, Legal, GRC, Procurement, Sales, and Customer Success teams.

Owns IT systems administration and security operations for a fully remote workforce. Responsibilities include managing Microsoft 365 and Google Workspace, endpoint and identity platforms, security tools, access controls, threat monitoring, incident response, vulnerability management, compliance evidence, disaster recovery, vendor relationships, reporting, and operational roadmaps.

Manage SOC 1, SOC 2, and ISO 27001 compliance programs, including internal and external audits, control enforcement, corrective actions, and policy updates. Monitor security alerts, support incident investigations, coordinate penetration testing, and administer password and phishing management systems. Lead security awareness initiatives, advise stakeholders, collaborate with Legal on encryption regulations, and drive continuous improvements to the organization’s information security posture.

Security Engineer responsible for application security, vulnerability and threat management, cloud and Kubernetes security, DevSecOps tooling, incident response, forensic analysis, and secure system architecture. The role integrates security testing into CI/CD pipelines, automates security tasks, supports IAM and cryptographic key management, and collaborates with engineering teams to strengthen security processes and tooling.

Leads complex digital forensics and incident response engagements, including ransomware, APT, nation-state, insider threat, host and network forensics, malware triage, cloud investigations, and threat attribution. Provides technical oversight, client leadership, methodology development, mentorship, tooling improvements, pre-sales support, and external thought leadership. Participates in on-call coverage and supports high-severity incident surges.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Leads cybersecurity execution across Danaher’s global Life Sciences operating companies. Owns cyber strategy implementation, risk and vulnerability management, security architecture, assurance, certifications, data and application security, product security coordination, M&A cyber integration, and OT/manufacturing security. Builds globally distributed security teams, manages matrixed stakeholders, supports regulated environments, and oversees cyber PMO performance. The role is based in Washington, D.C., remote/hybrid, and requires 25–30% international travel.

Own the full lifecycle of enterprise cybersecurity accounts, from deployment planning and integrations through adoption, renewal, and expansion. Serve as the primary technical contact for security, engineering, and IT stakeholders. Guide vulnerability management workflows, cloud and scanning-tool integrations, remediation prioritization, and compliance reporting. Translate customer feedback into product improvements and create scalable onboarding playbooks.

Provides L1 technical support for enterprise customers using cloud email and SaaS security platforms. Resolves configuration, API, integration, false-positive, and threat investigation issues through troubleshooting and log analysis. Communicates root causes and recommendations, partners with Engineering and Product, supports onboarding, maintains knowledge documentation, and identifies recurring customer issues. Requires 4+ years of cybersecurity, SaaS, or enterprise technical support experience, strong email security and cloud ecosystem knowledge, API troubleshooting skills, and excellent communication.

Own FAR.AI’s internal IT and security function, including accounts, devices, identity and access management, onboarding, offboarding, office networking, support, endpoint hardening, data protection, governance, and vendor risk. The role will remediate security gaps using threat modeling, automate self-service infrastructure, partner across teams, communicate and manage change, and hire and lead an IT Coordinator.