Top Remote Cyber Security Jobs in Washington, DC

The VP and CISO will establish and lead the enterprise information security program, define security strategy and roadmap, oversee security architecture, policies, compliance, risk management, third-party partners, and security operations. The role advises executives and the Board, manages distributed security teams, engages regulators and auditors, and translates cybersecurity risks into strategic business decisions.

Lead development of security enforcement integrations that warn or block unsafe AI artifact installations, serve sanitized alternatives, and record audit events. Build reliable event-driven backend systems with queues, webhooks, idempotency, retries, back-pressure, approval flows, dry runs, audit logs, and rollback mechanisms. Integrate third-party security, infrastructure, and identity APIs, with potential future work on fleet-wide revocation controls and security platform integrations.

Leads information security architecture and program initiatives across IT and business projects. Provides security consulting, develops enterprise data, network, and application protection requirements, conducts threat analysis, vulnerability assessments, penetration testing, and remediation planning. Researches emerging threats and technologies, supports control testing and incident response, and guides security team members. Requires extensive information security leadership, application and network security expertise, secure architecture knowledge, and strong communication skills.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Leads end-to-end cybersecurity execution across Danaher's global Diagnostics operating companies. Responsibilities include managing distributed security teams, cyber risk and vulnerability programs, architecture reviews, assurance and certifications, connected medical device product security, data and AI security, M&A cyber integration, application security, and OT/manufacturing security. The role serves as the senior cybersecurity leader for the platform, influencing executives and operating companies while driving regulatory compliance, continuous improvement, and global security initiatives.

Leads engineering operations, security, DevOps, quality engineering, cloud infrastructure, corporate IT, data integrations, and customer-facing technical escalations. Owns security strategy and compliance, incident management, on-call practices, reliability metrics, CI/CD, infrastructure as code, and production operations. Develops managers and senior engineers, restructures inherited teams, establishes service-level agreements, and drives automation and operational efficiency across the organization.

Lead the AWS cloud security program and manage security engineering teams. Establish AWS security standards, oversee IAM, encryption, logging, monitoring, vulnerability management, Terraform automation, CI/CD security, incident response, and secure architecture reviews. Manage risk registers, compliance workflows, audits, control testing, and FedRAMP, FISMA, NIST, and SA&A readiness. Guide investigations, remediation, runbooks, tabletop exercises, and secure cloud practices while reporting risks and metrics to leadership.

Monitor and secure federal cloud environments across AWS, Azure, and Google Cloud. Perform cloud threat hunting, log analysis, incident response, and develop cloud security playbooks and monitoring use cases. Ensure cloud logs are integrated with SIEM tools, tune detection systems, establish KPIs, support threat information sharing, and assist with cloud SOC tool deployment and proof-of-concept efforts.

Manage, maintain, and troubleshoot enterprise security technologies while monitoring, detecting, investigating, and remediating security incidents. Perform digital forensics, threat hunting, vulnerability and risk assessments, audits, compliance checks, evidence preservation, and root cause analysis. Collaborate with internal teams and third parties, implement new security solutions, create security documentation, and support incident response during regular and on-call hours.

Partner with sales to design and present data security solutions for SLED customers. Lead technical evaluations, gather requirements, build test plans, configure proof-of-concepts, and guide customers to successful outcomes while collaborating across GTM teams.

Design, implement, and maintain security controls across cloud (AWS) and on-prem systems. Lead vulnerability management, incident response, and remediation. Serve as SME for SIEM, SAST/DAST, IAM. Embed security in SDLC, support SOC 2/ISO 27001 audit readiness, mentor junior engineers, and recommend control improvements.

Leads end-to-end Cisco Duo MFA and access management engagements, including architecture, deployment, integrations, migrations, automation, device trust, security reviews, documentation, and client handoff. Supports Okta and Ping Identity projects, contributes to presales activities, owns technical delivery, mentors junior engineers, and manages client communication. The role integrates identity platforms with VPNs, cloud services, applications, directories, endpoint management tools, and enterprise infrastructure.

Leads and matures the organization’s third-party risk management program, including vendor onboarding, risk assessments, continuous monitoring, remediation, contract security requirements, regulatory alignment, reporting, and executive risk guidance. Partners with Information Security, Legal, Compliance, Procurement, Privacy, and business teams to manage vendor security, privacy, operational, continuity, and concentration risks.

Leads enterprise Identity, Credential, and Access Management architecture and application security integration for Defense Logistics Agency mission systems. Defines identity, authentication, authorization, access governance, provisioning, and integration requirements; designs secure architecture patterns; supports application onboarding and modernization; and guides RBAC, privileged access management, and segregation of duties implementations. Provides technical leadership and communicates recommendations to government stakeholders, application owners, engineers, developers, and cybersecurity teams.

Lead technical marketing for API, AI agent, and application security by deploying and testing Akamai products, building PoCs, demos, labs, and attack simulations, creating technical content and enablement, validating messaging, and presenting technical briefings while collaborating with product, engineering, and field teams.

Leads enterprise cybersecurity monitoring, threat detection, vulnerability management, SIEM analytics, threat hunting, incident response, and continuous monitoring for federal and DoD-aligned environments. Oversees ACAS/Nessus scanning, STIG validation, patch compliance, detection engineering, threat intelligence, reporting, and remediation coordination. Collaborates with cloud, DevSecOps, ISSO, and engineering teams while mentoring junior analysts and improving security automation.

Monitors SIEM dashboards, correlates logs across security and cloud sources, investigates alerts, assesses threats, performs preliminary incident triage, tunes detection rules, documents findings, and escalates high-risk events. The analyst supports continuous monitoring, SOC playbooks, detection use cases, reporting, and coordination with incident response and engineering teams in a DoD-aligned environment.

Performs application security assessments, secure code reviews, API and CMS security testing, threat modeling, vulnerability analysis, and remediation validation. Integrates SAST, DAST, dependency scanning, secrets management, and security controls into CI/CD pipelines. Advises developers and architects on secure coding, authentication, encryption, and DevSecOps practices while supporting monitoring and incident triage. Requires an active Top Secret clearance, technical bachelor’s degree, seven years of relevant experience, and Security+, CISSP, or CCSP certification.

Designs and implements secure cloud architectures, IL5 controls, STIG-aligned hardening baselines, identity integrations, and cybersecurity controls for federal and DoD-aligned platforms. Performs security assessments, vulnerability analysis, continuous monitoring, secure deployment reviews, audit support, and remediation planning. Requires expertise in AWS, NIST, RMF, PKI, SIEM, and cloud security, along with mentoring junior engineers and documenting technical architectures. The role is fully remote but requires an active Top Secret clearance and substantial security engineering experience.

Supports AWS GovCloud IL5 cybersecurity compliance and security operations. Performs RMF impact analysis, maintains SSPs, POA&Ms, SARs, and control evidence, validates STIGs and cloud configurations, monitors vulnerabilities and logs, supports IL5 migrations, audits, ATO activities, and continuity planning, and documents remediation and compliance findings.

Leads the design, implementation, and operation of information security controls across systems, networks, endpoints, and cloud environments. Responsibilities include SIEM/MDR, EDR/XDR, SOAR, vulnerability management, PAM, Zero Trust, incident response, data protection, DLP, and cloud security. The role collaborates with IT, Privacy, Compliance, and application teams, mentors engineers, supports security architecture and SDLC practices, and may provide periodic on-call incident response support.

Build and mature the application security program across the SDLC. Manage SAST, DAST, SCA, and IAST tooling; conduct penetration tests and vulnerability assessments; drive remediation; and embed Secure by Design practices. Partner with engineering on threat modeling, secure coding, architecture reviews, and CI/CD integration. Support HIPAA, NIST, and GDPR compliance through audits, reporting, documentation, policies, and cross-functional risk reduction initiatives.

Assesses and mitigates security risks across AI, machine learning, and Generative AI systems. Responsibilities include threat modeling, vulnerability assessment, security monitoring, incident response, governance, compliance, access controls, policy development, audit support, and advising engineering and business teams on secure AI development and responsible adoption.

Twelve-week summer internship supporting application, API, and AI security testing. Responsibilities include documenting findings, researching security technologies, improving metrics and dashboards, assisting with automation, preparing technical reports, and collaborating with security and technology teams. The role is open to students pursuing cybersecurity, information technology, computer science, or related degrees who graduate in December 2027 or later.

Supports sales teams and partners in technical sales activities for cloud security products. Responsibilities include understanding customer requirements, integrating solutions, delivering technical presentations and demonstrations, managing product evaluations, responding to RFPs and RFIs, supporting partner development, discussing cloud architectures, resolving technical obstacles, and training sales and partner teams on product and business value.