Top Remote Cyber Security Jobs in Washington, DC

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audit programs. Author system descriptions and policies, manage risk treatment plans, track remediation, support internal audits, and partner with Engineering, Legal, Privacy, and Product to drive control ownership and audit readiness.

Support DoD modernization engagements by implementing and validating secure configurations, supporting ATO/eMASS activities, producing operational runbooks, coordinating cutovers and testing, remediating vulnerabilities, and automating operations (scripting/AIOps) with emphasis on mainframe/legacy environments and DoD security frameworks.

Hands-on offensive and defensive security engineer for a Layer 1 blockchain: audit Move modules, Solidity and Rust code, build fuzzers/static analysis/formal-verification tooling, threat-model protocol layers, run bug bounty triage, lead incident response, and partner with engineers and external auditors to harden the network against sophisticated adversaries.

Lead and deliver information security governance, risk, compliance, and privacy assessments; develop security programs, roadmaps, policies and executive presentations; advise C-level clients; perform PCI and CMMC advisory services; mentor staff and produce remediation recommendations and reports.

Lead enterprise security strategy for AI and cloud: design secure AI/ML architectures, enable secure cloud migrations (on‑prem to AWS/Azure), implement zero‑trust and IAM, secure data pipelines/APIs, establish governance and compliance (HIPAA/NIST), mentor teams, and drive audit‑ready security controls across AI and hybrid environments.

Design, implement, and monitor internal security tooling and controls across endpoints and infrastructure. Enforce endpoint configurations via MDM, manage identity and zero-trust SSO solutions, automate security operations with IaC and scripting, perform log analysis and incident response, and collaborate with client platform and IT teams to harden systems and support threat hunting.

Support cybersecurity engineering for a VA healthcare modernization project: secure AWS and hybrid environments, support RMF/ATO and compliance, configure and monitor AWS security services, produce SSPs/POA&Ms/SOPs, perform vulnerability assessments and DISA STIG hardening, integrate security into DevSecOps and CI/CD, and collaborate with stakeholders on security controls and remediation.

Lead design and management of security architecture (SIEM, EDR, DLP, firewalls, VPNs), drive incident response and detection tuning, perform vulnerability and risk assessments, support compliance/audits (HIPAA, PCI-DSS, NIST, ISO 27001), and provide cross-functional security guidance and training.

Lead enterprise strategy and engineering to defend against AI-powered threats. Design detection, prevention, and response architecture for adversarial AI, integrate controls into cyber tooling, build threat models, prototype defensive AI, and mentor teams while influencing leadership and vendor selection.

Manage and execute RCA's cybersecurity program: lead audits and vendor risk assessments, run security awareness/phishing programs, oversee vulnerability remediation and MDM, ensure HIPAA/HITECH/NIST compliance, build security reporting, and coordinate incident response and tabletop exercises.

Lead enterprise cybersecurity and IT operations for a HIPAA-regulated healthcare company: build and mature security programs, manage IAM/endpoint/cloud security, drive vulnerability management and incident response, ensure compliance (HIPAA/HITECH), oversee IT operations and vendor risk, and mentor a technical team while partnering with cross-functional leadership.

Lead and improve a 24x7 SOC by partnering with frontline analysts, owning operational metrics (MTTD/MTTR, SLAs), driving data-driven improvements, coaching analysts into career paths, optimizing tooling and automation (SIEM/SOAR), and supporting global handoffs across US, Ireland, and India.

Lead FedRAMP, SOC 2, and ISO 27001 compliance efforts by hardening AWS and Kubernetes infrastructure, implementing security controls, automating evidence collection, improving CI/CD security, and collaborating with security, legal, and engineering teams to support regulated customers.

Manage governance, risk, and compliance for SLED customers: develop and maintain SSPs, POA&Ms, policies, control mappings (NIST/FedRAMP/CJIS/HIPAA), evidence repositories, IRP/BCP, support audits, remediation tracking, and continuous monitoring with cross-functional teams.

Support ATO documentation and assessment for a cloud-based federal courts modernization program. Coordinate with security, engineering, and PM teams; create Visio diagrams; monitor, test, and troubleshoot IA issues; analyze CND/SIEM logs; assess configurations; implement enterprise security policies and procedures; manage vulnerability tracking and incident documentation; provide AWS cloud security expertise and ensure compliance with NIST, FedRAMP, CIS, and ISO 27001.

Engineer and automate DevSecOps security workflows for a continuous ATO pipeline on AWS GovCloud. Integrate and automate security tooling (scans, triage, evidence, continuous monitoring), implement IaC scanning, perform cloud inventory and drift detection, mentor engineers, and produce compliance and ATO artifacts mapped to NIST 800-53/800-171.

Perform application-security engineering: run SAST/DAST scans, triage and remediate vulnerabilities, integrate Fortify/JFrog Xray/OWASP ZAP into CI/CD, support software-supply-chain/SCA efforts, and collaborate with developers to document and resolve security findings.

Contribute to corporate information security by assessing designs, selecting controls, performing threat modeling and vulnerability management, supporting risk and vendor assessments, and advising engineering teams on secure solutions and governance.

Design, implement, and test security controls for endpoints, identity, network and infrastructure. Lead vulnerability/patch management, coordinate penetration tests, manage third-party risk, triage incidents, and assess AI/LLM risks while partnering with IT and engineering to enforce Zero Trust and secure system deployments.

Lead architecture and evolution of enterprise, data center, and cloud networks for hyperscale AI; design secure, high-performance fabrics (spine/leaf, RDMA); build AI-agent review frameworks; implement segmented zero-trust network designs; set resiliency, observability, and capacity standards; mentor global engineers and guide cross-functional initiatives.

Design, build, and operate firewall, segmentation, and zero-trust controls across data center, corporate, and cloud networks. Implement infrastructure-as-code for policy and CI/CD deployment, manage lifecycle and rule hygiene, build network detection capabilities, operate VPN/remote access patterns, and document architecture and runbooks while partnering with Network Engineering and Security Operations.

Join IT & Security to secure and scale enterprise IT, cloud, network, and infrastructure; build automation and tooling; support detection, response, and vulnerability management; improve identity, endpoint, and systems security; and partner cross-functionally to develop processes that enable secure, reliable, and scalable AI workloads.

Lead product security across application, CI/CD/supply-chain, and Kubernetes-based infrastructure. Own PKI and mTLS, vulnerability management, product incident response, infra hardening, and partner with hardware/firmware teams on secure boot, key storage, and supply-chain integrity. Drive secure SDLC, SAST/DAST/SCA, SLSA-aligned controls, and mentor engineering teams while building security programmatic controls.

Own cloud and network security, identity and PKI systems, and compliance for cloud and hybrid environments. Design secure cloud networking, manage NGFW/IDS/IPS, implement IAM/PAM/MFA, operate PKI and cryptography, maintain SIEM/EDR, and implement controls for CMMC L2, FedRAMP, and NIST 800-171. Support audits, documentation, risk assessments, and automation for compliance evidence and hardening standards.

Lead accreditation, authorization, and continuous monitoring for multi-domain classified systems; develop SSPs/SARs/POA&Ms; serve as ISSO during standup; manage ATO/ATC coordination, TEMPEST/EMSEC and RED/BLACK requirements; drive incident response, stakeholder coordination, and security policy for a new classified facility.