Top Remote Cyber Security Jobs in Washington, DC

The fellowship provides military spouses and separating service members with cybersecurity training and hands-on experience through projects and vendor training, aimed at enhancing their security skills.

Designs and implements security controls across cloud platforms, operating systems, Kubernetes, networks, and CI/CD. Audits infrastructure for weaknesses, develops security and privacy improvements, performs threat modeling, and drives remediation. The role includes software development, infrastructure security, incident containment, and technical security analysis while collaborating with engineering teams in a distributed startup environment.

Conduct application security assessments, identify and validate vulnerabilities, perform dynamic testing and static code reviews, and recommend remediation strategies. Collaborate with development teams to improve application security, use tools such as Burp Suite, and stay current with application security methodologies, web vulnerabilities, and exploitation techniques.

Lead Wikimedia Foundation’s product security strategy, prioritize security and privacy engineering initiatives, develop platform interventions against threats, strengthen organizational security culture, and communicate with Wikimedia communities. The role partners with cross-functional and departmental leaders on information security, represents the Foundation to volunteers, and applies AI-based tools to security analysis, code review, and software engineering. Prior product management experience is not required, but strong technical, security, communication, and online-community experience are important.

Supports client engagements focused on cryptographic risk, post-quantum readiness, encryption modernization, PKI, and key lifecycle management. Responsibilities include cryptographic asset discovery, inventory development, risk analysis, PKI and TLS assessments, PQC migration planning, remediation tracking, standards alignment, client workshops, documentation, and presenting findings to technical stakeholders.

Lead the engineering modernization of enterprise data protection and DLP capabilities across cloud, SaaS, endpoints, email, and collaboration platforms. Build automated Policy-as-Code workflows, CI/CD pipelines, reusable controls, integrations, detection logic, guardrails, and operational metrics. Partner with technical, compliance, privacy, legal, and business teams to improve security effectiveness, reduce false positives, automate governance, investigate events, and demonstrate measurable risk reduction.

Lead pre-sales security architecture engagements by designing and validating defense-in-depth solutions across hybrid, cloud, application, identity, endpoint, network, and data environments. Conduct security assessments, create remediation roadmaps, integrate security platforms, and support DevSecOps, SOC, detection engineering, incident response, compliance, and risk programs. Collaborate with sales, engineering, clients, and executive stakeholders to communicate technical trade-offs and deliver scalable enterprise security strategies.

Design, develop, and maintain secure Linux endpoint privilege-management capabilities across Rust, C, and .NET. Build kernel-facing agents, PAM modules, privileged services, authentication and authorization workflows, systemd services, and Linux packages. Troubleshoot low-level security and execution issues involving permissions, SELinux, AppArmor, and race conditions. Collaborate with engineering and QA teams on architecture, testing, production support, and cross-platform functionality while using AI-assisted development tools.

Owns the company-wide IT and cybersecurity program, including SOC 2 compliance, cloud security, penetration-test remediation, business continuity testing, endpoint management, access controls, onboarding and offboarding, AI security governance, vendor reviews, security training, incident response, and employee IT support. The role partners with engineering, HR, Finance, leadership, auditors, and healthcare customers while managing security across AWS, Heroku, Cloudflare, Google Workspace, GitHub, and related tools.

Build and automate security infrastructure across AWS and Kubernetes, including cryptographic material lifecycle, telemetry pipelines, policy-as-code, compliance monitoring, and incident-response tooling. Develop agentic AI workflows using coding assistants, MCP integrations, and custom harnesses. Apply threat modeling and secure architecture review while partnering with engineering, risk, auditors, vendors, and clients. The role emphasizes production software, cloud-native automation, continuous control monitoring, and eliminating manual security toil.

Build and operate a reliable security platform across hundreds of AWS environments. Responsibilities include security telemetry and OpenSearch infrastructure, GitOps deployments, Kubernetes and AWS security controls, cross-account and multi-region architecture, Python automation, and agentic AI workflows. The role participates in on-call support, security incident enablement, audit evidence automation, and reliability improvements while collaborating with Security Operations, Risk, and SRE teams.

Lead alliance and technical product marketing: build joint positioning and go-to-market enablement with strategic partners, own competitive intelligence and technical differentiation, create content and launch programs that drive pipeline and inform product and GTM strategy.

Lead design and implementation of security controls, drive audit readiness across multiple frameworks (FedRAMP, SOC2, ISO, CMMC), gather audit evidence, liaise with auditors and government officials, translate compliance into practical controls with engineering/product teams, draft policies, automate compliance processes, and represent the program in customer security reviews.

Design and execute integration and security-focused test plans for PAM and Keeper Secrets Manager. Validate integrations across cloud providers, IAM, CI/CD, and OS/databases; perform reliability and security testing; analyze logs and defects; contribute to automation and collaborate with engineering, product, and security teams to ensure reliability and compliance.

Customer-facing cloud security presales engineer who consults with executives and security teams, develops security services and lab-based use cases, educates sales, creates collateral, and stays current on security technologies and frameworks to support sales engagements.

Customer-facing pre-sales cybersecurity engineer who performs technical discovery, assesses email security architectures, designs and presents email security solutions (SEG, API-based protections, DLP, ATP), runs demos and PoCs, collaborates with vendors, enables sales teams, and ensures smooth handoff to delivery.

Execute offensive security engagements (red team, app/cloud assessments), develop custom exploits/payloads and tools, translate field findings into product improvements, integrate AI tooling into workflows, and mentor peers while producing clear, actionable client reports.

Lead and grow a team of offensive security engineers, ensure high-quality red team, application, and cloud security engagements, drive operational metrics (utilization, margin, NPS), integrate field findings into product, champion AI/automation, and support sales and client relationships at executive levels.

Senior privacy consultant to design and implement privacy technology and governance. Lead OneTrust platform configuration, privacy assessments (ROPA, PIA, PTA, DSAR), data discovery, classification, mapping, and privacy-by-design. Translate privacy requirements into technical solution architectures and Azure integrations (Data Lake, Data Factory, Databricks, SQL), build workflows, dashboards, reports, and operational procedures, and implement data protection controls (masking, encryption, retention).

Lead enterprise security architecture across hybrid and multi-cloud environments. Develop and govern reference architectures, perform architecture reviews, drive remediation, and define security standards for identity, network segmentation, data protection, monitoring, CI/CD, and AI platforms. Partner with engineering teams, support incident response and audits, and ensure secure integration of acquisitions and research/AI workloads.

Lead product security for PTC SaaS: assess and remediate vulnerabilities, drive automation for detection/remediation, consult on secure design and SSDLC, perform threat modeling and application security assessments, and guide engineering teams on cloud, API, mobile, and DevSecOps controls.

Support threat intelligence, incident analysis/response, penetration test coordination, vulnerability scanning and remediation tracking, security tool administration, dashboard maintenance, and adherence to security policies while learning and developing cybersecurity skills.

Lead and grow Kroll's CrowdStrike Falcon Cloud Security deployment practice: deploy, configure, integrate, tune CNAPP across AWS/Azure/GCP, build detections and SOAR playbooks, validate coverage, mentor consultants, and hand off runbooks to operations.

Design and scale secure AWS environments, build and maintain Terraform IaC and pipelines, lead security assessments and incident response, integrate security into CI/CD, define IAM/encryption/network controls, monitor and investigate cloud threats, and coach teams on cloud security best practices.

Lead security architecture and design reviews, run penetration tests and threat modeling, build CI/CD security automation, secure AWS cloud and containerized workloads, develop security observability and incident response, manage bug bounty and vulnerability workflows, and create security standards, training, and roadmap.