Top Remote Cyber Security Jobs in Washington, DC

Lead IT security architect responsible for AWS security architecture, compliance (NIST 800-171/CMMC), and GovCloud IL5/IL6 deployments. Maintain SSP, POA&Ms, evidence, and remediation tracking; coordinate with auditors and customer ISSM/ISSO; partner with DevSecOps and Engineering to implement secure baselines, logging, monitoring, encryption, segmentation, vulnerability management, and incident response for regulated environments.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Lead and build the company's end-to-end security program for a genomics and AI platform: governance, compliance (HIPAA, HITECH, SOC 2, ISO 27001), AI governance, offensive security, incident response, third-party and SaaS security, and cross-functional security embedding. Manage senior offensive personnel and external partners, present to executives, and deliver SOC 2 readiness and a prioritized HIPAA remediation roadmap quickly.

Lead and deliver end-to-end Salesforce security and compliance engagements. Advise enterprise customers on security controls, governance frameworks, and compliance posture. Drive pre-sales, shape solutions, and present to executives. Develop practice methodologies and reusable assets, mentor team members, and collaborate with Product, Engineering, and Trust on the Salesforce security roadmap.

Design, build, and maintain detection-as-code and AI-powered detection/response tooling across cloud, endpoints, and identity. Automate investigation and response workflows, lead incident response, improve observability, tune alerts, and partner with engineering to expand logging and embed detections.

Validate, reproduce, and triage vulnerability reports for web and mobile applications; assess severity and impact using CVSS and security frameworks; communicate findings and remediation to customers and researchers; leverage automation/AI workflows; collaborate cross-functionally and improve triage processes. Weekend shifts required occasionally.

Act as a technical and strategic adviser to assigned customers to maximize value from Proofpoint products and services. Own customer relationships, develop 12-month program roadmaps, lead recurring meetings, track deliverables and risks, coordinate complex production changes, manage escalations, monitor cases and SLAs, and help customers mature security posture and demonstrate measurable program value.

Lead security configuration and implementation for Oracle EBS Finance modules, perform security and control reviews, support Risk Management controls (AAC, Advanced Financials Controls), run design/fit-gap workshops, assist SIT/UAT/Go-Live and post-implementation support, work with onsite/offshore teams, and apply SafePaaS and other tools to evaluate controls, segregation of duties, and optimization.

Provide administrative support for information security compliance programs (ISO 27001, SOC 2, CMMC). Assist Director of Compliance with audit preparation, evidence collection, documentation management, tracking remediation, scheduling and coordinating meetings, and preparing status updates. Maintain control matrices, evidence folders, calendars, and trackers to keep compliance activities organized and on schedule.

Design, implement, and operate AWS cloud security and infrastructure: least-privilege IAM, network segmentation, multi-account governance, detection and response, vulnerability management, HIPAA compliance, and embedding security into the development lifecycle. Build automated remediation pipelines, maintain GitHub CI/CD automation, validate SIEM logging, and produce prioritized gap analyses for active care programs.

Senior technical responder for application security incidents: lead escalations, analyze attacks and logs, design/implement custom security policies, perform forensics, automate ASR workflows, mentor engineers, and collaborate with customers and cross-functional teams to remediate threats and improve products.

Embed application security across the SDLC: identify and remediate web/API vulnerabilities, perform threat modeling and risk assessments, automate monitoring and remediation, analyze logs for anomalies, support compliance and federal security authorization activities.

Design, deploy, and manage security, networking, and cloud solutions for clients. Configure and operate security tooling, support incident response, develop SIEM detection, handle network administration, mentor junior engineers, and lead small-to-medium projects while ensuring continued operational performance and compliance.

Support and secure Solventum’s Core Speech products through security patching, application coding, production deployments, maintenance, monitoring, alerting, capacity planning, and reliability improvements. Participate in an off-hours support rotation, respond to production alerts, and collaborate on projects improving system performance and architecture. The role is remote within the United States with occasional travel to Pittsburgh, Pennsylvania.

Manage and perform red and purple team engagements, external/internal penetration tests, wireless/web/mobile/embedded assessments, ransomware readiness and social engineering. Develop tools, incorporate threat intelligence, present findings to technical and executive audiences, and mentor and expand offensive security capabilities. Occasional travel (~10%).

Own and mature Neumo’s Governance, Risk, and Compliance program, including SOC 1, SOC 2, and PCI DSS audits, risk registers, data governance, control automation, vendor assessments, and exception processes. Manage 1–2 direct reports, coordinate remediation, leverage AI/LLM tools, participate in incident management, and communicate compliance posture and risk trends to executives and the board.

Leads security operations and engineering strategy, manages a 2–3-person team, and remains hands-on with WAF, DLP, AI security, automation, vulnerability management, incident response, cloud security, purple teaming, SIEM, and detection engineering. Partners with executives and cross-functional leaders, oversees vendors and tooling, reports risk metrics, and develops team capabilities and security roadmaps.

Own security and infrastructure for a fintech payments platform, with security comprising roughly two-thirds of the role. Responsibilities include cloud and application security, IAM, secrets management, threat modeling, detection engineering, incident response, vulnerability management, compliance, privacy, CI/CD, infrastructure as code, observability, reliability, backups, disaster recovery, and on-call operations. The role reports to the CTO and will establish the security function as the company’s founding security hire.

Lead solution sales for Microsoft Security with enterprise customers: identify opportunities, build solutions and business cases, manage senior relationships and pipeline, collaborate with partners and internal teams, forecast and pursue high-potential accounts, and obtain relevant product/role certifications.

Design, deliver, and support Microsoft cloud security solutions for mission-critical customers. Provide proactive and reactive support, lead architectural sessions, implement identity and Zero Trust controls, optimize Azure resiliency and security posture, coordinate incident resolution with internal teams, and contribute to on-call rotations and continuous improvement.

Lead and run engagement systems for Microsoft Security field communities: design community strategy, communications, events, and feedback loops; collaborate with cross-functional teams to drive adoption of Security priorities; measure community health and impact; support planning, readiness, and change management for security field managers and individual contributors.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Perform advanced threat hunting and deep analysis of attacker activity across on-premises and cloud environments, notify customers of imminent threats, build proof-of-concept hunting tools and automations, synthesize findings into mitigation recommendations, and drive product/tool improvements by transferring threat intelligence and investigation best practices to engineering and customer teams.

Own technical pre-sales for enterprise AI security: lead discovery, design demos, execute end-to-end POCs, partner with AEs, surface product feedback, and advise customers on complex technical decisions.

Lead and grow a team of Security and IT technical program managers and own the cyber security and IT program portfolio. Drive prioritization, resourcing, and delivery of cross-functional security initiatives, translate strategy into roadmaps, manage risks and dependencies, and standardize playbooks and metrics.