Top Remote Cyber Security Jobs in Washington, DC

Customer-facing Cloud Solution Architect driving security transformation on Azure and Microsoft 365. Design and implement security architectures (Identity, Threat Protection, Cloud Security), run design sessions, perform hands-on evaluations of Defender, Sentinel, and Azure AD, and influence product and engineering teams to improve customer security posture and adoption.

Assess cloud, network, infrastructure, and application designs against security and compliance requirements. Translate requirements into technical specifications, security blueprints, and engineering guardrails. Support compliance programs, control assessments, and audits, investigate security risks, define remediation, and improve security-control adoption through AI and automation.

Manages the IT and Security team, including helpdesk workflows, project roadmaps, compliance automation, access management, authentication standards, disaster recovery, vendor relationships, and enterprise system rollouts. Partners with product, engineering, and business leaders on security initiatives and complex technical changes. Maintains audit-ready security processes while overseeing remote IT operations, cloud security, identity tools, and technology spend.

Owns end-to-end security engineering, including risk identification, secure-by-default libraries, least-privilege guardrails, developer machine hardening, supply-chain security, and identity and authentication protections. Partners with compliance to implement effective controls for healthcare requirements such as HIPAA and HITRUST. The role requires production software engineering and security expertise, with broad autonomy in a fully remote environment.

Drive technical pre-sales for data security: deliver demos/PoCs, lead hands-on workshops, design secure architectures, resolve technical blockers, advise on data governance and AI platform security, and represent Microsoft in developer communities.

Designs, implements, maintains, and improves cybersecurity controls across enterprise systems, networks, cloud environments, and applications. Deploys and troubleshoots security technologies, responds to incidents, identifies security requirements, supports audits and change management, documents procedures, analyzes risks, and delivers remediation recommendations. Collaborates with architects, project managers, engineers, and stakeholders to protect organizational data and infrastructure while automating repeatable security tasks.

Leads the strategy, lifecycle, financial performance, positioning, and growth of Arctic Wolf’s Endpoint Security portfolio. The role oversees product expansion, cross-sell opportunities, competitive analysis, M&A integration, and integration with managed security services. It also leads a global product management team, establishes product metrics and operating cadences, and represents endpoint strategy to executives, customers, analysts, and partners.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

Secure Microsoft Windows online services through offensive security, code and deployment reviews, penetration testing, vulnerability research, and scalable mitigation development. Build reusable security review tools and agents, demonstrate exploit impact, identify novel attack vectors, bypass security controls, and collaborate with product engineering teams to strengthen architecture and defenses.

Identify and remediate vulnerabilities across products and AWS infrastructure, respond to security incidents, close security tickets, integrate security controls into CI/CD, review code and infrastructure, support SOC 2 and CASA compliance, and strengthen access management, secrets handling, and cloud hardening.

Designs and operates identity and access management systems across human, service, workload, and AI identities. Owns lifecycle automation, data-driven access models, time-bound entitlements, identity-as-code, cloud IAM, and AI-powered access reviews. Partners with Engineering, IT, and Compliance to reduce unnecessary access, support audits, and respond to identity-related incidents. Requires strong software engineering skills and hands-on experience with Okta, enterprise SaaS provisioning, AWS IAM, and AI or LLM tooling.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Establish and operationalize DHS OIG data governance and cybersecurity authorization frameworks for AI and analytics platforms. Responsibilities include developing governance policies, metadata standards, stewardship workflows, RBAC designs, data lineage, SSPs, POA&Ms, architecture documentation, privacy inputs, and continuous monitoring evidence. The role supports ATO processes, NIST/FedRAMP compliance, AI governance, data quality assessments, and protection of sensitive investigative and law-enforcement data in Azure Government environments.

Designs and maintains security controls for AI platforms, data environments, applications, and cloud infrastructure supporting DHS OIG. Responsibilities include RBAC, encryption, logging, SIEM integration, security monitoring, vulnerability assessments, penetration testing coordination, secure code review, ATO support, NIST and FedRAMP compliance, incident response, forensic analysis, and security documentation. The role requires Azure cloud security expertise, federal cybersecurity experience, and the ability to obtain DHS/EOD clearance.

Own product and protocol security across Jito’s Solana-based products. Responsibilities include threat modeling, secure design and code reviews, deployment hardening, internal audits, onchain monitoring, bug bounty operations, remediation tracking, AI-assisted security testing, and key and asset risk management. The role requires production software engineering experience, strong application security expertise, security automation skills, and familiarity with Web3, crypto, or DeFi.

Performs cloud security engineering across AWS and GCP, including system hardening, vulnerability remediation, compliance scanning, cloud operations, security tooling, incident response, and troubleshooting across infrastructure and identity layers. Supports FedRAMP, FISMA, and NIST 800-53 environments, participates in a 24×7 on-call rotation, maintains technical documentation, communicates with customers, and mentors junior engineers.

Provides information security support for federal healthcare systems, including security architecture reviews, firewall and infrastructure initiatives, security impact assessments, mitigating controls, system security plans, SOPs, and POA&M remediation. Advises development teams and customer security organizations on federal security requirements, emerging practices such as Zero Trust and SBOM, network monitoring, authentication, and data security. The role is remote and requires passing an IHS background check for Public Trust eligibility.

Builds and operates cloud security controls across AWS, Azure, GovCloud, and other platforms. Responsibilities include IAM, encryption, secrets management, preventive and detective controls, PHI protection, logging pipelines, Terraform automation, security remediation, audit evidence, and compliance support for HIPAA, HITRUST, SOC 2, and FedRAMP.

Supports security operations by onboarding and troubleshooting network monitoring infrastructure, triaging security-device issues, resolving escalated customer problems, coordinating vendor maintenance, and managing hardware sensors. The role collaborates with SOC analysts, assists with testing and quality assurance, provides customer support, and participates in on-call incident response. Requires network and security administration experience, TCP/IP knowledge, command-line expertise, and troubleshooting across Linux, Windows, and macOS.

Own and improve vulnerability management across cloud, on-premises, network, and endpoint environments. Responsibilities include scanning, triage, risk-based prioritization, remediation coordination, SLA tracking, exception management, closure validation, asset reconciliation, reporting, incident support, on-call participation, and audit documentation. The role partners with Engineering, SRE, IT, and Infrastructure teams and uses security tooling and AI-assisted workflows to reduce exposure and recurring vulnerabilities.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Create challenging coding tasks for AI systems, implement deterministic solution verifiers, and contribute backend expertise across feature development, bug fixing, refactoring, performance optimization, testing, and security reviews. The role requires strong programming and software engineering skills, with cybersecurity experience in secure coding, application security, penetration testing, vulnerability assessment, or security-focused code reviews preferred.

Build and secure scalable backend services and APIs while debugging, optimizing performance, implementing features, refactoring codebases, and conducting security reviews and penetration testing. The role also involves automated testing, code review, vulnerability assessment, and contributing domain expertise to training next-generation AI systems.