Top Remote Cyber Security Jobs in Washington, DC

Protect Air Force modernization efforts by assessing legacy and modernized applications, conducting security audits and risk analyses, implementing RMF, ATO, and cATO processes, authoring security controls and authorization evidence, researching emerging threats, and coaching government engineering teams on secure software development and compliance.

Lead the Authority to Operate lifecycle for a federal VA chatbot system, including authorization, reauthorization, continuous monitoring, control assessments, evidence collection, audit responses, and security documentation. Partner with engineering, program leadership, and VA stakeholders to maintain RMF compliance and an audit-ready security posture. Support Zero Trust Architecture adoption and maintain SSPs, POA&Ms, SARs, PIAs, and related evidence.

Detects, evaluates, and mitigates insider risks involving data theft, espionage, fraud, sabotage, workplace violence, and unintentional incidents. Correlates technical and nontechnical data from UAM, UBA, DLP, SIEM, and other sources; conducts investigations and interviews; identifies anomalies and trends; prepares reports and briefings; develops mitigation recommendations; and supports counterintelligence, security awareness, training, and insider risk program development.

Own security partnerships for Customer Service and Creative Technology. Advise on GenAI and GenMedia security, customer data environments, cloud infrastructure, third-party tools, training data governance, and risk treatment. Build business risk profiles, drive remediation, report security posture, and support technical security due diligence for acquisitions and subsidiaries.

Investigate fraud and insider-threat cases from initial signal through resolution. Gather and analyze logs, transactions, behavioral signals, and other evidence; triage alerts; reconstruct events; document findings objectively; maintain evidence chain of custody; and collaborate with Detection & Response, Legal, and HR. The role also contributes to investigation playbooks, detection improvements, and fraud and insider-risk prevention.

Investigate fraud and insider-threat cases from initial signals through resolution. Gather and analyze logs, transactions, behavioral data, and other evidence; triage alerts; reconstruct events; document findings objectively; preserve evidence; and collaborate with Detection & Response, Legal, and HR. The role also contributes to investigation playbooks, detection improvements, and prevention efforts while handling confidential information with discretion.

Leads and matures the information security assurance program across governance, control frameworks, audits, regulatory response, PCI DSS, third-party risk, policy governance, security awareness, automation, and executive reporting. Manages a multidisciplinary team, oversees GRC platform operations, improves control testing and evidence collection, and partners with business, technology, regulators, auditors, and senior leadership to strengthen security posture and compliance.

The Security Compliance Analyst manages cybersecurity, data privacy, classification, retention, governance, vulnerability assessments, incident response, and ATO documentation. Responsibilities include monitoring cloud environments and system logs, using SIEM tools, analyzing security risks, supporting security policies, reporting incidents, and ensuring compliance throughout the system lifecycle. The role also collaborates with Agile teams and stakeholders to protect sensitive data and resolve information assurance issues.

Develops and administers privacy, data classification, retention, and data-sharing policies for a federal court data platform. Conducts Privacy Impact Assessments, privacy risk analyses, and technical problem solving; drafts and manages data-sharing agreements, MOUs, and ISAs; maintains agreement inventories; and advises governance, legal, engineering, and business stakeholders on privacy-by-design, regulatory compliance, and secure handling of sensitive and personally identifiable information.

Leads high-stakes blockchain and cyber forensic investigations supporting litigation and disputes. Oversees on-chain tracing, asset tracking, dark web intelligence, legal report and exhibit preparation, expert testimony, and cross-functional case management. Partners with legal counsel, law enforcement, and external stakeholders to translate technical findings into actionable legal intelligence and lawfare strategy.

Designs, implements, and manages infrastructure and network firewall solutions in a financial services environment. Responsibilities include architecture, requirements analysis, system integration testing, vendor coordination, risk and regulatory compliance, troubleshooting, documentation review, and mentoring junior engineers. The role partners with business stakeholders and technology teams to deliver complex technical implementations while following industry standards and internal controls.

Lead Uber’s highest-severity security incidents from escalation through containment, recovery, and remediation. Command response teams, make high-consequence decisions, investigate logs and system data, brief executives, conduct post-incident analysis, mentor responders, and improve incident response through simulations, threat modeling, automation, and AI-assisted tooling.