Top Remote Cyber Security Jobs in Washington, DC

Leads the security investigations function, including insider threat and fraud programs. Builds and manages an investigations team, establishes evidence-handling and case-management standards, oversees complex investigations, partners with Legal, HR, Compliance, and Security Engineering, briefs executives, and drives systemic risk prevention.

Design, build, and operate security platforms including detection pipelines, identity and access systems, secrets and key management, policy-as-code, vulnerability automation, and security guardrails. Lead cross-team security initiatives, improve observability and incident response, embed controls into infrastructure, establish engineering standards, and mentor security engineers. The role requires strong software engineering skills, cloud and Kubernetes experience, security fundamentals, and the ability to influence technical direction across the organization.

Investigates fraud and insider-threat cases from initial signals through resolution. Responsibilities include triaging alerts, gathering and analyzing logs, transactions, and behavioral data, reconstructing events, documenting evidence and chain of custody, and collaborating with Detection & Response, Legal, and HR. The analyst also contributes to investigation playbooks, detection improvements, and prevention efforts while handling sensitive information discreetly.

Administer and maintain enterprise EDR platforms across endpoints and cloud workloads. Develop detection policies, translate threat intelligence into endpoint rules, maintain SIEM/SOAR integrations, and support incident response through containment, live response, data collection, and system restoration. Troubleshoot agent and operating system issues, support auxiliary security tools, and maintain documentation, SOPs, baselines, and change-management processes.

Monitor, investigate, and respond to security alerts, phishing, vulnerabilities, and incidents for managed security clients. Conduct threat hunts, collect evidence, identify root causes, perform containment and remediation, and create incident reports and SOPs. Support deployment of security toolsets, collaborate with analysts and engineers, communicate with clients, and participate in after-hours or on-call coverage.

Own end-to-end remediation projects addressing SOC 2, ITGC, security, privacy, AI governance, and regulatory requirements. Coordinate cross-functional stakeholders, translate compliance requirements into technical work, manage risks and dependencies, track risk treatment plans, and report progress to executives. Support annual risk assessments, auditor coordination, GRC tooling, dashboards, and process improvements across concurrent projects.

Administer identity and access security programs, including access reviews, privileged access management, endpoint privilege controls, and Azure PIM. Support compliance audits through evidence collection, triage SIEM and endpoint alerts, manage phishing simulations, document procedures, and track vulnerability remediation. Partner with IT, engineering, and compliance teams to improve security processes and posture in a cloud-native environment.

Own end-to-end security architecture and risk posture for a strategic, AWS-heavy program protecting trade secrets and sensitive intellectual property. Lead cloud and application security reviews, threat modeling, risk assessments, control design, and risk acceptance. Develop secure reference architectures, design patterns, standards, and guidance across cloud platforms, data flows, identity, and integrations. Provide technical leadership, mentorship, and security direction while communicating risks effectively to technical, business, audit, and executive stakeholders.

Lead technical presales engagements for Microsoft security solutions, including Entra, Purview, Defender, and Sentinel. Deliver discovery sessions, demonstrations, whiteboarding, solution designs, and proof-of-concept efforts. Build competitive strategies, resolve technical blockers, guide customer decisions, collaborate with partners and deployment teams, and help existing customers optimize security product usage. Embed governance, security, and compliance into customer engagements while quantifying business value and supporting sales targets.

Leads an engineering team responsible for designing, building, and operating data security products and controls. Provides technical direction, hands-on engineering leadership, and delivery ownership across DLP policy, data discovery and classification, data access controls, policy-as-code workflows, automation, integrations, testing, deployment, reliability, and operational support. Translates data security requirements into scalable solutions while mentoring engineers and driving adoption of secure engineering practices.

Leads Nokia’s security research and standardization activities for 5G Advanced and 6G. Represents Nokia in 3GPP and other external forums, drives new security technology concepts, collaborates with patenting and business teams, builds industry and government relationships, and aligns security strategies with product roadmaps and Bell Labs research.

Lead product security architecture and offensive testing, including threat modeling, architecture reviews, penetration testing across web applications, APIs, mobile clients, and cloud infrastructure, secure design definition, code reviews, and remediation validation. Partner with engineering teams on authentication, authorization, data protection, trust boundaries, and cloud-native security while communicating risks and leading cross-functional security initiatives.

Leads Yahoo’s Detection Engineering team within Threat Detection and Response. Responsibilities include developing cybersecurity detection strategy, managing detection engineers, building and maintaining detection rules, supporting investigations, conducting threat hunting and purple-team activities, integrating threat intelligence, and applying data science and AI to identify adversaries. The role also guides sprint delivery, researches emerging threats, and collaborates with security leadership, incident response, insider threat, and advanced cyber threat teams.