Top Remote Cyber Security Jobs in Washington, DC

Lead Apollo’s application security strategy across engineering, product, platform, data, and AI teams. Responsibilities include security architecture reviews, threat modeling, secure code review, penetration testing, exploit development, vulnerability management, secure-by-default building blocks, AI security standards, automation, and mentoring security engineers and champions. The role requires solving ambiguous, high-scale AppSec problems, influencing cross-functional roadmaps, and delivering measurable reductions in security risk.

Leads Apollo’s detection and response strategy while remaining hands-on with detection engineering, security observability, threat hunting, response automation, and incident investigations. The role owns detection architecture, telemetry coverage, incident response readiness, playbooks, tabletop exercises, and performance metrics. It leads high-severity incidents across cloud, SaaS, and corporate systems, mentors engineers, partners with technical and business teams, and establishes AI-assisted security workflows using human oversight.

The Senior Application Security Engineer will strengthen Apollo’s secure software development lifecycle through application security reviews, threat modeling, code analysis, vulnerability management, penetration testing, remediation, and AppSec tooling. The role includes developing automation, securing AI-powered features, improving security observability, enabling developers, and partnering across Engineering, Product, Platform, Data, Legal, and Security teams. This senior individual contributor will own long-term AppSec goals, resolve ambiguous risks, and drive cross-functional security improvements.

Leads and matures the third-party risk management program across cybersecurity, privacy, and AI governance. Conducts vendor risk assessments, evaluates data protection and AI practices, manages onboarding through offboarding, monitors continuous and Nth-party risk, tracks remediation, reviews contract terms, supports audits, and maintains governance reporting. Partners with Legal, Privacy, Security, Procurement, AI Governance, and business teams to improve workflows, communicate risks, and develop scalable assessment processes.

Provides second-line support for complex security and network issues, partnering with Engineering to troubleshoot, reproduce, and resolve customer problems. Documents incidents, manages enterprise escalations, analyzes packet captures and HAR traces, and provides product feedback. Develops training programs and mentors support engineers while advising on product and code improvements. Requires extensive web security, networking, and cloud knowledge, plus experience with SSL, SAML, HTTP, TCP/IP, VPNs, SD-WAN, and related technologies.

Serve as a hands-on technical security leader addressing complex product, infrastructure, architecture, and risk challenges. Evaluate security across compute, network, and storage; influence cross-functional decisions; lead M&A diligence and partner risk assessments; mentor senior individual contributors; and build a technical security community across product, enterprise, and security operations.

Leads frontier research and engineering for AI-powered cybersecurity systems. Defines research direction, designs agentic and autonomous security applications, builds evaluation environments, improves systems through feedback and adversarial simulation, and transitions prototypes into scalable production capabilities. Provides technical leadership across teams, mentors senior researchers and engineers, and contributes to research publications, open source, and the broader AI and cybersecurity communities.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Supports identity governance, access reviews, access certifications, entitlement validation, role-based access controls, segregation-of-duties reviews, IAM troubleshooting, audit readiness, and remediation tracking. Partners with application owners, business approvers, Technology, Security, Risk, and Audit teams to resolve access discrepancies, maintain documentation, assess risks, and improve IAM governance processes, controls, data quality, and reporting.

Support day-to-day GRC operations: assess third-party vendors, maintain vendor risk register, track remediation and control evidence, assist with internal control testing and audits (SOC 2, ISO 27001, PCI-DSS), maintain policies, prepare reporting, and contribute to process improvements.

Own Cleo’s application and product security program across SaaS and customer-hosted products. Lead SSDLC practices, threat modeling, security tooling, vulnerability management, penetration testing, coordinated disclosure, CVE publication, and NIST CSF controls. Define product security standards, roadmap, secure defaults, access controls, and customer-facing advisories. Partner with engineering, product, architecture, and customers while guiding security engineers and consultants. Also establish protections for LLM applications, AI agents, and AI-assisted development workflows.

Leads Riot’s enterprise Identity and Access Management program across corporate, cloud, data center, and operational environments. Responsibilities include IAM strategy, Microsoft Entra ID architecture, privileged access management, identity governance, least-privilege models, non-human identity controls, third-party access, automation, compliance, security monitoring, metrics, and leadership of IAM engineers and partners.