Top Remote Cyber Security Jobs in Washington, DC

Provide consulting services to colleges and universities by assessing, designing, implementing, and supporting identity and access management solutions. Responsibilities include IAM architecture, access control, authentication, identity management, security assessments, risk remediation, policy development, compliance alignment, and client technical guidance. The role requires expertise with SAML, CAS, LDAP, identity providers, directory services, MFA, and related IAM technologies, with occasional possible travel for onsite client engagements.

Own and evolve Sourcegraph’s governance, risk, and compliance program, including SOC 2 and ISO 27001 certifications. Responsibilities include control design, audit preparation, evidence collection, testing, auditor coordination, remediation, risk-register and ISMS management, stakeholder training, customer compliance support, and roadmap development. The role also drives automation and process improvements while partnering cross-functionally with technical and non-technical teams.

Provides enterprise technical leadership for Identity and Access Management and AI-era identity security. Defines architectures, standards, governance, authentication, authorization, privileged access, machine identity, secrets, and agent security controls. Leads threat modeling, adaptive authentication, AI-driven detection, monitoring, and response capabilities. Partners with engineering, product, infrastructure, cyber defense, and architecture teams; mentors technical leaders; establishes reusable secure-by-default patterns; and influences executive stakeholders on identity risk, security strategy, and technology investments.

Leads the design, implementation, maintenance, and security of complex LAN, WAN, wireless, cloud, and Zero Trust network environments. Diagnoses complex issues, plans capacity and future services, manages network engineering projects, documents configurations, maintains disaster recovery procedures, monitors threats, and addresses vulnerabilities. The role also mentors engineers, evaluates technologies, supports vendor activities, and performs installation, migration, and configuration work for a DoD client across multiple locations.

Research and reproduce high-consequence vulnerabilities, study real-world attacker tradecraft, and convert exploitation techniques into safe, reliable, automated proof-of-exploit modules. The role validates remediation and containment across enterprise networks, applications, identity systems, cloud environments, and infrastructure while demonstrating impacts such as privilege escalation, credential access, lateral movement, persistence, and data access. It also improves execution speed, observability, reliability, and evidence quality in collaboration with research, product, and engineering teams.

Own customer security reviews, questionnaires, due diligence, audits, and the company’s SOC 2 and ISO 27001 compliance programs. Lead practical risk decisions, maintain accurate security responses and evidence, coordinate remediation, assess external partners, and automate compliance workflows. Partner closely with engineering, security, IT, legal, and customer-facing teams to improve controls, documentation, and product security outcomes.

Design and maintain detection-as-code rules, conduct threat hunts, investigate incidents, and improve security telemetry pipelines. Build KQL detections through GitOps and CI/CD workflows, map coverage to MITRE ATT&CK, tune alert quality, and maintain log parsing and normalization. Participate in incident response, write runbooks, and convert findings into durable detections. Collaborate across security, IT, infrastructure, engineering, and GRC while mentoring teammates and supporting on-call duties.

Owns day-to-day security and compliance operations, including SOC 2 audit readiness, evidence collection, remediation, control monitoring, and audit documentation. Leads SOX and ISO 27001 gap assessments, readiness initiatives, and cross-functional uplift workstreams. Partners with engineering, IT, finance, legal, and business teams to strengthen control ownership, automate evidence collection, maintain compliance records, and monitor regulatory changes.

Own product and infrastructure security across fintech products and cloud environments. Lead threat modeling, architecture reviews, secure code reviews, vulnerability management, bug bounty operations, CI/CD security scanning, IAM and secrets management, and security standards. Partner directly with engineering leadership to identify and remediate critical vulnerabilities across backend services, APIs, frontends, Solana programs, and infrastructure.

Leads enterprise technology risk management across cloud, cybersecurity, data protection, AI, and third-party ecosystems. Oversees risk assessments, regulatory compliance, SOX ITGC controls, issue remediation, risk reporting, automation, and emerging technology governance. Partners with technology, business, audit, and regulatory stakeholders while developing a high-performing risk management team.