Top Remote Cyber Security Jobs in Washington, DC

Leads secure CI/CD, containerized deployments, and infrastructure automation for DoD case management systems in AWS GovCloud. Builds pipelines using Docker, Kubernetes, and Terraform or CloudFormation; integrates security scanning, monitoring, vulnerability management, and compliance checks aligned with RMF and DISA STIGs. Supports Zero Trust architecture, incident response, scalability, ATO documentation, and secure repository management while collaborating with engineering, development, cybersecurity, and systems administration teams.

The Senior IT Security Engineer strengthens cybersecurity across architecture reviews, AI and emerging technology assessments, IAM governance, vulnerability management, third-party risk, security assurance, incident response, phishing simulations, automation, and regulatory compliance. The role validates security controls, supports remediation, develops risk metrics and reporting, oversees identity platforms, and partners with technology, business, audit, compliance, procurement, and vendors in a regulated banking environment.

Leads the design, implementation, and operation of information security controls across systems, networks, endpoints, and cloud environments. Responsibilities include SIEM/MDR, EDR/XDR, SOAR, vulnerability management, PAM, Zero Trust, incident response, data protection, DLP, and cloud security. The role collaborates with IT, Privacy, Compliance, and application teams, mentors engineers, supports security architecture and SDLC practices, and may provide periodic on-call incident response support.

Build AI-enabled automations for governance, risk, and compliance workflows, including evidence collection, control validation, audit preparation, third-party reviews, vulnerability management, POA&M tracking, and reporting. Evaluate AI solutions for security, privacy, regulatory compliance, and auditability. Partner with cross-functional teams to document processes, develop dashboards and metrics, and support compliance across frameworks including FedRAMP, CJIS, ISO 27001, SOC 2, PCI, HIPAA, and FISMA.

Assesses and mitigates security risks across AI, machine learning, and Generative AI systems. Responsibilities include threat modeling, vulnerability assessment, security monitoring, incident response, governance, compliance, access controls, policy development, audit support, and advising engineering and business teams on secure AI development and responsible adoption.

Leads and mentors a four-person vulnerability management team while remaining hands-on with vulnerability identification, prioritization, remediation tracking, validation, and exposure management. The manager serves as a technical and client-facing escalation point, guides remediation across infrastructure and security teams, oversees workload and service delivery, and communicates risks and priorities to technical and non-technical stakeholders.

A 12-week penetration testing internship supporting application, infrastructure, cloud, wireless, and API security assessments. Responsibilities include vulnerability analysis, emerging-threat research, remediation validation, security automation, playbook development, reporting, and collaboration with cybersecurity and business teams. The associate will also complete an independent cybersecurity capstone project.

Provision, modify, and deprovision accounts across Microsoft 365, Entra ID, enterprise applications, and SaaS platforms. Support onboarding, offboarding, MFA enrollment, password resets, access issues, role assignments, access reviews, and audit documentation. Administer Microsoft 365 services, business applications, collaboration tools, and user permissions while following established procedures. Escalate complex issues and maintain accurate records in a ticket-driven support environment.

Leads Varonis cloud security deployments for customers, troubleshooting complex integration issues and guiding architectural decisions. Develops deployment standards, documentation, reference architectures, and onboarding resources. Partners with Product Management and Engineering to improve deployment capabilities, facilitates knowledge-sharing, and delivers technical enablement on cloud technologies, security concepts, and deployment methodologies.

Leads IT governance, risk, and compliance activities, including SOC 2 readiness, audit planning and execution, policy development, control assessments, evidence gathering, remediation tracking, and regulatory research. Partners with auditors, control owners, IT leadership, and GRC team members to maintain compliance with NIST CSF and financial services regulations. Provides guidance on audit and policy matters while improving GRC processes and tooling.