Top Remote Cyber Security Jobs in Washington, DC

Supports USDA cloud services by maintaining FedRAMP Agency ATO documentation, SSPs, control records, assessment evidence, inventories, and POA&Ms. Coordinates with control owners and 3PAOs, documents risks and controls, supports remediation of assessment findings, and provides guidance to the documentation team. Requires FedRAMP experience, active Public Trust clearance, technical writing, analytical skills, and Microsoft Office proficiency.

Secure Temporal’s multi-cloud platform across AWS, GCP, and Azure by embedding security into infrastructure and application architecture. Responsibilities include threat modeling, risk assessment, Kubernetes hardening, multi-tenant isolation, gRPC and mTLS security, service mesh configuration, cloud security posture management with Wiz, secrets management, encryption, compliance policy development, engineering partnership, and on-call participation. The role also contributes to responsible AI practices and security for distributed workflow systems.

Build automation and data tooling for Sales Engineering, support customer Proofs of Value, integrate and validate security data, and analyze vulnerabilities, controls, and attack paths. Own threat intelligence for go-to-market teams by tracking CVEs and active exploitation. Present findings to customers, support technical sales conversations, and collaborate with Product, R&D, and Research to improve detection and mitigation logic.

Design, develop, and maintain Python-based SOC automation workflows for alert triage, investigation, enrichment, incident handling, and response. Build reliable Temporal.io workflows and integrations with Microsoft Sentinel, Defender, REST APIs, databases, and threat intelligence systems. Develop KQL queries, translate SOC requirements into technical solutions, and improve automation scalability, observability, reliability, and analyst efficiency while collaborating with Cyber Defenders and cross-functional engineering teams.

Own and improve the enterprise GRC program through compliance automation, scalable workflows, control design, evidence collection, risk assessments, audits, remediation tracking, dashboards, and reporting. Support SOC 2 and ISO 27001 compliance while partnering with Security, IT, Engineering, Legal, Privacy, Finance, Audit, customers, and control owners. Lead GRC projects, translate regulatory requirements into actionable guidance, identify emerging risks, and mentor junior analysts.

Leads cybersecurity solutions engineering for government and education customers across managed security, network monitoring, cloud security, and related services. Provides technical discovery, solution design, demonstrations, proofs of concept, onboarding, deployment guidance, escalations, and post-sales support. Partners with sales and technical account teams, mentors engineers, develops enablement materials, informs product strategy, identifies expansion opportunities, and manages customer activity in Salesforce.

Secure Agora’s applications, APIs, cloud infrastructure, Kubernetes workloads, deployment pipelines, and blockchain-related systems. Responsibilities include threat modeling, architecture and code reviews, security tooling administration, detection engineering, monitoring, incident response, vulnerability management, penetration-test coordination, security automation, and cross-functional remediation. The role partners closely with Engineering, Product, Infrastructure, Compliance, Operations, and the SOC to improve controls, telemetry, response readiness, and security risk visibility.

Lead governance, risk, and compliance activities for an enterprise AI platform. Define and mature SOC 2 and ISO 27001 controls, collect evidence, track remediation gaps, prepare audits, and create customer-facing security documentation. Partner with engineering, security, product, auditors, and client stakeholders to embed practical, automated compliance practices covering data handling, retention, access control, privacy, AI governance, and customer assurance.

Supports IT security and compliance programs, including HITRUST, HIPAA, and SOC 2 activities; policy documentation; risk assessments; audit evidence gathering; incident monitoring; and mitigation. Manages employee onboarding and offboarding, access controls, devices, SaaS tools, vendor reviews, GCP compliance documentation, incident response, and change management. Works independently with the CTO in a remote healthcare SaaS startup.

Build autonomous AI-driven security testing systems and agentic workflows for analyzing mobile, desktop, IoT, and API applications. Develop reusable security automation frameworks, integrate static and dynamic analysis, reverse engineering, network analysis, vulnerability intelligence, and custom tools. Create evaluation systems and human-in-the-loop workflows, research emerging AI and offensive security techniques, and collaborate with security researchers to scale testing. The role requires production-quality coding, security expertise, autonomy, and U.S. citizenship.