Top Remote Cyber Security Jobs in Washington, DC

Engineer, deploy, maintain and optimize the organization's Splunk SIEM environment. Integrate data sources, develop apps/reports/alerts/dashboards, perform performance tuning, manage Linux on-prem servers, mentor Tier II staff, lead technical design, troubleshoot complex issues, and ensure Splunk Enterprise Security and RBA/CIM compliance for large-scale enterprise deployments.

Leads cloud infrastructure, platform operations, and security operations for a SaaS environment. Oversees reliability, scalability, incident response, compliance, disaster recovery, IAM, observability, automation, and secure cloud architecture. Drives AI-powered monitoring, anomaly detection, remediation, security analytics, and operational efficiency. Manages Cloud Architecture, Infrastructure, and Security Engineering teams, including hiring, mentoring, performance management, and strategic planning.

Conduct code audits and penetration tests across AWS cloud environments, infrastructure, backend applications, and blockchain ecosystem tools. Lead red-team exercises, collaborate with detection engineering and incident response teams, develop offensive security automation, support investigations, research emerging threats, and mentor junior staff. The role requires expertise in AWS attack techniques, binary exploitation, web application security, adversary frameworks, and offensive tooling, with Web3 and blockchain security experience preferred.

Leads Trace3’s Security Solutions practice, developing go-to-market strategy, security offerings, AI-enabled services, presales execution, partner relationships, and complex client engagements. Owns revenue, gross profit, forecasting, pipeline, and operating-plan performance. Advises executive leadership, supports assessments and proof-of-concepts, communicates with technical and executive audiences, and leads, coaches, and develops practice teams.

Implement, integrate, and modernize Ping Identity IAM solutions supporting SSO, MFA, adaptive authentication, authentication policies, and identity workflows. Automate administrative and operational tasks using Ping REST APIs, Python, and Bash. Integrate Joiner-Mover-Leaver processes with identity sources and service providers, and migrate legacy applications to OIDC, OAuth 2.0, SAML, and SCIM. Collaborate with infrastructure, cloud, application, and security teams to deliver reliable IAM orchestration at scale.

Lead technical discovery, solution architecture, and end-to-end proof-of-value engagements for an application security platform. Partner with Sales and Customer Success, build ROI and risk models, support security and compliance reviews, deliver executive-level presentations, provide competitive insights, and share customer feedback with Product and Engineering.

Monitors and analyzes network traffic, responds to and investigates security incidents, collaborates with the SOC team to improve security procedures, ensures compliance with security standards, and uses CrowdStrike and related tools to protect systems.

Conduct digital forensic analysis and incident response investigations across endpoints, servers, networks, mobile devices, and cloud environments. Preserve evidence and maintain chain of custody, identify root causes and attacker activity, analyze malware and artifacts, and produce defensible reports for technical, executive, and legal audiences. Collaborate with SOC and threat intelligence teams, support litigation readiness, improve forensic processes and playbooks, and translate lessons learned into security guidance.

Build and operate security research infrastructure, including static and dynamic malware analysis pipelines, YARA tooling, sandboxing environments, threat indicator enrichment, and graph-based intelligence systems. Develop ingestion pipelines connecting scan data with external threat feeds, ensure reliability and observability, and securely isolate malicious samples. Partner with threat researchers and detection engineers to create scalable production systems, while documenting architecture and operational procedures.

Build Tempo’s product security program from the ground up, including application, infrastructure, endpoint, and supply-chain security tooling. Identify and remediate production and development-pipeline risks, lead incident response through post-mortems, conduct secure design reviews, and establish scalable security practices. The role requires hands-on coding, deep incident-response expertise, strong infrastructure and application-security knowledge, and autonomous collaboration with engineering.