Top Remote Cyber Security Jobs in Washington, DC

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Lead complex security investigations across endpoint, identity, cloud, email, SaaS, and network environments. Own incidents through containment, remediation coordination, documentation, and post-incident review. Tune detections, queries, dashboards, workflows, and SOAR playbooks; improve SOC metrics, threat coverage, alert fidelity, and response processes. Partner on vulnerability and cloud-risk remediation, participate in global on-call rotation, use approved AI capabilities responsibly, and mentor analysts.

Own attack surface management across cloud, SaaS, APIs, domains, and internal assets. Automate discovery, attribution, vulnerability analysis, threat-informed prioritization, remediation workflows, and continuous validation through BAS and purple teaming. Partner with engineering, IT, cloud, offensive, and defensive security teams to reduce exposure, improve detection, enforce remediation SLAs, and mature ASM capabilities. Mentor junior analysts and shape tooling, policies, metrics, and security roadmaps.

Leads the company’s information security operations and reports to the CISO. Oversees SIEM, threat detection, vulnerability management, penetration testing, incident response, SOC 2 Type II compliance, third-party risk, security awareness, cloud and endpoint security, and regulatory cybersecurity coordination. Manages security policies, breach readiness, tabletop exercises, KPIs, audits, and emerging technology evaluations while partnering with IT, infrastructure, compliance, regulators, and executive leadership.

Own the multi-year technical strategy and architecture for Coinbase’s enterprise IAM platform spanning human, AI agent, service, and workload identities. Drive adoption across 700+ systems, establish authentication and authorization standards, lead migrations and build-versus-buy decisions, automate audit and regulatory controls, reduce standing privilege, and mentor senior engineering talent. Partner across Security, Compliance, IT, Infrastructure, and product teams while influencing technical direction without direct authority.

Engineer AI-powered threat detections, automated response playbooks, and continuous adversary emulation. Apply machine learning and LLMs to security operations, conduct threat hunting and AI red teaming, map coverage to MITRE ATT&CK, and develop detection-as-code through CI/CD. Build production-grade Python integrations, measurable containment capabilities, and safe autonomous defenses with guardrails. Mentor security professionals and collaborate across threat response, cyber defense engineering, and platform teams.

Develop and scale Java and Kotlin backend services powering vulnerability detection, CVE correlation, risk prioritization, and remediation workflows across millions of endpoints. Design high-availability distributed systems, implement scalable data structures and APIs, contribute production code, and uphold rigorous testing and quality standards. Collaborate with product and detection teams to improve vulnerability remediation speed.

Lead GameChanger's Information Security and Technology organization, owning strategy, roadmaps, and teams across product/cloud/AI security, security operations, GRC, vulnerability management, and internal IT. Partner with engineering, product, legal, and parent-company security to manage risk, incident response, and secure adoption of AI while supporting a remote-first workforce.

Own day-to-day IT and information security operations for a fully remote Mac fleet. Responsibilities include endpoint lifecycle management, identity and access administration, Google Workspace, helpdesk support, asset coordination, CrowdStrike EDR monitoring, DLP controls, Datadog SIEM alerting, security hygiene, access reviews, and SOC 2 and PCI evidence collection. The role requires autonomous ownership, automation, clear documentation, cross-functional collaboration, and approximately 4–6 years of experience beyond ticket-only support.

Lead product marketing for cloud data protection: define strategy and positioning, run GTM launches and campaigns, produce content and sales enablement, manage competitive and analyst relations, and partner cross-functionally to drive revenue, adoption, and market awareness.