Top Remote Cyber Security Jobs in Washington, DC

Designs and maintains secure converged IT/OT network architectures supporting ICS, SCADA, building management, and mission-critical systems. Responsibilities include network segmentation, firewalling, VPNs, IDS/IPS, vulnerability assessments, penetration testing, industrial protocol security, SIEM monitoring, incident response, forensic analysis, documentation, and compliance with IEC 62443 and related frameworks. Collaborates with controls engineers, facilities teams, and integrators, with frequent travel to job sites and hands-on work in industrial environments.

Architects and implements secure AWS-based CI/CD infrastructure, manages Kubernetes and container platforms, deploys infrastructure as code, and embeds security automation throughout the software development lifecycle. Responsibilities include vulnerability and secrets management, security scanning, compliance and hardening, IAM and network security, monitoring, audit logging, incident response, and collaboration with development and operations teams. The role also requires troubleshooting, documentation, stakeholder communication, and occasional travel or on-call support.

Assess and mitigate enterprise privacy risks across systems, cloud services, vendors, data-sharing arrangements, and AI technologies. Conduct PIAs and DPIAs, review DPAs and privacy contract terms, support incident investigations, apply global privacy laws, and contribute to responsible AI governance, risk assessments, vendor evaluations, policies, training, and documentation. Partner with Legal, Security, IT, Product, and business stakeholders.

Own day-to-day cybersecurity, identity and access hygiene, compliance readiness, and infrastructure security across a multi-site healthcare environment. Administer Microsoft security tools, MFA, Conditional Access, SIEM, email protection, patching, backups, firewalls, and network controls. Lead SOC 2 evidence collection, security reporting, remediation tracking, third-party access reviews, and audit preparation. Direct and verify outsourced IT and offshore resources, enforce SLAs, supervise network work, and communicate risks to nontechnical leaders.

Develop and lead Gainsight’s information security strategy, policies, and procedures. Manage security leadership, architecture, identity management, compliance, risk assessments, vulnerability testing, and threat mitigation. Ensure adherence to GDPR, HIPAA, ISO 27001, SOC 2, and related standards. Present security posture, metrics, and recommendations to executive leadership while collaborating with Engineering, IT, and Security teams in a SaaS environment.

Designs and deploys Pentera’s security validation platform in complex enterprise environments, leads penetration-testing and remediation deep dives, advises customers on threats and attack techniques, educates users, supports adoption and expansion, and relays customer feedback to Product, R&D, and Support teams.

Identify, analyze, prioritize, and track vulnerabilities across cloud, container, data center, network, and endpoint environments using Wiz and Tenable. Partner with engineering, IT, cloud infrastructure, and operations teams to advocate remediation, monitor SLAs, report risk metrics, support PCI-DSS audits, and improve vulnerability management processes and automation.

Maintain and improve cybersecurity across Azure Cloud and on-premises environments. Monitor and tune security alerts, manage vulnerability scanning and remediation, conduct threat intelligence analysis, support incident response, perform risk assessments and threat modeling, and implement security controls and configurations. The role also supports regulatory compliance, security documentation, cross-functional initiatives, and on-call response to security alerts.

Secure Virta’s cloud-native applications and platform by improving GCP and Kubernetes controls, integrating security into the software lifecycle, automating vulnerability detection and compliance, refining IAM and network security, developing security standards, supporting incident response, and promoting security awareness. The role requires hands-on application security, secure coding, vulnerability management, security testing, Terraform, and Go or Python development experience.

Serves as an outsourced CISO for multiple clients while leading SGP’s internal cybersecurity and compliance program. Responsibilities include NIST, CMMC, and ISO 27001 alignment; security assessments; risk reviews; SSPs, POA&Ms, audits, incident response, vulnerability management, executive reporting, security training, and compliance monitoring. The role also manages assessment partners, subcontracted vCISOs, client proposals, scalable GRC methodologies, and security reviews for business initiatives.