Top Remote Cyber Security Jobs in Washington, DC

Lead identification and remediation of security and compliance risks, build and run a Third Party Risk Management program, ensure device and contractor environment compliance, automate processes, and support enterprise negotiations to prevent security from blocking customer acquisition.

The Cyber Defense Infrastructure Support Specialist maintains and protects cyber defense infrastructure, ensuring operational integrity and preventing disruptions. Key responsibilities include managing security software, conducting vulnerability assessments, and monitoring network traffic for threats.

Perform advanced OSINT investigations and threat monitoring to assess geopolitical, reputational, and security risks. Produce concise executive-level briefings, dashboards, and KPIs using tools like LifeRaft Navigator, Recorded Future, and Power BI. Support time-sensitive intelligence during fast-moving events, conduct attribution and narrative analysis across platforms, and collaborate with analysts and stakeholders to inform decision-making and measure program effectiveness.

Lead development and scaling of an enterprise risk and resilience function. Establish risk governance, methodology, assessments, risk register and treatment, executive/board reporting, and business continuity. Partner with security and business leaders, mature tooling and processes, and build a global risk team to drive accountability and mitigation across cybersecurity, operational, regulatory, third-party, and strategic domains.

Build and operate automated compliance and continuous control monitoring systems to support HIPAA, SOC 2, NIST and related frameworks. Automate evidence collection, integrate GRC and source systems, create dashboards and workflows, identify and remediate control gaps, and support audit readiness. Partner cross-functionally with Security, IT, Compliance, Legal and Engineering to embed controls and improve compliance automation and AI governance.

Monitor security alerts and analyze logs and network traffic to detect threats. Escalate incidents to senior teams, document remediation steps, and participate in ongoing training. Work 24/7 shift schedule in a SOC environment.

Own and modernize the companys governance, risk, and compliance program across federal and commercial markets. Lead certification and surveillance cycles, run risk and third-party vendor programs, apply GRC engineering and AI for automation and continuous controls monitoring, coordinate external audits, manage customer security assurance, and grow a scalable GRC team.

Own post-sales technical relationships for key customers: lead onboarding, data indexing, detection onboarding/tuning, troubleshoot log pipelines/cloud integrations, drive adoption, escalate product issues, build custom AI skills, and travel to customer sites (~25%).

Execute offensive security assessments across cloud and corporate environments, find vulnerabilities in software, systems, and networks, develop tooling and infrastructure to support Red Team engagements, set scope and metrics, communicate findings to stakeholders, and drive remediation.

The Senior IT Risk and Compliance Analyst manages vendor risk, ensures compliance with regulations, documents controls, and supports risk mitigation efforts across IT teams.