Top Remote Cyber Security Jobs in Washington, DC

Lead application security vulnerability management embedded with engineering teams, triage and fix vulnerabilities in a Clojure/JVM backend, operate cloud SecOps (SIEM/SOAR/CNAPP), perform security risk reviews and compliance support, maintain corporate workspace security, and mentor engineers on secure coding and secure defaults.

Lead Wikimedia Foundation’s product security strategy, prioritize security and privacy engineering initiatives, develop platform interventions against threats, strengthen organizational security culture, and communicate with Wikimedia communities. The role partners with cross-functional and departmental leaders on information security, represents the Foundation to volunteers, and applies AI-based tools to security analysis, code review, and software engineering. Prior product management experience is not required, but strong technical, security, communication, and online-community experience are important.

Own the second-line technology and cyber risk function, including risk frameworks, registers, appetite metrics, quantitative risk modeling, and board reporting. Independently assess security controls, penetration tests, vulnerabilities, AI systems, vendors, and regulatory requirements. Partner with Engineering and Security to identify infrastructure, application, model, cryptographic, and emerging technology risks while overseeing AI governance and supporting regulatory and counterparty assessments.

Manages information security risks, vendor and third-party risk reviews, mitigation plans, policy exceptions, and compliance reporting. Partners with stakeholders and Enterprise Risk Management to maintain risk policies within tolerance. Serves as a technical expert, supports risk awareness and accountability, monitors security controls, and contributes to operational goals. The role requires expertise in IT audit, security monitoring, access management, encryption, networking, incident response, SOX compliance, and project management.

Conduct background investigations and personnel risk analyses for the insider threat program. Use OSINT and commercial investigative tools to verify information, assess source credibility, quantify risk, and prepare clear reports and recommendations. Partner with HR, Legal, and Information Security to identify and mitigate personnel security risks, protect sensitive data, refine investigative methodologies, and ensure compliance with privacy laws, regulations, policies, and ethical standards.

Build AI agent discovery across Azure, endpoints, and future AWS and Google Cloud environments. Assess agent configurations, access, and security risks, then integrate findings with Delinea’s identity and attribution platform for governance. Extend existing discovery services, collaborate with platform teams, and solve complex backend engineering problems using cloud APIs and modern backend languages.

Administers Microsoft Defender services for a DoD customer, monitoring endpoint security, EDR, NGAV, attack-surface reduction, cloud protection, SIEM integrations, cross-platform controls, WDAC, DLP, compliance reporting, and security dashboards. Escalates anomalies, maintains policies and procedures, investigates alerts, and supports Windows, Linux, and mobile-device protection. Requires cybersecurity experience, Microsoft security expertise, DoD compliance knowledge, Security+ certification, and an active Secret clearance.

The GRC and Privacy Analyst will administer compliance automation, maintain continuous control monitoring, support audits, and manage security and privacy programs. Responsibilities include mapping controls to SOC 2, ISO, HIPAA, HITRUST, NIST, and AI risk frameworks; conducting risk assessments; tracking remediation; documenting evidence; applying privacy regulations such as GDPR; coordinating cross-functional compliance projects; and using AI tools to improve compliance workflows.

Conduct threat hunting across network telemetry and PCAP to identify novel malicious activity, campaigns, and adversaries. Research, cluster, track, attribute, and disrupt cyber threats; integrate intelligence sources, tools, and tradecraft; develop detection rules; analyze binaries and reverse engineer threats; and produce actionable intelligence for customers and the public.

Leads the Cyber GRC function, including cybersecurity governance, policy and control frameworks, regulatory compliance, audit readiness, vendor risk, security awareness, AI governance, cyber risk quantification, and executive reporting. Partners with security, IT, legal, procurement, and business teams while representing the organization to regulators, auditors, and third-party assessors. Builds scalable programs and leads enterprise cybersecurity initiatives in a highly regulated financial-services environment.