Top Remote Cyber Security Jobs in Washington, DC

Provide cloud engineering and DevSecOps expertise in a federal cybersecurity environment: lead project teams, translate customer requirements, manage stakeholders, implement automation and CI/CD, and ensure cloud security and process improvements.

Execute end-to-end third-party risk management including intake, risk tiering, questionnaire administration, evidence review, scoring, and risk decisioning. Review cybersecurity contract provisions and coordinate redlines. Assess supply-chain, geopolitical, and AI vendor risks. Serve as liaison to OpCo coordinators to ensure consistent vendor risk handling. Operate and maintain enterprise risk register, ensure data quality, aggregate cross-OpCo risk, and produce executive-grade reporting.

Lead end-to-end third-party risk management across vendor lifecycle, review vendor security evidence and contracts, assess supply-chain and AI vendor risks, ensure consistent scoring and escalation, and support enterprise risk register operations and executive reporting.

The Policy and Compliance Lead develops and implements information security policies and standards, ensuring compliance with laws and regulations, while collaborating with teams for continuous improvement and risk management.

Conduct research and deliver strategic advice on risk management and cyber risk quantification. Develop and maintain risk artifacts (standards, procedures, appetite, registry), produce 6–8 research projects yearly, consult with clients, collaborate across Forrester teams, advise vendors, publish insights, and present externally. Support C-suite and risk leaders and travel up to 20%.

Provide digital forensics and incident response expertise: collect and analyze forensic data, identify root cause, recommend remediation, manage real-time forensic capability, produce investigative reports for leadership, influence strategy, and participate in on-call rotation. Work involves complex cases across Humana infrastructure and occasional travel for training or meetings.

The Senior DevOps Engineer will design, deploy, and manage AWS cloud infrastructure, Kubernetes clusters, CI/CD pipelines, and implement security best practices. Responsibilities include optimizing workflows and embedding observability into cloud environments while ensuring compliance and collaboration across teams.

Serve as technical lead for Honeywell physical security sales: design solutions, run demos/proofs, respond to RFPs, train partners, and support cloud/hybrid access-control and video integration sales. Travel up to 75%.

Operate and scale an enterprise vulnerability management program across infrastructure, cloud, and applications. Lead platform administration (Qualys/Tenable), ensure scanning and asset coverage, analyze and prioritize vulnerabilities, drive remediation with engineering teams, automate intake/tracking, support compliance (NIST/FedRAMP/HIPAA), produce executive reporting, and mentor junior engineers.

Lead and execute end-to-end red team engagements: simulate APT-style attacks across network and cloud, run social engineering campaigns, develop custom offensive tooling, produce technical and executive reports, mentor junior staff, and collaborate with blue/MDR teams for purple-team assessments.