Top Remote Cyber Security Jobs in Washington, DC

Manage and maintain RMF authorizations and audit evidence (SSPs, SARs, POA&Ms, STIGs), embed compliance into engineering and CI/CD, coordinate internal assessments and external audits (FedRAMP High, CMMC 2.0, SOC 2), run risk and vendor reviews, and automate continuous control testing across federal and commercial environments.

Lead strategy and execution for enterprise identity, access control, and governance features. Partner with go-to-market, engineering, and design to build scalable RBAC, audit, and compliance capabilities for large customers and evangelize principles across the product.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Lead positioning and go-to-market for exposure management: translate technical findings into buyer narratives, run flagship research, create content and campaigns, enable sales and partners, build case studies, and drive ABM demand to generate pipeline.

Lead and perform information assurance engagements (SOC, PCI, ISO, GDPR, HITRUST, NIST). Plan and lead client meetings, design and execute testing of security and privacy controls, prepare reporting deliverables and gap assessments, support risk management, and mentor junior staff. Contribute to practice development, proposals, and team training. Travel up to 40%.

Design, build, and operate insider-threat detections and investigation tooling across identity, endpoints, cloud, source-code, and collaboration systems. Lead investigations, collect and correlate telemetry, develop automations and data pipelines, tune DLP/EDR/SIEM detections, and present clear, evidence-based findings to Security, Legal, HR, Privacy, and engineering partners.

Build and maintain Golang backend microservices for identity and access management on a cloud-native platform. Design scalable APIs, deploy on AWS and Kubernetes, implement secure authentication/authorization, write tests, participate in on-call rotation, collaborate across teams, and monitor service performance to ensure high availability and security.

Lead design and implementation of security controls for AI and cloud platforms, configure DLP and alerting, detect and remediate misconfigurations, perform AI security assessments, document findings, and advise clients and presales on AI security best practices.

Lead IT security architect responsible for AWS security architecture, compliance (NIST 800-171/CMMC), and GovCloud IL5/IL6 deployments. Maintain SSP, POA&Ms, evidence, and remediation tracking; coordinate with auditors and customer ISSM/ISSO; partner with DevSecOps and Engineering to implement secure baselines, logging, monitoring, encryption, segmentation, vulnerability management, and incident response for regulated environments.