Top Remote Cyber Security Jobs in Washington, DC

Design, implement, and maintain security controls across cloud (AWS) and on-prem systems. Lead vulnerability management, incident response, and remediation. Serve as SME for SIEM, SAST/DAST, IAM. Embed security in SDLC, support SOC 2/ISO 27001 audit readiness, mentor junior engineers, and recommend control improvements.

Lead DevSecOps role focused on embedding application security into the SDLC: implement SAST/DAST/SCA and secrets management, secure Azure deployments, integrate security into CI/CD, manage vulnerabilities and compliance, mentor teams, and automate secure infrastructure with IaC (Terraform).

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Promote information security best practices, identify and report security risks, and evaluate how data is stored, processed, and transmitted. Ensure compliance with data privacy standards (GDPR, CCPA) and integrate data protection throughout the information lifecycle.

Own enterprise IAM and PAM engineering across Entra ID, hybrid Active Directory, Microsoft 365, and privileged-access platforms. Manage identity lifecycle, federation, access governance, endpoint and mobile security, vulnerability management, and security configurations. Support incident response as a Tier 3 escalation point, translate compliance requirements into technical controls, automate workflows and evidence collection, and partner with IT, GRC, and CSIRT teams. Provide documentation, standards, mentorship, and technical guidance across cloud, SaaS, endpoint, and infrastructure security.

Lead VIKR Technologies as its first CEO, validating demand with prime government contractors, securing pilot discussions, and raising a $2 million seed round on a post-money SAFE. The CEO will operate the company, build investor relationships in government, defense, and compliance technology, and report to an independent board. Compensation includes consulting pay until the financing closes, followed by a base salary and equity. The role is intended for a founder or operator with prior seed fundraising experience and federal contracting or security exposure.

Leads strategic and operational cyber threat intelligence analysis, prioritizing threat actors, assessing current and emerging risks, and translating findings into actionable countermeasures. Produces intelligence assessments and executive briefings, partners with detection, SOC, vulnerability management, and other security teams, and improves CTI tradecraft and workflows. Applies AI, automation, structured analytic techniques, and data analysis to enhance intelligence production, anticipate threats, and support security strategy.

Designs and manages secure AWS and Azure cloud infrastructure, integrates security into CI/CD pipelines, automates security and configuration processes, monitors vulnerabilities, conducts audits, and supports incident response. Collaborates with development and cross-functional teams to meet security and compliance requirements. Requires cloud infrastructure expertise, infrastructure as code, scripting, containers, security controls, and an AWS certification. The role is remote and requires the ability to obtain Public Trust clearance.

Build and operate insider-threat detections, investigations, automation, data pipelines, integrations, dashboards, and investigation tools. Correlate identity, endpoint, cloud, source-code, collaboration, and data-protection signals to reconstruct timelines and assess risk. Improve DLP and insider-risk capabilities, reduce false positives, preserve evidence, and communicate findings objectively to Security, Legal, HR, Privacy, IT, and engineering stakeholders. Requires strong security engineering, investigation, programming, data analysis, and sensitive-information handling experience.

Leads the creation and growth of Aprio’s Microsoft-focused managed security services practice. Owns service strategy, pricing, go-to-market, customer pursuits, SOC architecture and operations, detection engineering, automation, compliance, and customer onboarding. Builds a 24/7 security operations capability supporting defense and federal customers, while recruiting and developing technical teams. Oversees alignment with CMMC, NIST, DFARS, FedRAMP, GCC High, and Azure Government requirements, and manages service KPIs, customer relationships, revenue, and P&L responsibilities.