Top Cyber Security Jobs in Washington, DC

Lead and coordinate security engineering programs: translate strategy into team tasks, track remediation and incidents, remove blockers, improve cross-team collaboration and security processes, drive incident response coordination, and support security feature adoption and certifications.

This role involves defining and leading the security and risk strategy for Circle's products, ensuring compliance across jurisdictions while managing product security, compliance operations, and risk assessment.

Sell ServiceNow Security and Identity solutions to enterprise customers. Build territory plans and pipeline, qualify opportunities, craft tailored platform-based solutions with partners, present to senior executives, close large strategic deals, and enable internal teams while supporting go-to-market strategy and driving revenue above quota.

Lead Workday security and compliance efforts for clients: analyze requirements, implement security controls, develop compliance programs, integrate business applications, provide training, mentor teams, and manage client engagements to mitigate risk and protect sensitive data.

Lead client engagements to design and implement security controls and compliance programs within Oracle applications. Manage teams, conduct audits, develop governance frameworks, and advise on regulatory and operational risk mitigation while coaching staff and ensuring project success.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Design, implement, and operationally support enterprise security platforms across cloud, endpoint, identity, network, and SaaS. Lead detection, telemetry, vulnerability management, automation, and incident escalation. Partner with stakeholders to deliver secure, scalable services, improve security posture and Zero Trust objectives, and mentor engineers while maintaining documentation, KPIs, and on-call support.

Lead Zapiers security strategy for an AI-native SaaS platform. Own App and Infrastructure Security, Detection & Response, GRC, risk management, incident response, bug bounty triage, and enterprise security enablement. Partner with Product, Engineering, Legal, and GTM to embed secure-by-default design, shape AI-specific controls, support enterprise deals, and build a high-performing security engineering organization.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Lead competitive intelligence for CrowdStrike's cloud security portfolio, analyzing competitors' technical capabilities and market positioning. Provide deal support, win/loss analysis, and actionable guidance to Product, Sales, and senior leadership. Develop competitive materials, readiness plans, and recommendations to influence product strategy and GTM. Work autonomously and collaborate cross-functionally globally.

Assess Falcon environments, recommend and document security remediations, troubleshoot incidents with support and internal teams, produce service reports, and ensure customers meet Falcon Complete standards and SLAs.

Lead planning, deployment, tuning, and operational support of CrowdStrike Falcon's AI/ML detection and response capabilities. Implement and optimize ML models, develop automation playbooks and Falcon API integrations, troubleshoot AI-related issues, support incident response and threat hunting, and deliver customer workshops and collateral. Up to 25% travel.

Lead federal cloud security and compliance efforts to achieve and sustain ATOs. Implement and automate FedRAMP/IL-5/RMF controls, manage continuous monitoring, coordinate 3PAO audits, drive cloud security architecture, oversee change control/SCRs, and lead incident response and POA&M remediation using AI-enabled automation and monitoring across high-security GovCloud environments.

Assess and harden CrowdStrikes software supply chain by securing open-source dependencies, GitHub organizations, and repository configurations. Build and maintain detection and automation tooling, investigate malicious packages and vulnerabilities, and collaborate across teams to improve SDLC security, code integrity, and artifact verification.

Design, build, and operate secure, resilient distributed systems for secrets and key management across Cloudflare's global network. Re-architect and strengthen internal PKI and machine/workload identity, support and run services (including on-call), and consult with teams to ensure secure system design and usage.

Ensure Rubrik products meet security standards by integrating AppSec into the SDLC, performing automated and manual assessments, threat modeling, hardening applications and deployments, tracking AppSec metrics, and producing security guidance for engineering and operations teams.

Senior security engineer responsible for developing automation and tooling, building and deploying security solutions, conducting incident response and proactive threat hunting, supporting investigations through data analysis, and advising development teams. Must document solutions, participate in agile teams, mentor juniors, and continuously research evolving security threats.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Act as the technical presales lead for AI agent and cloud identity security across North America: scope engagements, design and run POCs and architectures across AWS/Azure/GCP, secure non-human and machine identities, create repeatable technical assets, and partner with account teams to close deals.

Perform hands-on application and system security assessments: discover and validate vulnerabilities, develop proof-of-concepts and custom tooling, conduct threat modeling and architecture reviews, and communicate clear remediation guidance to clients while contributing to security research.

Lead and operationalize the enterprise information security program across AppSec, CloudSec, SecOps/IR, and GRC. Own SOC/detection and response, application and cloud security, risk registers, compliance (SOC2/ISO/NIST/HITRUST), security KPIs, and build a high-performing security organization partnered with engineering, IT, legal, and privacy.

The Senior Security Engineer will design secure development lifecycles, integrate security tools, lead remediation of security issues, and mentor teammates, ensuring systems resilience and security across DraftKings.

Lead planning, deployment, tuning, and operational support of CrowdStrike Falcon's AI/ML detection and response capabilities. Implement and troubleshoot AI-driven detection models, automation playbooks, API integrations, and threat-hunting for customers. Provide training, mentorship, and customer-facing collateral while optimizing detection efficacy and integrating Falcon into customers' security workflows.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead AI security strategy and guardrails, design and review AI gateways and tooling, scale InfoSec review processes, reduce AI-driven security noise, drive remediation and investigations, and mentor security and platform engineers.