Top Cyber Security Jobs in Washington, DC

Leads enterprise endpoint and cloud security strategy, administering CrowdStrike Falcon across Windows, Linux, macOS, virtual machines, containers, and Kubernetes environments. Designs and automates sensor deployments across AWS, GCP, and Azure; manages policies, platform health, integrations, troubleshooting, and documentation. Partners with cloud, platform, infrastructure, and cybersecurity teams on investigations and initiatives, provides technical guidance and training, and mentors other technologists.

Leads cybersecurity strategy and provides technical leadership for security software development. Designs and operates secure services, APIs, automation platforms, PKI and secrets-management systems across cloud environments. Integrates security controls into CI/CD pipelines, performs code reviews and threat modeling, supports telemetry and incident response, and mentors engineers. Collaborates with application, infrastructure, audit, and compliance teams to embed secure practices and define security roadmaps.

Provides SAP security and access controls consulting, including role design, authorization solutions, SAP GRC implementation, segregation-of-duties reviews, compliance assessments, audit support, risk remediation, and access control documentation. Collaborates with clients and engagement teams, evaluates control gaps, tracks remediation, protects sensitive data, and mentors junior team members.

Leads SAP security and access-control consulting workstreams, including role design, segregation-of-duties analysis, user provisioning, SAP GRC implementation, compliance controls, remediation, and audit readiness. Reviews security architecture across SAP S/4HANA, Fiori, HANA, BTP, and cloud environments; manages project delivery, advises clients, develops team members, and supports continuous monitoring and digital risk prevention.

Lead global security investigations and incident response, serving as incident commander for major events and guiding containment, remediation, recovery, and postmortems. Manage and develop a technical response team, establish readiness practices, improve security tooling and telemetry, and drive detection and automation enhancements. Translate incident metrics and business impact into executive and board-level reporting while developing AI-enabled investigation workflows with appropriate safeguards.

Leads vulnerability intelligence research focused on rapidly analyzing and exploiting newly disclosed or actively exploited vulnerabilities. Develops Metasploit modules and framework improvements, conducts zero-day research, publishes technical analyses, advises detection teams, supports emergent threat response, presents research publicly, and mentors other researchers. The role requires advanced exploitation, reverse engineering, operating system, networking, and exploit mitigation expertise, plus cross-functional communication during time-sensitive security events.

Design and implement application security controls across cloud environments, assess cloud architectures for vulnerabilities and identity risks, conduct security reviews and penetration testing, monitor security events, support incident response, and develop cloud security requirements. Translate technical findings into remediation recommendations, interpret risk data, collaborate with clients, and mentor junior team members.

Manages application security assessments and client delivery across cloud environments. Designs security controls for IaaS, PaaS, and SaaS platforms; reviews architectures for vulnerabilities and control gaps; conducts risk assessments and vulnerability testing; guides remediation and security tool usage; monitors emerging threats; coaches security teams; and communicates findings to technical and business stakeholders.

Partners with Sales to lead cybersecurity solution discovery, design, demonstrations, proof-of-value engagements, and customer validation. Advises enterprise security, identity, infrastructure, risk, and executive stakeholders on asset visibility, exposure management, identity, access, and risk solutions. Translates technical capabilities into business outcomes, supports complex sales cycles, develops technical documentation, leads training, and collaborates across Product, Marketing, Customer Success, and Support. Travel is typically 25–50%.

Leads cybersecurity oversight for critical third-party service providers, including security monitoring, vulnerability and incident impact analysis, remediation tracking, and risk escalation. Develops security frameworks for tokenization and digital asset providers, strengthens cross-functional engagement, and implements automation and data-driven processes to improve vendor risk management. Communicates material cybersecurity risks and recommendations to senior leadership.

Designs and develops IAM and security software, automation, APIs, and microservices. Integrates security into cloud and CI/CD environments, conducts code reviews and threat modeling, monitors security events, supports incident response, and advises teams on identity architecture and best practices. Requires extensive IAM administration, programming, cloud, containerization, and secure-coding experience.

Own application security for Generative AI and emerging products by integrating secure development practices, conducting design and code reviews, threat modeling systems, assessing vendors and AI tools, triaging vulnerabilities, and building security automation. The role partners with engineering and detection teams, contributes to cloud and infrastructure security, participates in incident response and on-call rotations, and documents post-incident remediation.

Design, develop, deploy, monitor, and maintain AI-enabled enterprise and cloud security solutions. Build machine learning workflows, data pipelines, and scalable security capabilities using Python, Java, TensorFlow, and related libraries. Analyze security risks and data quality, translate technical findings into client recommendations, support security controls across cloud and infrastructure environments, review deliverables, and mentor junior team members.

Leads the design and development of AI-driven enterprise and cloud security solutions. Manages teams delivering data, analytics, and machine learning engineering projects; oversees AI model implementation, data infrastructure, pipelines, and platform deployments. Uses Python and C++ for algorithm development, analyzes data, improves data quality, ensures technical compliance, mentors staff, manages client expectations, and drives innovation across cybersecurity and privacy initiatives.

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.

Partner with product and engineering teams to embed security throughout the product lifecycle. Conduct threat modeling, architecture reviews, source-code security analysis, vulnerability identification, and secure test development. Advise on authentication, compliance, and business security requirements; automate security processes; identify emerging vulnerabilities; and coordinate cross-team projects through completion.

Leads technical pre-sales architecture for complex security solutions serving public-sector and commercial customers. Translates business, security, compliance, and technical requirements into solution designs, bills of materials, statements of work, estimates, pricing, assessments, and deployment plans. Conducts discovery sessions, architecture workshops, solution reviews, and customer presentations while partnering with sales, delivery teams, and security vendors. Mentors architects and sellers, supports regional customer activity, and travels throughout the Southeast as needed.

Architect and build production AI security systems spanning endpoint sensors and cloud-scale infrastructure. Lead autonomous cyber defense capabilities, including detection, threat hunting, response, adversary simulation, secure agent execution, and model evaluation. Establish technical direction, benchmarks, and safety practices while mentoring senior engineers and researchers. Carry frontier AI research into the Falcon platform and represent the company through publications, open source, standards, and industry collaboration.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Build production security tooling and infrastructure using Terraform, Bash, Go, and Python. Partner with product engineers to design secure features, review Terraform and IAM configurations, automate security workflows, and advise teams on pragmatic vulnerability remediation. The role emphasizes developer enablement, scalable security libraries and tools, cloud security, containerization, and responsible AI use.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Leads Apollo’s detection and response strategy, detection architecture, security observability, incident response, and AI-assisted security workflows. Builds MITRE ATT&CK-aligned detections, response automations, investigation tools, and detection-as-code pipelines using Panther and Python. Leads high-severity incidents across cloud, SaaS, and corporate systems; improves IR readiness, metrics, playbooks, and forensic processes. Partners with Engineering, Infrastructure, IT, Legal, Fraud, and leadership while mentoring engineers and driving multi-quarter security initiatives.

Lead cloud security strategy and hands-on execution across AWS environments. Own CNAPP and CSPM capabilities, improve IAM and container security, build infrastructure-as-code guardrails, conduct architecture reviews and threat modeling, support detection and incident response, and drive remediation programs. Establish a multi-year cloud security roadmap, influence engineering priorities, mentor teammates, and partner with platform, infrastructure, SOC, and product engineering teams.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Leads the Network Security Engineering and Operations team, overseeing enterprise network security infrastructure, availability, lifecycle management, monitoring, incident response, compliance, risk mitigation, and 24/7 escalation support. Manages engineers, vendors, budgets, strategic projects, and cross-functional initiatives while communicating cybersecurity risks to technical and executive audiences. Drives automation, resilience, continuous improvement, and preventative security practices across sites, datacenters, and cloud environments.