Top Cyber Security Jobs in Washington, DC

Lead client engagements advising on cybersecurity risk and compliance. Develop and implement compliance strategies, conduct risk assessments and audits, apply ISO/IEC 27001 and NIST CSF, manage project planning and budgets, mentor teams, analyze system interactions, and use data to support compliance reporting while ensuring professional standards.

Lead cybersecurity risk and compliance engagements, develop and implement compliance strategies, oversee audits, advise on AML/financial-crime controls, coach teams, validate client outcomes, and promote compliance culture across organizations.

Support clients on regulatory compliance and cybersecurity risk by conducting risk assessments, implementing frameworks (ISO 27001, NIST CSF), performing audits, developing compliance programs, analyzing data for recommendations, and preparing regulatory documentation while collaborating with teams and building client relationships.

Design, build, and operate secure, resilient distributed systems for secrets and key management across Cloudflare's global network. Re-architect and strengthen internal PKI and machine/workload identity, support and run services (including on-call), and consult with teams to ensure secure system design and usage.

Design, build, and scale IAM solutions across cloud and internal systems. Implement role design and least-privilege models, automate access workflows and reviews, integrate logging/metrics into SIEM, reduce privilege sprawl, identify and mitigate risky permissions, and operationalize IAM projects end-to-end with documentation and runbooks.

Provide regulatory compliance guidance and cybersecurity risk management to clients. Conduct compliance risk assessments and audits, implement frameworks (ISO/IEC 27001, NIST CSF), develop compliance programs, analyze data for insights, lead training on AML and financial crime prevention, and build client relationships while upholding professional standards.

Lead a team building and operating secure, resilient distributed systems for secrets, PKI, and machine/workload identity. Plan roadmap, review designs and code, participate in implementation, support operations and on-call, and grow team members.

Own and architect Forward's security technology stack across AppSec, SecOps, and GRC. Design integrations with Engineering/IT, lead tool evaluations and PoCs, automate controls with infrastructure-as-code and detection-as-code, build centralized logging/SIEM and identity governance, align architecture to security frameworks, mentor security engineers, and support incident response and remediation.

Serve as a senior embedded cybersecurity consultant across the customer lifecycle: secure technical wins in pre-sales, run POVs, advise C-level and technical stakeholders, design cyber skills programs and crisis simulations, drive platform adoption and roadmaps, operationalize Immersive One with metrics and EBRs, and act as the customer liaison to sales, product, and engineering to improve cyber workforce resilience.

The AI Security Consultant will enhance security programs, secure AI systems, engage in technical analysis, and report findings. They will also contribute to thought leadership while ensuring high-quality service delivery.

Design and implement multitenant workload and network isolation for bare-metal and virtualized GPU infrastructure. Harden Linux kernel and container runtimes, perform threat modeling and penetration testing, write low-level security code (C/Go/Rust), mitigate GPU and PCIe security risks, and lead incident response and forensic work for ephemeral container environments.

Secure customer-facing products, APIs, and internal services through threat modeling, architecture and code reviews. Remediate vulnerabilities by coding fixes in Python/Go/JS/TS. Build and manage SAST/DAST/SCA security pipelines in CI/CD. Configure WAFs, API gateways, and bot protection. Provide secure coding guidance, run bug bounty triage, and support compliance (SOC 2, ISO 27001, GDPR).

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Lead product strategy and execution for security, compliance, and public-sector capabilities in MongoDB Atlas for Government. Translate FedRAMP/DoD/NIST requirements into roadmaps, drive multi-team programs, align senior stakeholders, enable audit readiness, and support market expansion and GTM for regulated industries.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

Partner with engineering, compliance, and security teams to embed application security into the SDLC: triage static/SCA alerts, advise on OWASP Top 10 remediation, maintain developer playbooks and training, track security metrics and evidence for audits, and help shape AI governance and GenAI-safe workflows.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

This intern role in Federal Security Operations focuses on cybersecurity, project tracking, and maintaining relationships with customer stakeholders in a mission-driven environment.

Lead GameChanger's Information Security and Technology organization, owning strategy, roadmaps, and teams across product/cloud/AI security, security operations, GRC, vulnerability management, and internal IT. Partner with engineering, product, legal, and parent-company security to manage risk, incident response, and secure adoption of AI while supporting a remote-first workforce.

Triage, investigate, and remediate security alerts from the Huntress platform. Perform forensic review of EDR telemetry, malware analysis, and cloud/M365 investigations. Escalate incidents, contribute to detection engineering, and support SOC operations and partner outcomes.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.

Design, deploy, and maintain cloud and edge security across AWS/GCP/Azure including Cloudflare WAF and SASE. Implement zero-trust access, CSPM, IaC security, threat modeling, incident runbooks, detection tuning, and mentor junior engineers while participating in on-call rotation.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.