Top Entry Level Cyber Security Jobs in Washington, DC

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.

Lead Affirm’s enterprise AI security review program, threat model LLM and agentic systems, review code and configurations, and develop security guardrails, tooling, policies, and monitoring. Evaluate AI-enabled SaaS vendors, identify emerging vulnerabilities, support incident response, and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance. The role requires expertise in AI security architecture, threat modeling, IAM, cloud infrastructure, policy-as-code, and regulated enterprise environments.

Support day-to-day GRC operations: assess third-party vendors, maintain vendor risk register, track remediation and control evidence, assist with internal control testing and audits (SOC 2, ISO 27001, PCI-DSS), maintain policies, prepare reporting, and contribute to process improvements.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Sets application security direction and standards across engineering teams. Builds scalable security tooling, automation, and observability; leads threat modeling, risk assessments, code reviews, and multi-team remediation. Develops strategies for AI-powered systems and agentic development risks, API security, and software supply chain security. Partners with engineering and security teams, prioritizes investments, communicates risk to leadership, and mentors AppSec engineers.

Leads cybersecurity, privacy, risk management, platform security, and compliance activities for federal systems supporting the EEOC. Oversees NIST, FedRAMP, and FISMA compliance; security controls; authorization activities; risk assessments; security documentation; cloud and platform security; incident response; vulnerability remediation; and privacy protection. Advises federal stakeholders, executives, engineers, and program leadership while coordinating security throughout the system development lifecycle.

Build and secure scalable backend services and APIs while debugging, optimizing performance, implementing features, refactoring codebases, and conducting security reviews and penetration testing. The role also involves automated testing, code review, vulnerability assessment, and contributing domain expertise to training next-generation AI systems.

Design and present Qualys-based cybersecurity solutions for federal enterprise customers. Lead technical presales engagements, proofs of concept, architecture workshops, compliance assessments, and deployment health checks. Advise customers on asset and vulnerability management, patching, threat detection, cloud and application security, and compliance. Partner with sales, product management, marketing, and strategic partners to secure technical wins, influence product roadmaps, enable field teams, and create technical content. Requires at least 30% customer travel.

Designs and engineers secure network and cloud architectures across AWS, GCP, Azure, and physical data centers. Responsibilities include threat modeling, network segmentation, monitoring, alerting, automation, attack-surface reduction, and secure connection patterns. The role drives strategic security improvements, partners with product and infrastructure teams, communicates architectural decisions, and mentors engineers. Candidates need deep hybrid networking and cloud security expertise, protocol knowledge, scripting ability, independent problem-solving skills, and strong communication.

Own security partnerships for Customer Service and Creative Technology. Advise on GenAI and GenMedia security, customer data environments, cloud infrastructure, third-party tools, training data governance, and risk treatment. Build business risk profiles, drive remediation, report security posture, and support technical security due diligence for acquisitions and subsidiaries.

Build and improve security across applications, cloud infrastructure, internal systems, and products. Responsibilities include identifying and remediating risks, developing security tooling and automation, conducting architecture reviews and threat modeling, integrating security into the software development lifecycle, strengthening identity and access controls, and developing monitoring, vulnerability management, detection, and incident response capabilities.

Designs, builds, operates, and integrates workforce identity and access management solutions for employees, contractors, and partners. Responsibilities include federated authentication, provisioning and deprovisioning, identity governance, compliance, access management, vendor integrations, acquisition-related migrations, solution rollout, and cloud-based service operation. The role requires hands-on IAM expertise, strong communication, programming familiarity, CI/CD experience, and AWS experience.

Owns the architecture and technical roadmap for the Ping Identity platform. Designs enterprise SSO, MFA, identity governance, application integrations, RBAC and ABAC frameworks, lifecycle management, and cloud or hybrid deployments. Leads migration and multi-region availability strategies while producing architecture designs, solution blueprints, integration standards, and audit-ready runbooks.

Own FAR.AI’s internal IT and security function, including accounts, devices, identity and access management, onboarding, offboarding, office networking, support, endpoint hardening, data protection, governance, and vendor risk. The role will remediate security gaps using threat modeling, automate self-service infrastructure, partner across teams, communicate and manage change, and hire and lead an IT Coordinator.

Lead cybersecurity risk strategy for frontier AI auditing. Design secure audit systems and privacy-enhancing technologies, evaluate AI-related cybersecurity risks, develop code and data tools, and strengthen internal IT infrastructure. Responsibilities include access controls, data protection, device management, incident response readiness, and communicating threat models, cryptography, and risk to technical and non-technical stakeholders.

Designs and secures enterprise AI platform foundations for mission-critical environments. Responsibilities include threat modeling, tenant isolation, identity and authorization architecture, secure CI/CD, compliance-by-design, and protection of systems executing untrusted code, tools, or agent actions. The role partners with client engineering, product, security, and business stakeholders to deliver secure, reliable, and compliant platform capabilities.

Perform SAP user management including role creation, provisioning, access reviews, SoD risk assessments, and GRC security component design, development, and testing. Assess client security requirements and propose controls beyond standard SAP security.

The Product Security Engineer partners with Engineering and Product teams to embed security throughout the development lifecycle. Responsibilities include threat modeling, architecture and security reviews, vulnerability validation, remediation planning, security-tool ownership, automation, secure coding guidance, incident response, and assessing risks in cloud and AI-enabled products. The role requires strong application security, identity, authentication, authorization, coding, communication, and cross-functional collaboration skills.

The fellowship provides military spouses and separating service members with cybersecurity training and hands-on experience through projects and vendor training, aimed at enhancing their security skills.

Designs and implements security controls across cloud platforms, operating systems, Kubernetes, networks, and CI/CD. Audits infrastructure for weaknesses, develops security and privacy improvements, performs threat modeling, and drives remediation. The role includes software development, infrastructure security, incident containment, and technical security analysis while collaborating with engineering teams in a distributed startup environment.

Company-wide recruiting bucket for Trace3's Security team. No specific role duties listed; applicants are encouraged to apply for a specific security opening. Describes company culture, perks (benefits, 401(k), PTO), and commitment to diversity and inclusion.