Top Senior Cyber Security Jobs in Washington, DC

Partner with sales teams to design and present data security solutions, gather technical requirements, lead hands-on evaluations and custom configurations, design evaluation test plans, and guide prospects to successful outcomes.

Secure Runpod’s customer-facing products, APIs, and internal services through threat modeling, architecture and code reviews, vulnerability remediation, DevSecOps pipelines, application-layer defenses, security training, compliance support, and bug bounty triage. The role combines software development with application security across Python, Go, and JavaScript/TypeScript systems, focusing on secure-by-design practices and automated security controls.

Leads end-to-end delivery of AI security solutions for enterprise public-sector customers. Deploys and optimizes Zscaler AI Guard, AI Protect, and SPLX across cloud and Kubernetes environments; designs networking and firewall connectivity; performs automated AI red-teaming, vulnerability probing, and lab replication. Acts as a trusted technical advisor, produces documentation and demos, advocates customer needs, and supports product development. Requires expertise in LLMs, cloud networking, APIs, containers, and security, plus U.S. citizenship, clearance eligibility, and travel up to 40%.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Serve as an embedded security partner to business, product, data, and technology teams. Assess architectures, conduct threat reviews, develop secure-by-design patterns, guide SaaS and vendor selection, and translate security requirements into practical controls. Support identity, infrastructure, AI workflows, data strategy, M&A integrations, and automated guardrails while enabling teams through training and collaboration.

Designs, deploys, and operates IAM controls across cloud and on-premises infrastructure. The role secures human, service, workload, and AI-agent identities through authentication, authorization, least privilege, lifecycle automation, policy guardrails, monitoring, and incident response. Responsibilities include implementing IAM integrations, access reviews, threat modeling, security automation, and reliable on-call operations while partnering with infrastructure, platform, and incident response teams.

Design, deploy, and operate security controls for Dropbox’s AI and agentic infrastructure across cloud, Kubernetes, data stores, and on-premise systems. Secure authentication, authorization, networking, AI tools, and non-human workloads while addressing prompt injection, poisoning, supply-chain, and MCP risks. Lead security initiatives, harden infrastructure, automate policy and security operations, and collaborate cross-functionally to protect customer data. Participate in on-call rotations as required.

Supports federal security certification and authorization activities, coordinates assessments with independent assessors, validates control evidence, drives remediation and continuous monitoring, and evaluates security incidents for federal reporting obligations. The role also develops scalable compliance processes for cloud services and authorized boundaries, collaborating with technical and nontechnical stakeholders. It requires expertise in NIST 800-53, FedRAMP, DoD Cloud Computing SRG, CNSSI 1253, and federal cloud security compliance.

Drives growth of CDW’s security portfolio among state and local government customers. Builds executive relationships with CIOs and CISOs, leads security opportunities from discovery through close, and positions broad security solutions across identity, cloud, risk, compliance, threat management, and secure infrastructure. Partners with sales teams, solution architects, delivery teams, vendors, and public-sector stakeholders to develop integrated solutions, manage procurement cycles, coordinate events, and maintain accurate forecasts. Regional travel is required as needed.

Leads cybersecurity strategy and provides technical leadership for security software development. Designs and operates secure services, APIs, automation platforms, PKI and secrets-management systems across cloud environments. Integrates security controls into CI/CD pipelines, performs code reviews and threat modeling, supports telemetry and incident response, and mentors engineers. Collaborates with application, infrastructure, audit, and compliance teams to embed secure practices and define security roadmaps.

Own and improve Octus’s enterprise security technology across endpoints, identity, SaaS, email, DLP, AI tools, cloud, and applications. Responsibilities include managing security platforms, hardening systems, tuning SIEM detections, responding to incidents, driving remediation, supporting audits and client reviews, assessing vendor risk, automating workflows, and mentoring teammates. The role requires broad hands-on cybersecurity expertise across Mac and Windows environments, identity platforms, secure web gateways, DLP, compliance frameworks, scripting, and REST APIs.

Monitor and triage security alerts, support incident response and vulnerability remediation, review logs, tune SIEM detections, and maintain security documentation. The role contributes to risk assessments, control improvements, automation, dashboards, and operational playbooks while collaborating with internal teams. It requires familiarity with EDR, SIEM/SOAR, CSPM, vulnerability management, firewalls, cloud environments, networking, operating systems, security frameworks, and common attack techniques.

Own and coordinate cross-functional fraud and abuse prevention programs across Trust and Safety, Security, Engineering, Product, Legal, and Finance. Translate abuse trends into prioritized defenses, business cases, metrics, and implementation plans. Partner on payment fraud, chargebacks, account verification, AI-based risk detection, and incident escalation. Drive initiatives to completion without direct authority while balancing fraud risk with legitimate-user experience.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Leads Motive’s global security compliance, privacy, risk, audit, customer trust, and AI governance functions. Builds integrated controls across ISO, SOC, PCI DSS, FedRAMP, GDPR, and related frameworks; manages audits, privacy operations, international regulatory readiness, customer security reviews, policies, training, and human risk. The role also establishes AI-first automation, AI governance, and a path to FedRAMP while leading a distributed team and partnering across Legal, Engineering, Product, IT, Finance, Sales, and Customer Success.

Delivers virtual and occasional onsite cloud security training covering Falcon Cloud Security, CNAPP, CSPM, CWPP, containers, and incident response. Develops curricula, certification exams, and hands-on labs; maintains expertise in cloud threats and CrowdStrike products; and supports broader endpoint, identity, logging, and SIEM topics. Requires strong technical education, cloud security, communication, project management, AI technology, and occasional travel experience.

Build and refine security detections, logging, telemetry, SIEM pipelines, and incident response capabilities across cloud, corporate, and SaaS environments. Conduct threat hunting, threat modeling, alert triage, and response engineering. Develop automation and AI-assisted security tooling, maintain runbooks and documentation, participate in on-call rotations, and collaborate with engineering and business teams on security initiatives.

Build and operate central security systems, automation, tooling, and controls across cloud infrastructure, identity, access, products, partners, and vendors. Develop AI-assisted security workflows, lead external assessments through verified remediation, identify and validate vulnerabilities, guide engineering teams, and participate in incident response. The role requires production security engineering experience, strong programming skills, cloud security expertise, and fintech, payments, or crypto experience.

Conduct application security assessments, threat modeling, code reviews, and manual penetration testing across web applications, APIs, cloud services, appliances, and AI-enabled features. Coordinate external penetration tests, validate vulnerabilities, track remediation, and verify fixes. Improve SAST, SCA, secrets detection, container scanning, SBOM, supply-chain, and CI/CD security workflows while advising Engineering on secure design and risk prioritization.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Lead global security investigations and incident response, serving as incident commander for major events and guiding containment, remediation, recovery, and postmortems. Manage and develop a technical response team, establish readiness practices, improve security tooling and telemetry, and drive detection and automation enhancements. Translate incident metrics and business impact into executive and board-level reporting while developing AI-enabled investigation workflows with appropriate safeguards.

Partners with Sales to lead cybersecurity solution discovery, design, demonstrations, proof-of-value engagements, and customer validation. Advises enterprise security, identity, infrastructure, risk, and executive stakeholders on asset visibility, exposure management, identity, access, and risk solutions. Translates technical capabilities into business outcomes, supports complex sales cycles, develops technical documentation, leads training, and collaborates across Product, Marketing, Customer Success, and Support. Travel is typically 25–50%.

Leads cybersecurity oversight for critical third-party service providers, including security monitoring, vulnerability and incident impact analysis, remediation tracking, and risk escalation. Develops security frameworks for tokenization and digital asset providers, strengthens cross-functional engagement, and implements automation and data-driven processes to improve vendor risk management. Communicates material cybersecurity risks and recommendations to senior leadership.

Own application security for Generative AI and emerging products by integrating secure development practices, conducting design and code reviews, threat modeling systems, assessing vendors and AI tools, triaging vulnerabilities, and building security automation. The role partners with engineering and detection teams, contributes to cloud and infrastructure security, participates in incident response and on-call rotations, and documents post-incident remediation.

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.