Top Senior Cyber Security Jobs in Washington, DC

Designs, implements, and manages security controls across AWS, Azure, and GCP environments. Leads cloud architecture reviews, technical risk assessments, secure solution design, and compliance remediation. Automates security governance using Infrastructure as Code and Policy as Code, integrates security into CI/CD pipelines, evaluates cloud security solutions, and partners with DevOps, architecture, application, infrastructure, and risk teams to secure cloud-native systems.

Manage and enhance the firm’s information security systems, threat lifecycle, incident response, risk management, and security technology. Review and investigate security events, coordinate threat mitigation, lead third-party assessments, design scalable security environments, provide security consulting, and support users. The role requires expertise in SIEM, network and endpoint security, cloud technologies, incident response, Linux, and enterprise security controls.

Manage information security risk for CFO and Global Risk Management functions. Assess control gaps, exceptions, vulnerabilities, vendors, cloud services, applications, infrastructure, data protection, and identity access. Coordinate remediation, audits, regulatory activities, governance, and risk reporting across business, technology, legal, compliance, and vendor stakeholders. Translate technical risks into business impacts, provide practical guidance, monitor emerging threats, and support security strategy and modernization initiatives.

Deploys and manages cloud, virtualized, physical network, and cybersecurity infrastructure, including IDS/IPS, firewalls, SIEM, SOAR, and EDR. Automates provisioning, patching, and reporting with PowerShell, Ansible, Terraform, and REST APIs. Monitors and tunes HCI clusters, conducts disaster-recovery drills, applies STIGs, investigates incidents, maintains runbooks, and mentors junior staff. Requires Windows and Linux administration, networking, infrastructure-as-code, backup and recovery, capacity planning, and troubleshooting expertise in a cleared DoD environment.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Serve as the primary cybersecurity advisor for assigned systems and lead Risk Management Framework assessment and authorization activities. Develop and maintain security plans, assessments, POA&Ms, risk acceptances, agreements, and other authorization artifacts. Conduct continuous monitoring, control assessments, vulnerability reviews, impact analyses, and user account reviews. Coordinate remediation with system owners and technical teams, support audits and inspections, and help maintain compliant Authority to Operate status.

The Chief Information Security Officer leads DLA Piper’s enterprise cybersecurity strategy, governance, risk management, incident response, data protection, third-party security, security awareness, and operational resilience programs. The role advises executives and governance bodies, oversees security controls and emerging technology risk, translates technical risks into business and legal impacts, and builds a high-performing global information security organization. The CISO also manages security policies, audits, regulatory and client obligations, vendor oversight, budgets, talent development, and executive communications.

Own strategic post-sales relationships with enterprise customers, advising them on AI security and governance. Lead discovery, define measurable outcomes, drive adoption, support retention and expansion, and coordinate Product, Engineering, Security, Support, and operationalization teams. Translate CISO-level strategy, GRC concerns, business objectives, and technical requirements into practical solution strategies while identifying new AI security use cases and growth opportunities.

Secure Temporal’s development pipeline, product, and customer execution environments. Partner with engineering teams on secure architecture, threat modeling, risk assessments, code and software supply-chain security, vulnerability triage, Kubernetes hardening, multi-tenant isolation, and responsible AI security. Participate in on-call rotations and help establish actionable security policies and practices across the organization.

Leads cybersecurity solutions engineering for government and education customers across managed security, network monitoring, cloud security, and related services. Provides technical discovery, solution design, demonstrations, proofs of concept, onboarding, deployment guidance, escalations, and post-sales support. Partners with sales and technical account teams, mentors engineers, develops enablement materials, informs product strategy, identifies expansion opportunities, and manages customer activity in Salesforce.

Build Tempo’s product security program from the ground up, including application, infrastructure, endpoint, and supply-chain security tooling. Identify and remediate production and development-pipeline risks, lead incident response through post-mortems, conduct secure design reviews, and establish scalable security practices. The role requires hands-on coding, deep incident-response expertise, strong infrastructure and application-security knowledge, and autonomous collaboration with engineering.

Own Fetch’s information security function, including vulnerability management, application security, incident response, forensics, security architecture, GRC, compliance, third-party risk, AI governance, and security awareness. Serve as incident commander and senior technical authority, mature the security program, lead audits and executive reporting, manage security risks, and hire and develop the Security Engineering team.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

Design and implement advanced cybersecurity solutions for DOE/NNSA programs. Perform security engineering, assessments, risk analysis, and compliance activities; develop software and technical solutions; support multi-lab teams; deliver cybersecurity training; and manage stakeholder priorities while using tools like Splunk, RSA, Tenable Nessus, and SELinux.

Lead SecOps functions including threat detection, alert triage, incident response, vulnerability and configuration management, endpoint and network security operations, threat hunting, malware analysis, vendor management, and mentoring a team of security analysts to improve detection and response capabilities.

Lead IT security architect responsible for AWS security architecture, compliance (NIST 800-171/CMMC), and GovCloud IL5/IL6 deployments. Maintain SSP, POA&Ms, evidence, and remediation tracking; coordinate with auditors and customer ISSM/ISSO; partner with DevSecOps and Engineering to implement secure baselines, logging, monitoring, encryption, segmentation, vulnerability management, and incident response for regulated environments.

Design, implement, and manage corporate security controls across identity, endpoints, network, and data. Lead IAM/SSO/MFA, EDR/MDM, email/DLP, vulnerability management, vendor risk assessments, phishing simulations, and incident investigations. Support compliance, audits, pen-tests/red-team remediation, and security culture through training and cross-functional collaboration.

Lead complex security risk management including A&A, continuous monitoring, and FISMA compliance. Apply NIST SP 800 and CNSSI 1253 controls to secure cloud and hybrid environments, Cross Domain Solutions, and IC cybersecurity policy and standards.

Ensure privileged access controls meet IAM standards across platforms; partner with governance to measure and report controls; define PAM requirements for technology partners; apply PAM best practices and modernization efforts; identify and remediate PAM risks; educate stakeholders; support audits and provide senior management reporting to reduce sustained risk.

Perform NIST-based security control assessments and risk assessments, develop and review System Security Plans (SSP), produce SAR/RAR and POA&Ms, support SA&A (C&A) and contingency planning, and liaise with system owners and executives. Provide clear written and verbal deliverables and operate independently on security assessment tasks.

Manage, configure, secure, and maintain the Enterprise Security System (ESS) environment including servers, databases, storage, and security platforms. Support integrations, monitoring, SLAs, ITIL-aligned processes, documentation, disaster recovery, performance reporting, and after-hours/surge support to ensure resilient, compliant enterprise security services.

Support digital forensics and malware analysis for incident response: analyze digital media and malicious code, investigate and contain security incidents, coordinate with cyber defense teams, and produce forensic documentation and reports to support remediation and closure.