Top Senior Cyber Security Jobs in Washington, DC

Lead and manage IT security operations including incident response, security tool administration, vulnerability management, IAM (IdP/MFA/SSO), security policy and compliance (ISO 27000, PCI), security awareness training, vendor security reviews, and coordination with cloud and network teams to protect systems and data.

Provide senior-level cybersecurity risk management expertise supporting Authorization & Assessment (A&A), FISMA and IC security standards, continuous monitoring, CDS, and secure cloud/hybrid engineering. Apply NIST 800-series, CNSSI 1253, and RMF guidance, automate A&A and continuous monitoring activities, advise on compliance, remediation, and risk posture for federal mission needs.

Support RMF activities, security authorization, and system security posture for a large enterprise IT program. Perform RMF documentation, security control assessments, vulnerability identification, audits, and provide security guidance to engineering teams. Maintain compliance with federal regulations and assist in security authorization and accreditation processes.

Provide IAM/security support by specifying security requirements, advising implementation options, defining security requirements for new solutions, designing centralized authorization frameworks, evaluating cloud/mobile authentication and authorization technologies, integrating/testing IAM solutions, and coordinating with security teams to develop enterprise risk profiles.

Advise the I&A CISO on cybersecurity policy; analyze Federal, DHS, and IC guidance; translate policy into implementable plans; support cloud and on-premises governance; and communicate with government stakeholders and technical teams.

Serve as senior technical authority leading DOJ Security Assessment and Authorization (SAA) and RMF programs: guide system categorization, select and implement security controls, oversee assessments and continuous monitoring, advise leadership on risk, support incident response and audits, mentor security staff, and ensure audit-ready authorization artifacts.

Serve as senior ISSO to lead cybersecurity risk management, A&A, FISMA compliance, continuous monitoring, and secure cloud/hybrid engineering using NIST and CNSSI controls and RMF principles.

Serve as a Principal SOC Analyst supporting federal cyber missions. Requires 5+ years experience, technical training or degree, required IAT II/CSSP/GMON/SCCU certifications, active Top Secret/SCI clearance and ability to obtain a polygraph. Work onsite supporting SOC operations, threat monitoring, and incident response.

Manage full lifecycle RMF/DIACAP Assessment & Authorization activities to support Authorization to Operate (ATO). Conduct security assessments, maintain risk registry, support vulnerability scanning and patch management, produce A&A documentation, and provide technical guidance on mitigation and configuration management.

Lead and oversee cybersecurity and system security compliance for mission systems. Collaborate with cross-functional teams, analyze operational challenges, recommend improvements, and produce documentation, reports, and deliverables to support continuous improvement and mission objectives.

Design, implement, and validate cloud security architectures for Intelligence Community systems. Support RMF assessments, create and evaluate security documentation, advise on security doctrine, recommend tools, and implement cloud-native and IaC solutions. Work hands-on with clients to ensure compliance and secure mission-critical environments.

Serves as the endpoint security subject-matter expert for support, Sales Engineering, and Customer Success. Diagnoses complex Windows and macOS endpoint issues, analyzes telemetry and logs, troubleshoots integrations with EDR, DLP, and MDM products, and provides prioritized customer recommendations. Partners with Engineering and QA on defect investigation and validation, maintains lab capabilities, and creates runbooks and documentation. The role also enables field teams to explain endpoint findings and improve customer outcomes.

Own Tribe’s corporate security, compliance, AI governance, and client-facing security programs. Lead SOC 2 and future certification efforts, enterprise security reviews, risk management, security controls, incident response, vendor risk, and Trust Center operations. Establish governance for AI agents, assistants, model providers, and subprocessors while partnering with engineering on architecture reviews, threat modeling, secure SDLC, data flows, and production readiness. Translate customer requirements into scalable security controls and operating processes.

Serve as the senior network-security subject-matter expert for support, sales engineering, and customer success. Review firewall rules, segmentation, controls, and product findings; troubleshoot integrations across enterprise network-security platforms; diagnose issues using packet captures, flow data, logs, and protocol behavior; and provide actionable root-cause guidance. Partner with Engineering and QA on defects and fixes, maintain network test capabilities, and author runbooks and documentation. Coach sales engineers and help harden the product through escalations and feedback.

Build and maintain cloud security improvements across AWS/GCP, Kubernetes, and CI/CD environments. Design detection and response capabilities using SIEM, EDR/MDR, cloud-native detections, and CNAPP tools. Investigate and respond to security incidents end to end, develop detection logic and playbooks, and create security tooling and automations using Python, Terraform, and infrastructure-as-code. The role also supports endpoint security and secure DevOps practices.

Own and mature Neumo’s Governance, Risk, and Compliance program, including SOC 1, SOC 2, and PCI DSS audits, risk registers, data governance, control automation, vendor assessments, and exception processes. Manage 1–2 direct reports, coordinate remediation, leverage AI/LLM tools, participate in incident management, and communicate compliance posture and risk trends to executives and the board.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Own technical pre-sales for enterprise AI security: lead discovery, design demos, execute end-to-end POCs, partner with AEs, surface product feedback, and advise customers on complex technical decisions.

Lead product marketing for Keeper's cybersecurity products: define messaging, positioning and use cases; execute cross-functional launches; create content and SEO-optimized assets; coordinate webinars and partner co-marketing; gather customer feedback and conduct market and competitor research to drive awareness and pipeline.

The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.

Lead security initiatives by establishing secure development practices, conducting security reviews, as well as managing threat modeling and security assessments.

Lead Wikimedia Foundation’s product security strategy, prioritize security and privacy engineering initiatives, develop platform interventions against threats, strengthen organizational security culture, and communicate with Wikimedia communities. The role partners with cross-functional and departmental leaders on information security, represents the Foundation to volunteers, and applies AI-based tools to security analysis, code review, and software engineering. Prior product management experience is not required, but strong technical, security, communication, and online-community experience are important.

Supports client engagements focused on cryptographic risk, post-quantum readiness, encryption modernization, PKI, and key lifecycle management. Responsibilities include cryptographic asset discovery, inventory development, risk analysis, PKI and TLS assessments, PQC migration planning, remediation tracking, standards alignment, client workshops, documentation, and presenting findings to technical stakeholders.

Lead the engineering modernization of enterprise data protection and DLP capabilities across cloud, SaaS, endpoints, email, and collaboration platforms. Build automated Policy-as-Code workflows, CI/CD pipelines, reusable controls, integrations, detection logic, guardrails, and operational metrics. Partner with technical, compliance, privacy, legal, and business teams to improve security effectiveness, reduce false positives, automate governance, investigate events, and demonstrate measurable risk reduction.

Lead pre-sales security architecture engagements by designing and validating defense-in-depth solutions across hybrid, cloud, application, identity, endpoint, network, and data environments. Conduct security assessments, create remediation roadmaps, integrate security platforms, and support DevSecOps, SOC, detection engineering, incident response, compliance, and risk programs. Collaborate with sales, engineering, clients, and executive stakeholders to communicate technical trade-offs and deliver scalable enterprise security strategies.