Top Senior Cyber Security Jobs in Washington, DC

Leads cloud security engagements across IaaS, PaaS, and SaaS environments. Designs security architecture and controls, conducts risk assessments and vulnerability testing, manages monitoring and incident response, tracks remediation, and develops technical deliverables. The manager coaches team members, oversees project quality and timelines, addresses stakeholder issues, and identifies opportunities to improve cloud security through automation and emerging technologies.

Architects and manages enterprise security engineering, threat detection, vulnerability assessment, security hardening, incident response, and security policies across cloud, on-premises, and SaaS environments. The role monitors security logs, supports compliance, advises on vendors and implementations, integrates security into the development lifecycle, and participates in on-call and change management activities.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.

Lead Runpod’s security organization and own the security posture of its cloud platform, infrastructure, and corporate environments. Responsibilities include security strategy, cloud and application security, SecOps, GRC, compliance certifications, secure software development, threat modeling, vulnerability management, incident response, vendor risk, security automation, and infrastructure security. Build and mentor a distributed security team while partnering with Engineering, Infrastructure, Product, GTM, and Legal to protect customer AI workloads and support scalable growth.

Provides security architecture and enablement across SaaS platforms, APIs, custom applications, data integrations, cloud environments, and AI workflows. Partners with product, engineering, data, architecture, identity, infrastructure, enterprise, and procurement teams to conduct threat reviews, develop secure-by-design patterns, assess vendors, implement guardrails, and manage risks. Translates security requirements into practical solutions, supports enterprise data strategy and M&A integration, and mentors teams as a trusted security advisor.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Develop and maintain security baselines using CIS and STIG benchmarks, apply NIST guidance, assess system risks and controls, monitor security environments, identify vulnerabilities, and translate technical requirements into FISMA, NIST, and client-specific controls. The role supports cloud, enterprise, networking, operating system, and workflow platforms while helping protect SEC systems and infrastructure.

Manage federal information system security authorization and Risk Management Framework lifecycles. Develop and maintain security plans, assessments, remediation plans, contingency and incident response plans, inventories, and continuous monitoring processes. Conduct risk analyses, security control assessments, vulnerability scans, and compliance reporting under FISMA and NIST requirements. Coordinate stakeholders, support incident response, validate physical safeguards, and provide technical security guidance for law enforcement systems.

Leads information security and compliance for federal hybrid cloud and on-premises systems. Responsibilities include secure AWS and Azure architecture, NIST 800-53 control implementation, RMF and ATO support, threat modeling, vulnerability and compliance management, SIEM integration, STIG and CIS baseline oversight, DevSecOps security guidance, technical documentation, audits, and mentoring junior staff.

Secure and operate AI platforms, gateways, agents, and tool integrations across their lifecycle. Build security automation, privileged access controls, network and endpoint protections, logging and telemetry pipelines, SIEM integrations, dashboards, alerts, and monitoring. Review integrations for security risks, enforce authentication, authorization, guardrails, and usage governance, and support firewall, SASE/ZTNA, WAF, identity, and infrastructure security engineering.

Leads cybersecurity compliance and authorization activities for mission-critical systems. Conducts security assessments, implements RMF and NIST 800-53 controls, manages ATO and IATT processes, develops SSPs, SAPs, and POA&Ms, coordinates stakeholders, supports remediation and monitoring, and applies Zero Trust principles. The role requires active TS/SCI with polygraph, Security+ or equivalent certification, extensive cybersecurity experience, and proficiency with XACTA and Splunk.

Leads cybersecurity compliance and authorization activities for mission-critical government systems. Conducts security assessments, implements RMF and NIST 800-53 controls, manages IATT and ATO processes, maintains SSPs, SAPs, POA&Ms, and coordinates remediation with engineering, operations, assessors, system owners, and government stakeholders. Supports Zero Trust architectures, Splunk-based monitoring, continuous compliance, and classified enterprise programs.

Administers Microsoft 365 GCC G5 security, compliance, identity, and data protection controls. Manages Purview DLP, Defender, Entra ID, cloud security policies, alerts, incident investigations, access controls, documentation, KPI reporting, and authorization evidence. Supports cybersecurity operations, risk reviews, remediation, and knowledge transfer. The role requires six years of cybersecurity experience, extensive Microsoft 365 security administration, Security+ certification, U.S. citizenship, and favorable Tier 2 Public Trust adjudication.

Responsible for managing information assurance and cybersecurity compliance for a complex federal cloud infrastructure program. Develops and maintains RMF authorization packages, SSPs, POA&Ms, contingency and incident response plans, and other security documentation. Performs risk analyses, security control assessments, vulnerability scans, continuous monitoring, and incident response support. Coordinates with customer cybersecurity organizations and stakeholders to achieve and maintain ATO, ensure FISMA compliance, and address system weaknesses.

Manage operational, security, and compliance risks; evaluate controls, oversee risk acceptance and issue lifecycles, and drive remediation. Build automated Python, API, and AI-agent workflows to scale risk operations. Develop risk analytics, KRIs, KPIs, assessment methodologies, and executive reporting while advising stakeholders on security controls, regulatory frameworks, and risk governance.

Conduct enterprise vulnerability assessments, optimize Nessus scanning, prioritize and govern remediation, coordinate patching and retesting, review firewall, endpoint, cloud, IAM, and network security controls, support penetration testing, and produce dashboards, reports, runbooks, and security documentation. The role requires on-site work in Washington, DC three days weekly, after-hours support, periodic local travel, and eligibility for a Tier 2 Public Trust.

Designs, develops, and implements cybersecurity architectures, network security controls, vulnerability mitigations, and security-enabled systems supporting the FBI. The role defines information system security requirements, integrates Cross Domain Solutions, develops interface specifications, and ensures hardware, operating systems, applications, and networks meet cybersecurity requirements. Requires Top Secret clearance, CI Poly eligibility, relevant cybersecurity experience, security-tool familiarity, and an approved cybersecurity certification.

Lead cybersecurity compliance and authorization activities for assigned systems. Conduct security assessments, implement NIST 800-53 controls, maintain SSPs and POA&Ms, coordinate IATT and ATO efforts, support assessment events, and apply Zero Trust principles in cloud-native environments. Collaborate with engineers, system owners, ISSMs, security assessors, and authorizing officials to ensure systems meet security requirements throughout the program lifecycle.

Own Deepgram’s privacy operations, security compliance, audit evidence, control mapping, security questionnaires, policies, and public trust documentation. Lead DPIAs, data-flow mapping, DSAR and deletion workflows, vendor reviews, SOC 2, ISO 27001, and PCI DSS audits. Partner with Engineering, Legal, Research, and Sales Engineering to verify technical claims, automate evidence collection, maintain accurate documentation, and translate privacy and AI regulations into practical requirements and enablement.

Leads federal information security, privacy, and GRC activities across the RMF lifecycle, including ATOs, continuous monitoring, risk assessments, authorization packages, remediation, incident response, contingency planning, privacy compliance, audits, and stakeholder advising. The role requires managing multiple initiatives, producing audit-ready documentation, and ensuring compliance with FISMA, NIST, OMB, CJIS, and federal privacy requirements.

Conduct security control assessments for federal information systems across RMF assessment, authorization, and monitoring activities. Develop assessment plans, test cases, findings, recommendations, and risk analyses; review vulnerability, penetration testing, and configuration scan results; assess residual risk and false positives; and produce Security Assessment Reports and authorization briefings. Collaborate with technical teams, system owners, and stakeholders while ensuring compliance with FISMA, NIST, and agency requirements.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Lead OT security monitoring and triage operations, investigate suspicious activity across industrial networks, tune detections, manage vulnerabilities and asset classification, and escalate findings to incident responders and threat hunters. Produce customer-facing reports, support platform operations, mentor analysts, and collaborate across cybersecurity teams. The role requires shift-based coverage, remote coordination, and expertise in network security with a strong interest in ICS/OT environments.

Own enterprise IAM and PAM engineering across Entra ID, hybrid Active Directory, Microsoft 365, and privileged-access platforms. Manage identity lifecycle, federation, access governance, endpoint and mobile security, vulnerability management, and security configurations. Support incident response as a Tier 3 escalation point, translate compliance requirements into technical controls, automate workflows and evidence collection, and partner with IT, GRC, and CSIRT teams. Provide documentation, standards, mentorship, and technical guidance across cloud, SaaS, endpoint, and infrastructure security.

Leads and matures the organization’s 24x7 security operations and cyber defense capabilities. Oversees SOC personnel, incident response, threat hunting, detection engineering, security automation, cloud and identity security, budgets, vendors, and operational metrics. Develops response procedures, manages major incidents and exercises, improves SIEM/EDR/SOAR effectiveness, implements AI-assisted security operations, supports compliance requirements, and builds workforce capability through recruiting, coaching, and succession planning.