Top Senior Cyber Security Jobs in Washington, DC

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Perform deep security analysis of endpoint products and sensors: threat modeling, source-code review, exploit-style testing (including kernel components), reproduce/validate bug bounty findings, collaborate with developers to fix vulnerabilities, and build tooling/automation to improve security workflows.

Lead technical security strategy and implementation for Managed Services platforms. Design and improve security controls, IAM, PAM, vulnerability management, incident response, and compliance. Embed secure-by-design and DevSecOps practices, mentor engineers, and partner with architecture, engineering, and operations to reduce risk and enable scalable growth.

Partner with sales to design and present data security solutions for SLED customers. Lead technical evaluations, gather requirements, build test plans, configure proof-of-concepts, and guide customers to successful outcomes while collaborating across GTM teams.

Lead AI security strategy and guardrails, design and review AI gateways and tooling, scale InfoSec review processes, reduce AI-driven security noise, drive remediation and investigations, and mentor security and platform engineers.

Design, implement, and maintain security controls across cloud (AWS) and on-prem systems. Lead vulnerability management, incident response, and remediation. Serve as SME for SIEM, SAST/DAST, IAM. Embed security in SDLC, support SOC 2/ISO 27001 audit readiness, mentor junior engineers, and recommend control improvements.

Lead MSSP-focused sales to recruit, enable, and grow managed security provider partners. Drive joint services, partner-led customer adoption, revenue attainment, forecasting, and cross-team issue resolution while meeting quotas and pipeline targets.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Lead and grow a product research team focused on defensive cybersecurity research. Own technical and managerial leadership, collaborate with Product, SOC, and Engineering, scale automated threat-detection workflows using AI, and mentor researchers to deliver prioritized platform capabilities.

Serve as a senior embedded cybersecurity consultant across the customer lifecycle: secure technical wins in pre-sales, run POVs, advise C-level and technical stakeholders, design cyber skills programs and crisis simulations, drive platform adoption and roadmaps, operationalize Immersive One with metrics and EBRs, and act as the customer liaison to sales, product, and engineering to improve cyber workforce resilience.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.

Senior technical security engineer responsible for cloud infrastructure security, detection engineering, incident response, application and product security, vulnerability management, penetration test ownership, and security automation. Partners with platform, logistics, and IT teams, manages an application security contractor, and builds tooling to raise the security posture across AWS, IaC, edge, and container environments.

Design, build, and deliver technical cybersecurity training: analyze needs, create modular learning assets (self-paced and instructor-led), validate effectiveness, coordinate with SMEs, and translate operational knowledge into trusted documentation.

Design and build custom security tools, middleware, and automations to integrate Identity, MDM, EDR, SIEM, and SaaS platforms. Implement API-driven data flows, UIs, CI/CD pipelines, SOAR playbooks, and secure deployment practices. Collaborate with Security Ops, IT, and Engineering to translate policies into automated, secure solutions.

Lead and grow a remote Security Detection & Response team, build detection engineering and observability systems, drive telemetry onboarding, Panther and MITRE-aligned detections, Python automation, CI/CD workflows, and AI-assisted triage. Own incident response, investigations, cross-functional collaboration, and measurement of detection effectiveness.

Provides cybersecurity oversight, risk management, compliance support, and Authority to Operate leadership for federal Health IT systems. Responsibilities include ATO documentation and coordination, continuous monitoring, vulnerability remediation tracking, security planning, incident response coordination, reporting, audit preparation, and advising leadership on risks. The role collaborates with system owners, project managers, authorizing officials, and technical teams while ensuring compliance with NIST, FISMA, DHS policies, and related federal security standards.

Leads cybersecurity compliance and authorization activities for a FISMA Moderate Department of Labor application ecosystem. Maintains security documentation, CSAM artifacts, risk registers, POA&Ms, and ATO materials; analyzes vulnerabilities and assessment findings; coordinates remediation across application, database, infrastructure, and DevSecOps teams; supports secure SDLC controls, incident response, continuous monitoring, governance reviews, and federal security reporting.

Designs, implements, and manages cybersecurity solutions for cloud and on-premises systems supporting federal requirements. Responsibilities include security architecture, vulnerability assessment, security controls, cyber risk management, incident response, remediation, security-tool administration, secure system design, and integration of security throughout IT and development lifecycles. The role applies FISMA, NIST SP 800-53, CSF, FedRAMP, and Zero Trust principles while collaborating across teams and strengthening organizational security posture.

Lead FISMA Moderate security compliance for DOL SWARAS: maintain CSAM artifacts, security documentation, risk registers, POA&Ms, and ATO support. Analyze scans and assessments, coordinate remediation with DevSecOps/DBA/owners, support secure SDLC and incident response, and provide security input for continuous monitoring and governance.

Leads authorization and accreditation reviews, documents security controls and RMF artifacts, develops security plans and operating procedures, tracks POA&Ms, coordinates A&A activities, supports audits, and updates compliance documentation based on emerging threats, intelligence-community guidance, federal laws, and agency policies. The role is onsite in Washington, DC and requires active TS/SCI with polygraph clearance.

Drive Cisco Security sales to federal civilian, law enforcement, and state/local government agencies by developing account plans, building executive relationships, positioning security solutions (Zero Trust, SASE, cloud/XDR, identity), navigating procurement, and collaborating with internal teams and partners to exceed sales targets.

Support authorization and accreditation of classified Azure Government systems by developing A&A packages, SSPs, POA&Ms, and ATO documentation. Manage security controls, continuous monitoring, auditing, logging, vulnerabilities, and compliance across Azure security services. Guide SIEM/SOAR integrations, remediation, DevSecOps security, control evidence collection, assessments, and federal authorization processes. Coordinate with technical teams, mission owners, assessors, and authorizing officials while maintaining NIST, DoD, and CIS compliance.