Top Senior Cyber Security Jobs in Washington, DC

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Lead and deliver end-to-end Salesforce security and compliance engagements. Advise enterprise customers on security controls, governance frameworks, and compliance posture. Drive pre-sales, shape solutions, and present to executives. Develop practice methodologies and reusable assets, mentor team members, and collaborate with Product, Engineering, and Trust on the Salesforce security roadmap.

Monitor, analyze, and maintain the bank's technical security controls across cloud, on-prem, and SaaS. Respond to security alerts, run SIEM and network anomaly detection, manage identity and access, lead regulatory/compliance tasks, vendor security reviews, risk assessments, audits, and security awareness programs, and coordinate remediation and security projects.

Lead Senior ISSO responsible for RMF lifecycle and ATO decisions, leading a team of ISSOs, maintaining SSPs, CM and contingency plans, conducting risk and vulnerability assessments, and ensuring FISMA/NIST/DHS compliance while producing test and program reports and advising senior leadership.

Design and assess secure architectures for software, embedded, hardware, and cloud systems. Lead threat modeling, risk assessments, compliance/ATO support (RMF, NIST, CMMC), security testing, and remediation. Establish secure engineering standards, mentor teams, and collaborate across engineering and program stakeholders to integrate security throughout the product lifecycle.

Ensure privileged access controls meet IAM standards across platforms; partner with governance to measure and report controls; define PAM requirements for technology partners; apply PAM best practices and modernization efforts; identify and remediate PAM risks; educate stakeholders; support audits and provide senior management reporting to reduce sustained risk.

Lead and perform advanced penetration tests across the banks global technology environment. Hunt for high-risk vulnerabilities, exploit chains, document findings, articulate risk to stakeholders, mentor junior engineers, and collaborate with security and business partners to improve detection and response.

Lead modernization of enterprise access controls and cloud entitlement management across AWS, Azure, GCP and SaaS. Drive RBAC/ABAC/PBAC/JIT adoption, entitlement analytics, SOD controls, automation/AI-enabled workflows, role engineering, and cross-functional stakeholder engagement to reduce access risk and improve access lifecycle efficiency.

Partner with LOB and technology leaders to identify and prioritize information security risks, provide guidance on policies and controls, support application security and cloud security initiatives, conduct risk and control assessments, monitor security trends, advise on remediation and compliance, and participate in risk management and business continuity routines.

Lead enterprise process design and continuous improvement for cybersecurity technology delivery. Drive cross-functional transformation, facilitate workshops, apply Lean Six Sigma methods, define success measures, track outcomes, and embed continuous improvement to reduce risk, improve controls, and strengthen delivery consistency and user experience.

Lead process engineering and continuous improvement for cybersecurity technology portfolios. Conduct process discovery, redesign, documentation, root-cause analysis, and governance. Design and implement workflow automations and reporting using tools like Power Automate, Power BI, Alteryx, SQL, and Python. Facilitate stakeholder workshops, establish metrics, and drive adoption of scalable, data-driven operational solutions.

Perform NIST-based security control assessments and risk assessments, develop and review System Security Plans (SSP), produce SAR/RAR and POA&Ms, support SA&A (C&A) and contingency planning, and liaise with system owners and executives. Provide clear written and verbal deliverables and operate independently on security assessment tasks.

Lead ISSO responsible for implementing and maintaining security controls, conducting network/server scanning, patching, ST&E and POAM generation, and ATO documentation. Advise system owners and CISOs, perform vulnerability assessments, enter POA&Ms, and ensure compliance with RMF, NIST, FISMA, DCID 6/3. May lead teams and present mitigation recommendations.

Sell nuHarbor's cybersecurity solutions to large public-sector and critical infrastructure clients. Build CxO relationships, own the full enterprise sales cycle, forecast and manage pipeline, collaborate with partners and services, meet revenue and margin targets, and travel extensively. Maintain up-to-date cybersecurity knowledge.

Design, build, and maintain detection-as-code and AI-powered detection/response tooling across cloud, endpoints, and identity. Automate investigation and response workflows, lead incident response, improve observability, tune alerts, and partner with engineering to expand logging and embed detections.

Manage, configure, secure, and maintain the Enterprise Security System (ESS) environment including servers, databases, storage, and security platforms. Support integrations, monitoring, SLAs, ITIL-aligned processes, documentation, disaster recovery, performance reporting, and after-hours/surge support to ensure resilient, compliant enterprise security services.

Support digital forensics and malware analysis for incident response: analyze digital media and malicious code, investigate and contain security incidents, coordinate with cyber defense teams, and produce forensic documentation and reports to support remediation and closure.

Design, build, and secure resilient REST API integrations and cloud-native connections to support enterprise data access management. Develop security architecture artifacts, automation/orchestration, testing, and documentation. Support DLP and CASB initiatives, advise engineering teams, implement IAM and encryption controls, and ensure alignment with federal cybersecurity standards and compliance.

Lead and manage IT security operations including incident response, security tool administration, vulnerability management, IAM (IdP/MFA/SSO), security policy and compliance (ISO 27000, PCI), security awareness training, vendor security reviews, and coordination with cloud and network teams to protect systems and data.

Lead RMF and ATO activities for Navy systems, develop and maintain SSPs/POA&Ms, perform security control assessments, manage vulnerability scanning and remediation, support continuous monitoring, analyze security logs, and coordinate cybersecurity guidance and compliance reviews with stakeholders.

Provide senior-level cybersecurity risk management expertise supporting Authorization & Assessment (A&A), FISMA and IC security standards, continuous monitoring, CDS, and secure cloud/hybrid engineering. Apply NIST 800-series, CNSSI 1253, and RMF guidance, automate A&A and continuous monitoring activities, advise on compliance, remediation, and risk posture for federal mission needs.

Support RMF activities, security authorization, and system security posture for a large enterprise IT program. Perform RMF documentation, security control assessments, vulnerability identification, audits, and provide security guidance to engineering teams. Maintain compliance with federal regulations and assist in security authorization and accreditation processes.

Provide IAM/security support by specifying security requirements, advising implementation options, defining security requirements for new solutions, designing centralized authorization frameworks, evaluating cloud/mobile authentication and authorization technologies, integrating/testing IAM solutions, and coordinating with security teams to develop enterprise risk profiles.

Advise the I&A CISO on cybersecurity policy; analyze Federal, DHS, and IC guidance; translate policy into implementable plans; support cloud and on-premises governance; and communicate with government stakeholders and technical teams.

Serve as senior technical authority leading DOJ Security Assessment and Authorization (SAA) and RMF programs: guide system categorization, select and implement security controls, oversee assessments and continuous monitoring, advise leadership on risk, support incident response and audits, mentor security staff, and ensure audit-ready authorization artifacts.