Top Senior Cyber Security Jobs in Washington, DC

Leads the architecture, implementation, integration, automation, testing, and optimization of ServiceNow and Veza identity security solutions. Advises clients on identity governance, authorization visibility, access analytics, compliance, and cybersecurity strategy. Conducts workshops, demonstrations, training, troubleshooting, and technical delivery from discovery through deployment. Develops scripts, applications, dashboards, and workflows while mentoring junior staff and supporting proposals, estimates, and sales opportunities.

Leads identity security and IAM implementation projects for enterprise clients using ServiceNow and Veza. Manages client engagement, requirements workshops, solution design, delivery timelines, risks, and distributed teams. Oversees identity governance, access certification, lifecycle management, provisioning, and authorization visibility implementations. Coordinates integrations with cybersecurity programs, mentors consultants, ensures solution quality, supports process improvements, and assists sales pursuits. The role also develops governance strategies for human and non-human identities, including service accounts, APIs, machine identities, and AI agents.

Architect and engineer multi-tenant SIEM, SOAR, EDR, telemetry, and cloud security platforms for managed security services. Build detection content, automate response workflows, optimize log ingestion, and secure customer connectivity. Lead technical discovery, onboarding, security assessments, remediation planning, escalations, solution design, and customer advisory engagements. Create architectures, runbooks, and documentation while shaping the MSSP technology strategy.

Lead product marketing for Keeper's cybersecurity products: define messaging, positioning and use cases; execute cross-functional launches; create content and SEO-optimized assets; coordinate webinars and partner co-marketing; gather customer feedback and conduct market and competitor research to drive awareness and pipeline.

The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.

Lead security initiatives by establishing secure development practices, conducting security reviews, as well as managing threat modeling and security assessments.

Lead hands-on security engineer responsible for designing, implementing, hardening, automating, and optimizing enterprise security controls across cloud, identity, endpoint, network, email, and data protection. Builds and maintains security platforms (SIEM, SOAR, XDR/EDR), develops detection logic, automates workflows, supports incident response, and partners with cross-functional teams to raise security engineering maturity and reduce risk.

Lead and grow the security operations team to detect, investigate, and respond to threats across endpoints, identity, email, and cloud. Develop SecOps strategy, incident response playbooks, run tabletop exercises, manage SIEM/EDR/email security, drive identity governance, vendor/MSSP relationships, and report security KPIs to leadership.

Design and assess secure systems for Microsoft business operations: perform threat modeling and security design assessments, drive risk-based architecture decisions, communicate risk, mentor teammates, and ensure compliance with security policies and screenings.

Perform advanced threat hunting and deep analysis of attacker activity across on-premises and cloud environments, notify customers of imminent threats, build proof-of-concept hunting tools and automations, synthesize findings into mitigation recommendations, and drive product/tool improvements by transferring threat intelligence and investigation best practices to engineering and customer teams.

Hands-on senior IT security systems administrator responsible for administering Google Workspace and Microsoft 365, managing Windows and Mac endpoints via MDM, operating identity and SSO/MFA systems, and running security tooling (EDR, DLP, SIEM, email security). Owns threat monitoring, incident response, vulnerability and patch management, compliance evidence, DR planning, security reporting, and vendor relationships for a remote distributed workforce.

Hands-on Staff Security Engineer to build and operate DevSecOps capabilities: automate security controls, harden AWS/cloud and CI/CD, improve supply-chain security, build detection/response tooling, partner with engineering for secure design, and lead incident response and compliance automation.

Lead research and deliver strategic and tactical advice on AI data security and AI ecosystem data management. Produce written research, briefings, and presentations; advise clients and stakeholders; grow networks of thought leaders and vendors; ensure research integrity and collaborate across Gartner to support deliverables. Travel up to 25%.

Own security and infrastructure for a fintech payments platform, with security comprising roughly two-thirds of the role. Responsibilities include cloud and application security, IAM, secrets management, threat modeling, detection engineering, incident response, vulnerability management, compliance, privacy, CI/CD, infrastructure as code, observability, reliability, backups, disaster recovery, and on-call operations. The role reports to the CTO and will establish the security function as the company’s founding security hire.

Serve as a senior security solution architect advising enterprise customers on modern, cloud-native Microsoft security architectures. Design and validate solutions using Microsoft security products, remove technical blockers, act as SME on complex deployments, gather customer insights to influence product roadmap and map solutions to business outcomes, and support large-scale security and compliance projects.

Lead a U.S.-based team of Security Operations Engineers and TPMs to design, build, and operationalize identity protections that reduce lateral-movement risk. Define strategy, apply AI and automation, partner with engineering and platform teams, deliver scalable controls, and drive measurable security outcomes, operational readiness, and executive reporting.

Lead Wikimedia Foundation’s product security strategy, prioritize security and privacy engineering initiatives, develop platform interventions against threats, strengthen organizational security culture, and communicate with Wikimedia communities. The role partners with cross-functional and departmental leaders on information security, represents the Foundation to volunteers, and applies AI-based tools to security analysis, code review, and software engineering. Prior product management experience is not required, but strong technical, security, communication, and online-community experience are important.

Manages information security risks, vendor and third-party risk reviews, mitigation plans, policy exceptions, and compliance reporting. Partners with stakeholders and Enterprise Risk Management to maintain risk policies within tolerance. Serves as a technical expert, supports risk awareness and accountability, monitors security controls, and contributes to operational goals. The role requires expertise in IT audit, security monitoring, access management, encryption, networking, incident response, SOX compliance, and project management.

Lead complex cloud, identity, supply-chain, and nation-state security investigations. Perform root-cause analysis, threat hunting, blast-radius assessment, attribution, and incident response across Microsoft telemetry. Operationalize intelligence into queries, detections, playbooks, and platform fixes; investigate adversary tradecraft; use AI-assisted tooling; produce executive-ready reports; and mentor peers in advanced investigations, forensics, and reverse engineering.

Administers Microsoft Defender services for a DoD customer, monitoring endpoint security, EDR, NGAV, attack-surface reduction, cloud protection, SIEM integrations, cross-platform controls, WDAC, DLP, compliance reporting, and security dashboards. Escalates anomalies, maintains policies and procedures, investigates alerts, and supports Windows, Linux, and mobile-device protection. Requires cybersecurity experience, Microsoft security expertise, DoD compliance knowledge, Security+ certification, and an active Secret clearance.

Lead enterprise AI security architecture, strategy, governance, and secure-by-design implementation across cloud, hybrid infrastructure, software, and AI/ML environments. Design security patterns for LLM hosting, agentic systems, vector databases, and inference endpoints; translate regulatory requirements into technical standards; review complex architectures; implement AI security guardrails and policy enforcement; advise engineering and product teams; and mentor teams while influencing senior stakeholders.

Supports client engagements focused on cryptographic risk, post-quantum readiness, encryption modernization, PKI, and key lifecycle management. Responsibilities include cryptographic asset discovery, inventory development, risk analysis, PKI and TLS assessments, PQC migration planning, remediation tracking, standards alignment, client workshops, documentation, and presenting findings to technical stakeholders.

Conduct proactive security reviews of features, architectures, integrations, and AI/ML systems. Lead threat modeling, design reviews, secure SDLC practices, vulnerability remediation, AI security governance, incident response exercises, and security automation. Support SOC 2 and ISO 27001 programs, collaborate with consultants on penetration testing and vendor assessments, and influence engineering teams on security without owning their roadmaps.

Lead the engineering modernization of enterprise data protection and DLP capabilities across cloud, SaaS, endpoints, email, and collaboration platforms. Build automated Policy-as-Code workflows, CI/CD pipelines, reusable controls, integrations, detection logic, guardrails, and operational metrics. Partner with technical, compliance, privacy, legal, and business teams to improve security effectiveness, reduce false positives, automate governance, investigate events, and demonstrate measurable risk reduction.

Lead the maturation of Ontic’s AWS cloud security program by designing and automating security controls, integrating security into CI/CD workflows, improving cloud monitoring and detection, and developing continuous evidence collection for FedRAMP and other compliance initiatives. Partner with Engineering and DevOps teams on secure architecture, cloud best practices, regulated SaaS environments, and measurable security improvements.