Top Cyber Security Jobs in Washington, DC

Lead SAP IS‑U application security architecture and role/authorization design. Manage GRC integration, SoD analysis, security testing, provisioning strategy, access governance, and transition to security operations. Produce architecture docs, authorization matrices, GRC configs, test results, runbooks, and compliance artifacts.

Design and implement advanced cybersecurity solutions for DOE/NNSA programs. Perform security engineering, assessments, risk analysis, and compliance activities; develop software and technical solutions; support multi-lab teams; deliver cybersecurity training; and manage stakeholder priorities while using tools like Splunk, RSA, Tenable Nessus, and SELinux.

Serve as the Information System Security Officer (ISSO) leading A&A/ATO activities, maintaining security documentation, managing POA&Ms, conducting risk assessments and security testing, supporting audits and incident response, developing policies and training, and liaising between contractor teams and federal authorities to ensure DOE/NNSA and federal cybersecurity compliance.

Secure and manage enterprise/cloud (Azure) data platforms: network security, threat detection, vulnerability management, encryption/DLP, incident response and recovery for large-scale data systems. Maintain compliance and operate onsite in Washington, DC; required active Public Trust and CISSP, CCSP, CompTIA Cloud+ certifications.

Design, deploy, and operate enterprise security tools (SIEM, EDR, IDS/IPS, vulnerability management) across on-prem, hybrid, and cloud environments; develop detections, perform threat hunting and incident response, integrate security controls, and produce operational documentation.

Lead SecOps functions including threat detection, alert triage, incident response, vulnerability and configuration management, endpoint and network security operations, threat hunting, malware analysis, vendor management, and mentoring a team of security analysts to improve detection and response capabilities.

Provide technical support, implementation, configuration, and operations for multi-layer authentication infrastructure (MFA, PKI, S/MIME, SSL). Integrate identity systems with applications, perform Tier 3 NOC support, manage deployments/upgrades, troubleshoot complex network/authentication issues, and document/security standards. Occasional off-hours and data-center on-site work required.

Lead design and implementation of security controls for AI and cloud platforms, configure DLP and alerting, detect and remediate misconfigurations, perform AI security assessments, document findings, and advise clients and presales on AI security best practices.

Lead IT security architect responsible for AWS security architecture, compliance (NIST 800-171/CMMC), and GovCloud IL5/IL6 deployments. Maintain SSP, POA&Ms, evidence, and remediation tracking; coordinate with auditors and customer ISSM/ISSO; partner with DevSecOps and Engineering to implement secure baselines, logging, monitoring, encryption, segmentation, vulnerability management, and incident response for regulated environments.

Support a federal agency SOC by administering Windows/Unix/Linux systems and security tools (Tenable, SourceFIRE, Splunk ES), perform vulnerability and compliance assessments, manage IDS/IPS and log solutions, produce dashboards and monthly vulnerability/patch reports, maintain SOPs and CSIRT wiki, provide O&M and on-call support, and recommend cloud security improvements. Requires extensive documentation and reporting.

Provide SOC support including system administration for Windows/Unix/Linux, manage IDS/IPS, log management, vulnerability assessment (Tenable, SourceFIRE), produce reports and dashboards, maintain baselines and SOP/CSIRT wiki, and assist cloud security improvements. On-call and documentation duties included.

Lead and scale Cape's security organization to protect a carrier-grade cellular network and corporate systems. Own security strategy, architecture, incident response, red-teaming, threat modeling, vendor/auditor relationships, and board-level risk communication while embedding security into product development.

Lead complex security risk management including A&A, continuous monitoring, and FISMA compliance. Apply NIST SP 800 and CNSSI 1253 controls to secure cloud and hybrid environments, Cross Domain Solutions, and IC cybersecurity policy and standards.

Act as principal security policy advisor to the I&A CISO; apply Federal, DHS, and Intelligence Community cybersecurity policy across cloud and on-prem environments; translate high-level policy into actionable plans and oversee their enterprise-wide execution; support large-scale cybersecurity projects and ensure compliance.

Lead implementation, oversight, and continuous evaluation of security controls across enterprise information systems. Execute A&A, automate continuous monitoring, and apply the Risk Management Framework to secure cloud and hybrid architectures while ensuring FISMA and IC cybersecurity policy compliance, including Cross Domain Solutions.

Lead strategy, operations, and security for a national, multi-site nonprofit. Own MSP/vendor relationships, ServiceNow platform, incident response, and AI-driven automation to improve service delivery and security posture. Manage a team of direct reports plus MSP resources, drive infrastructure initiatives and compliance, and serve as executive liaison and student mentor.

Senior individual-contributor responsible for operating and engineering enterprise vulnerability management and cloud security posture platforms. Own platform health, scanning, asset discovery, integrations, automation, monitoring, incident response, remediation enablement, and vendor management while mentoring engineers and improving reliability, coverage, and compliance.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Lead and build the company's end-to-end security program for a genomics and AI platform: governance, compliance (HIPAA, HITECH, SOC 2, ISO 27001), AI governance, offensive security, incident response, third-party and SaaS security, and cross-functional security embedding. Manage senior offensive personnel and external partners, present to executives, and deliver SOC 2 readiness and a prioritized HIPAA remediation roadmap quickly.

Monitor, analyze, and maintain the bank's technical security controls across cloud, on-prem, and SaaS. Respond to security alerts, run SIEM and network anomaly detection, manage identity and access, lead regulatory/compliance tasks, vendor security reviews, risk assessments, audits, and security awareness programs, and coordinate remediation and security projects.

Lead Senior ISSO responsible for RMF lifecycle and ATO decisions, leading a team of ISSOs, maintaining SSPs, CM and contingency plans, conducting risk and vulnerability assessments, and ensuring FISMA/NIST/DHS compliance while producing test and program reports and advising senior leadership.

Design and assess secure architectures for software, embedded, hardware, and cloud systems. Lead threat modeling, risk assessments, compliance/ATO support (RMF, NIST, CMMC), security testing, and remediation. Establish secure engineering standards, mentor teams, and collaborate across engineering and program stakeholders to integrate security throughout the product lifecycle.

Provide entry-level cybersecurity engineering support for a NAVSEA program office: assist implementing security measures, monitor system posture, support documentation and compliance, and help implement cyber controls under supervision for classified programs.

Support RMF and cyber compliance for a NAVSEA program office: implement security controls, perform vulnerability scanning and control validation, document security posture, and coordinate remediation with system and software teams.

Ensure privileged access controls meet IAM standards across platforms; partner with governance to measure and report controls; define PAM requirements for technology partners; apply PAM best practices and modernization efforts; identify and remediate PAM risks; educate stakeholders; support audits and provide senior management reporting to reduce sustained risk.