Top Cyber Security Jobs in Washington, DC

Design and implement secure AWS architectures, manage IAM and AWS security services (GuardDuty, Security Hub, Inspector, Macie, WAF), build IaC security controls (Terraform, CDK Python), perform threat modeling and vulnerability remediation, implement logging/monitoring (CloudTrail, CloudWatch, SIEM), support incident response, automate compliance checks, and collaborate with DevOps to embed security in CI/CD pipelines.

Sell nuHarbor's cybersecurity solutions to large public-sector and critical infrastructure clients. Build CxO relationships, own the full enterprise sales cycle, forecast and manage pipeline, collaborate with partners and services, meet revenue and margin targets, and travel extensively. Maintain up-to-date cybersecurity knowledge.

Design, build, and maintain detection-as-code and AI-powered detection/response tooling across cloud, endpoints, and identity. Automate investigation and response workflows, lead incident response, improve observability, tune alerts, and partner with engineering to expand logging and embed detections.

Validate, reproduce, and triage vulnerability reports for web and mobile applications; assess severity and impact using CVSS and security frameworks; communicate findings and remediation to customers and researchers; leverage automation/AI workflows; collaborate cross-functionally and improve triage processes. Weekend shifts required occasionally.

Manage, configure, secure, and maintain the Enterprise Security System (ESS) environment including servers, databases, storage, and security platforms. Support integrations, monitoring, SLAs, ITIL-aligned processes, documentation, disaster recovery, performance reporting, and after-hours/surge support to ensure resilient, compliant enterprise security services.

Act as a technical and strategic adviser to assigned customers to maximize value from Proofpoint products and services. Own customer relationships, develop 12-month program roadmaps, lead recurring meetings, track deliverables and risks, coordinate complex production changes, manage escalations, monitor cases and SLAs, and help customers mature security posture and demonstrate measurable program value.

Support digital forensics and malware analysis for incident response: analyze digital media and malicious code, investigate and contain security incidents, coordinate with cyber defense teams, and produce forensic documentation and reports to support remediation and closure.

Support cybersecurity architecture and engineering across enterprise environments including Zero Trust, cloud security, DevSecOps, AI/GenAI security, PQC, SSO, vulnerability scanning, automation, and documentation. Develop technology roadmaps, conduct market research and proofs of concept, and support integration, CONOPS, and engineering activities.

Design, build, and secure resilient REST API integrations and cloud-native connections to support enterprise data access management. Develop security architecture artifacts, automation/orchestration, testing, and documentation. Support DLP and CASB initiatives, advise engineering teams, implement IAM and encryption controls, and ensure alignment with federal cybersecurity standards and compliance.

Lead and manage IT security operations including incident response, security tool administration, vulnerability management, IAM (IdP/MFA/SSO), security policy and compliance (ISO 27000, PCI), security awareness training, vendor security reviews, and coordination with cloud and network teams to protect systems and data.

Perform enterprise risk assessments of networks, systems, and business applications. Collaborate with system owners and stakeholders to analyze, test, and document security controls across the agency environment.

Lead RMF and ATO activities for Navy systems, develop and maintain SSPs/POA&Ms, perform security control assessments, manage vulnerability scanning and remediation, support continuous monitoring, analyze security logs, and coordinate cybersecurity guidance and compliance reviews with stakeholders.

Support and enhance the client's Supply Chain Risk Management program and assess security of AI-enabled and emerging technologies. Perform third-party and technology-related security risk analyses, identify gaps, recommend mitigations, support AI security compliance and governance, and apply federal software supply chain and NIST AI/SSDF guidance.

Provide senior-level cybersecurity risk management expertise supporting Authorization & Assessment (A&A), FISMA and IC security standards, continuous monitoring, CDS, and secure cloud/hybrid engineering. Apply NIST 800-series, CNSSI 1253, and RMF guidance, automate A&A and continuous monitoring activities, advise on compliance, remediation, and risk posture for federal mission needs.

Support RMF activities, security authorization, and system security posture for a large enterprise IT program. Perform RMF documentation, security control assessments, vulnerability identification, audits, and provide security guidance to engineering teams. Maintain compliance with federal regulations and assist in security authorization and accreditation processes.

Design and build security-focused tools, automate security workflows within the product using Python and Go, maintain Terraform-based range infrastructure and virtualization for testing, integrate diverse security tools, collaborate with cross-functional teams, communicate security features to non-security stakeholders, and work directly with end users to meet operational needs.

Provide IAM/security support by specifying security requirements, advising implementation options, defining security requirements for new solutions, designing centralized authorization frameworks, evaluating cloud/mobile authentication and authorization technologies, integrating/testing IAM solutions, and coordinating with security teams to develop enterprise risk profiles.

Advise the I&A CISO on cybersecurity policy; analyze Federal, DHS, and IC guidance; translate policy into implementable plans; support cloud and on-premises governance; and communicate with government stakeholders and technical teams.

Serve as senior technical authority leading DOJ Security Assessment and Authorization (SAA) and RMF programs: guide system categorization, select and implement security controls, oversee assessments and continuous monitoring, advise leadership on risk, support incident response and audits, mentor security staff, and ensure audit-ready authorization artifacts.

Serve as senior ISSO to lead cybersecurity risk management, A&A, FISMA compliance, continuous monitoring, and secure cloud/hybrid engineering using NIST and CNSSI controls and RMF principles.

Lead security configuration and implementation for Oracle EBS Finance modules, perform security and control reviews, support Risk Management controls (AAC, Advanced Financials Controls), run design/fit-gap workshops, assist SIT/UAT/Go-Live and post-implementation support, work with onsite/offshore teams, and apply SafePaaS and other tools to evaluate controls, segregation of duties, and optimization.

Lead product security reviews, perform manual code and penetration testing, threat model and assess AI/LLM-integrated architectures, drive incident response and remediation, build security automation tools, mentor engineers, and publish security research.

Provides technical leadership for enterprise AI security, designing secure AI platform architectures, vetting frameworks, identity and posture management for AI agents, and preventative security guardrails. The role requires building scalable security systems with Python, Go, or Java, managing infrastructure as code, addressing cloud and container security, mentoring engineers, and advising leadership on AI security risks.

Support mission-critical security operations: lead security program activities, enforce policies, coordinate compliance, collaborate with stakeholders, analyze challenges, and produce documentation and reports to improve operational efficiency.

Lead and enforce security program activities for a federal mission client, coordinate compliance across operations, collaborate with stakeholders, analyze operational challenges, recommend improvements, and produce documentation and reports to support continuous improvement and mission objectives.