Top Cyber Security Jobs in Washington, DC

Lead global channel partnerships for Mastercard Security Solutions (cyber, fraud, identity). Build and scale partner ecosystem (GSIs), recruit and enable partners, launch pilots/POCs, manage revenue and joint planning, drive pipeline and forecasting, and collaborate cross-functionally to inform product and go-to-market efforts.

Lead Zeta’s AI-native Application Security function by defining strategy, building the team, embedding security agents and policy-as-code into IDEs, pull requests, CI/CD, and AI/ML pipelines, and overseeing continuous threat modeling and validation. Own security for AI systems, models, prompts, and agents, including adversarial testing for prompt injection, model abuse, and data leakage. Mentor engineers and promote automated, secure software development practices.

Lead security engineering across AI systems, cloud infrastructure, product security, GRC automation, GitHub controls, and compliance workflows. Develop AI-specific threat models and guardrails, automate security checks and evidence collection, strengthen AWS and GCP environments, manage CSPM tooling, and secure software supply chains. Partner with Engineering, Product, Legal, IT, and GRC to establish security programs and practical controls for Jasper’s AI platforms.

Manages global 24/7 Security Operations Center operations, including processes, playbooks, shift coverage, quality assurance, analyst development, incident response capabilities, and operational performance. Leads cybersecurity analysts, partners with Product and Support teams, reports on objectives and key results, operationalizes new services, and represents the organization in public speaking engagements.

Lead the development of SailPoint’s cybersecurity architecture practice. Create holistic and reference architectures, define security domains, develop strategic roadmaps, identify security gaps, and translate architectural concepts into viable engineering solutions. Partner with leadership to prioritize initiatives, secure funding, and operationalize the practice. The role also includes hands-on security projects, cross-functional collaboration, stakeholder influence, and mentoring architects and engineers across cloud, application, identity, and network security.

Leads cybersecurity, privacy, risk management, platform security, and compliance activities for federal systems supporting the EEOC. Oversees NIST, FedRAMP, and FISMA compliance; security controls; authorization activities; risk assessments; security documentation; cloud and platform security; incident response; vulnerability remediation; and privacy protection. Advises federal stakeholders, executives, engineers, and program leadership while coordinating security throughout the system development lifecycle.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Leads information security governance, compliance, data protection, privacy, enterprise risk, third-party risk, and customer trust programs. Owns SOC 2 and ISO 27001 certifications, audits, security policies, data security strategy, GDPR and CCPA/CPRA compliance, and executive risk reporting. Builds and manages a team spanning GRC, privacy, and risk while partnering with engineering, legal, product, sales, and leadership.

Leads complex security alert triage, incident investigations, threat hunting, detection improvement, and incident response. Develops playbooks, operationalizes threat intelligence, builds automation, and mentors analysts. The role partners with detection engineering to improve security monitoring across cloud, endpoint, identity, network, and application telemetry while raising investigation and documentation standards.

Lead solution sales for Microsoft Security with enterprise customers: identify opportunities, build solutions and business cases, manage senior relationships and pipeline, collaborate with partners and internal teams, forecast and pursue high-potential accounts, and obtain relevant product/role certifications.

Leads RapidFort’s cybersecurity, risk, compliance, and assurance programs. Owns the ISO 27001 ISMS, SOC 2 Type 2, FedRAMP authorization, and CMMC Level 2 programs; directs security monitoring, incident response, vulnerability management, identity governance, penetration testing, vendor risk, and security architecture. Reports risk to executive leadership and the Audit Committee, manages customer security assurance, oversees a compliance specialist, and serves as incident commander for declared security events.

Build backend services and distributed systems for a cybersecurity and software supply chain security platform. Develop scalable APIs, data pipelines, and platform components handling vulnerability, container, package, runtime, and SBOM data. Work across Linux, Kubernetes, containers, and cloud environments while solving concurrency, performance, reliability, and distributed processing challenges. Own projects from design through deployment, participate in architecture discussions, review code, and collaborate with security researchers and product teams.

Leads AI governance and cybersecurity risk advisory engagements for large, regulated organizations. Advises C-suite executives and boards on AI threats, regulatory requirements, governance operating models, risk assessments, control frameworks, and cyber resilience. Owns complex engagement delivery, client relationships, team leadership, business development, proposals, engagement economics, and practice growth. Develops methodologies, thought leadership, and risk-management solutions covering AI governance, cloud security, identity management, data protection, incident response, and third-party risk.

Lead and coordinate security engineering programs: translate strategy into team tasks, track remediation and incidents, remove blockers, improve cross-team collaboration and security processes, drive incident response coordination, and support security feature adoption and certifications.

Build and secure scalable backend services and APIs while debugging, optimizing performance, implementing features, refactoring codebases, and conducting security reviews and penetration testing. The role also involves automated testing, code review, vulnerability assessment, and contributing domain expertise to training next-generation AI systems.

Perform web, external/internal network, AD, cloud, and container penetration tests; develop offensive tooling and LLM-driven automation; manage third-party pentests; collaborate with engineers to reproduce, prioritize, and verify fixes; and produce clear technical and non-technical reports.

Leads cybersecurity governance, risk, and compliance programs, with ownership of third-party cyber risk, customer security assessments, risk exceptions, and the cyber risk register. Manages a geographically distributed team, matures GRC processes, drives automation, partners with internal and external stakeholders, and reports risk trends and recommendations to senior leadership. Requires extensive cybersecurity experience, people leadership, customer-facing skills, and experience building or improving third-party risk capabilities.

Conducts independent cybersecurity assessments of MARAD information systems across authorization, reauthorization, and continuous monitoring activities. Evaluates management, operational, and technical controls under NIST RMF; develops assessment plans, reports, risk assessments, and remediation recommendations; validates evidence and system compliance; supports ATO decisions; enters data into CSAM; and collaborates with federal cybersecurity stakeholders.

Lead independent security assessments and authorization activities for federal cloud, hybrid, and enterprise systems. Evaluate Azure and AWS security controls, FedRAMP packages, inherited controls, vulnerabilities, architectures, and technical evidence. Produce assessment plans, reports, risk assessments, evidence requests, and POA&Ms. Communicate findings and mitigation recommendations to technical teams, system owners, executives, and stakeholders while supporting consistent, defensible cybersecurity assessment practices.

Manage and mature vulnerability management across applications, networks, endpoints, cloud platforms, and enterprise systems. Identify, prioritize, and mitigate vulnerabilities; support patching, hardening, incident response, and risk reduction. Collaborate with ISSOs, assessors, developers, and security stakeholders to validate RMF artifacts, refine control statements, support NIST, FISMA, and SOX compliance, and improve Authority to Operate readiness through repeatable workflows and accurate assessment documentation.

Defines and executes enterprise security strategy, roadmaps, governance, and high-priority initiatives. Leads security architecture reviews, threat modeling, risk assessments, and systemic remediation across products, platforms, and business operations. Influences cross-functional teams without direct authority, establishes secure practices and measurable outcomes, evaluates business and operational tradeoffs, and develops automation, analytics, and AI-assisted capabilities to improve security reviews and risk reduction.

Designs, implements, and operates Azure-native security controls for identity, networking, and workloads. Manages Defender for Cloud and Microsoft Sentinel, implements Conditional Access, MFA, and Zero Trust patterns, embeds security into Infrastructure-as-Code pipelines, monitors cloud posture, supports incident response, drives remediation, and maintains compliance documentation and metrics. Partners with cloud and infrastructure security teams to ensure secure, resilient, and compliant Azure environments.

The AI Security Consultant will enhance security programs, secure AI systems, engage in technical analysis, and report findings. They will also contribute to thought leadership while ensuring high-quality service delivery.

Leads Carina’s cloud infrastructure, internal IT, cybersecurity, risk management, compliance, and business continuity programs. Oversees AWS platform operations, infrastructure as code, deployment reliability, observability, incident response, disaster recovery, employee technology, identity systems, vendors, budgets, and governance. Advises executives on technology strategy, security posture, operational risk, and investments while partnering with Engineering and Data to provide a secure, reliable technology foundation.

Supports cloud, network, proxy, and SASE/SSE security capabilities in enterprise and federal environments. Investigates and resolves operational tickets, incidents, connectivity issues, and security events; configures proxy policies; analyzes logs, alerts, traffic flows, and packet captures; documents procedures and resolutions; supports testing and implementation of security technologies; and communicates directly with customers and cross-functional engineering teams.