Top Cyber Security Jobs in Washington, DC

Lead presales engagements and practice development for security operations solutions. Design SOC architectures involving SIEM, SOAR, EDR/XDR, threat intelligence, detection, incident response, and automation. Conduct discovery sessions, demonstrations, POCs, presentations, vendor evaluations, and internal enablement. Develop technical collateral, support partner solutions, identify revenue opportunities, and advise clients on SecOps maturity and target-state architectures.

Design, deliver, and support Microsoft cloud security solutions for mission-critical customers. Provide proactive and reactive support, lead architectural sessions, implement identity and Zero Trust controls, optimize Azure resiliency and security posture, coordinate incident resolution with internal teams, and contribute to on-call rotations and continuous improvement.

Build autonomous AI-driven security testing systems and agentic workflows for analyzing mobile, desktop, IoT, and API applications. Develop reusable security automation frameworks, integrate static and dynamic analysis, reverse engineering, network analysis, vulnerability intelligence, and custom tools. Create evaluation systems and human-in-the-loop workflows, research emerging AI and offensive security techniques, and collaborate with security researchers to scale testing. The role requires production-quality coding, security expertise, autonomy, and U.S. citizenship.

Lead technical presales engagements for Microsoft security solutions, including Entra, Purview, Defender, and Sentinel. Deliver discovery sessions, demonstrations, whiteboarding, solution designs, and proof-of-concept efforts. Build competitive strategies, resolve technical blockers, guide customer decisions, collaborate with partners and deployment teams, and help existing customers optimize security product usage. Embed governance, security, and compliance into customer engagements while quantifying business value and supporting sales targets.

Leads Trace3’s Security Solutions practice, developing go-to-market strategy, security offerings, AI-enabled services, presales execution, partner relationships, and complex client engagements. Owns revenue, gross profit, forecasting, pipeline, and operating-plan performance. Advises executive leadership, supports assessments and proof-of-concepts, communicates with technical and executive audiences, and leads, coaches, and develops practice teams.

Own federal security and compliance workstreams for a FedRAMP High program, including control implementation, evidence collection, continuous monitoring, vulnerability remediation, risk tracking, audit readiness, authorization artifacts, and customer assurance. Partner with technical and business teams to close remediation items and support compliance-as-code using machine-readable artifacts, automation, validation, and document generation.

Serve as a fractional CISO advising alternative asset firms and family offices on building, maintaining, and operating full cybersecurity programs. Provide hands-on leadership, risk assessment, policy and controls development, and program execution on project-based engagements.

Provide fractional cybersecurity advisory and hands-on operations for hedge funds and family offices: conduct assessments, run vulnerability management and incident response, implement policies and controls, monitor logs and network traffic, test BCDR plans, advise on vendor selection, and report KPIs and remediation plans.

Provides cybersecurity oversight, risk management, compliance support, and Authority to Operate leadership for federal Health IT systems. Responsibilities include ATO documentation and coordination, continuous monitoring, vulnerability remediation tracking, security planning, incident response coordination, reporting, audit preparation, and advising leadership on risks. The role collaborates with system owners, project managers, authorizing officials, and technical teams while ensuring compliance with NIST, FISMA, DHS policies, and related federal security standards.

Designs, implements, and optimizes enterprise, cloud, and operational security controls. Responsibilities include managing firewalls, SIEM, EDR, SOAR, IAM, vulnerability assessments, penetration testing, incident response, security monitoring, architecture documentation, compliance alignment, and remediation support. The role collaborates with IT, DevOps, and security teams to improve detection, response, resilience, and audit readiness.

Own and drive product security for the MongoDB Database Server: lead fuzzing, threat modeling, secrets/container security efforts; perform security assessments, POCs, code reviews, and remediation for low-level memory issues; partner with engineering to design controls and educate teams.

Lead complex cloud, identity, supply-chain, and nation-state security investigations. Perform root-cause analysis, threat hunting, blast-radius assessment, attribution, and incident response across Microsoft telemetry. Operationalize intelligence into queries, detections, playbooks, and platform fixes; investigate adversary tradecraft; use AI-assisted tooling; produce executive-ready reports; and mentor peers in advanced investigations, forensics, and reverse engineering.

Leads long-term strategy, vision, roadmaps, and measurable business outcomes for information security products. Develops product strategies based on user needs, prioritizes releases across products, manages capacity and investment decisions, tracks KPIs, and collaborates with stakeholders and product teams. Mentors Product Owners, facilitates cross-functional alignment, engages customers, researches industry trends, and supports continuous improvement within a highly regulated enterprise environment.

Leads Americas security architects in customer-facing engagements, enterprise security strategy, architecture reviews, escalations, and product feedback. Drives customer growth, security adoption, resilience, risk management, and AI transformation. Develops managers and technical leaders, builds high-performing teams, engages executive stakeholders, and provides technical thought leadership across Microsoft security solutions, cloud security, identity, data protection, SIEM, XDR, and security operations.

Build Tempo’s product security program from the ground up, including application, infrastructure, endpoint, and supply-chain security tooling. Identify and remediate production and development-pipeline risks, lead incident response through post-mortems, conduct secure design reviews, and establish scalable security practices. The role requires hands-on coding, deep incident-response expertise, strong infrastructure and application-security knowledge, and autonomous collaboration with engineering.

Build and lead Cape’s security technical program across detection and response, corporate security, and product security. Define strategy, priorities, metrics, roadmaps, and execution processes; manage security tooling procurement and implementation; maintain backlogs; coordinate dependencies; and translate security risks and requirements between security engineers and the broader engineering organization.

Lead Method's engagement with USCYBERCOM and the Cyber Mission Force, identifying operational problems, shaping opportunities into funded programs, driving capture and proposal development, coordinating internal teams, and expanding contracts from initial engagement through operational deployment.

Support authorization and accreditation of classified Azure Government systems by developing A&A packages, SSPs, POA&Ms, and ATO documentation. Manage security controls, continuous monitoring, auditing, logging, vulnerabilities, and compliance across Azure security services. Guide SIEM/SOAR integrations, remediation, DevSecOps security, control evidence collection, assessments, and federal authorization processes. Coordinate with technical teams, mission owners, assessors, and authorizing officials while maintaining NIST, DoD, and CIS compliance.

Supports container and cloud security activities by identifying vulnerabilities and misconfigurations, assessing security controls, assisting remediation, monitoring alerts, supporting audits and regulatory requests, and researching emerging threats. The role collaborates with vulnerability management, cloud security, engineering, and technology teams; administers tools including Aqua, Wiz, Qualys, and CrowdStrike; contributes to CI/CD and software supply chain security; and provides technical documentation, consultation, and operational support.

Develop and mature data security frameworks, standards, and controls; assess data security risk and compliance; provide technical advisory across cloud, analytics, DSPM, Databricks, and Azure; collaborate with stakeholders to improve data protection posture and control maturity.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Performs information security assessments of third-party service providers. Reviews security documentation and evidence, evaluates controls and risks against bank requirements, identifies and escalates gaps, documents assessment workpapers, supports remediation, and manages relationships with vendors and internal stakeholders. Requires knowledge of information security, IT compliance, risk management, business continuity, and industry frameworks, with travel up to 10–15%.

Leads and supports offensive security consulting engagements, including network, web application, wireless, social engineering, red team, and purple team testing. Evaluates controls and security configurations, performs cybersecurity assessments, recommends remediation, and presents findings to technical and executive stakeholders. Supports client program execution, metrics, issue remediation, and continuous improvement. Mentors junior consultants and contributes to cybersecurity practice development, methodology innovation, and thought leadership.