Top Cyber Security Jobs in Washington, DC

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Leads Ferguson’s enterprise Security Engineering function, including vulnerability management, DevSecOps, penetration testing, application and cloud security, endpoint and email protection, edge security, configuration management, and security tooling. Builds and develops technical teams, establishes roadmaps and metrics, prioritizes risk-based remediation, oversees vendors and service operations, and communicates security posture and investment needs to executives and technology partners.

Leads enterprise cybersecurity architecture for AI, cloud, hybrid, and on-premises environments. Designs secure AI architectures, cloud foundational controls, zero-trust identity models, API and data protections, and secure LLM, RAG, agent, and MCP integrations. Establishes governance, reusable security patterns, model-usage procedures, compliance controls, and audit readiness across AWS and Azure. Advises executives and technical teams, mentors security professionals, and drives secure cloud migrations while addressing AI/ML risks such as adversarial attacks, model poisoning, data drift, bias, and data leakage.

Participate in a paid, part-time cybersecurity internship involving technical development, security response, collaborative projects, shadowing, vendor training, and certifications. Complete in-house training while working with cybersecurity experts. Interns must be U.S.-based, available primarily during weekday EST hours, attend mandatory Tampa onboarding, provide a personal computer and reliable internet, and demonstrate foundational IT, networking, operating systems, and information security knowledge.

Lead product vision and strategy for security operations services, defining outcomes for managed investigation, response, threat hunting, and advisory services. Partner with customer security ops, product, and marketing teams to deliver AI-driven, automated features, represent Zscaler to customers, and drive measurable security outcomes and operational alignment.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

Own day-to-day cybersecurity, identity and access hygiene, compliance readiness, and infrastructure security across a multi-site healthcare environment. Administer Microsoft security tools, MFA, Conditional Access, SIEM, email protection, patching, backups, firewalls, and network controls. Lead SOC 2 evidence collection, security reporting, remediation tracking, third-party access reviews, and audit preparation. Direct and verify outsourced IT and offshore resources, enforce SLAs, supervise network work, and communicate risks to nontechnical leaders.

Develop and lead Gainsight’s information security strategy, policies, and procedures. Manage security leadership, architecture, identity management, compliance, risk assessments, vulnerability testing, and threat mitigation. Ensure adherence to GDPR, HIPAA, ISO 27001, SOC 2, and related standards. Present security posture, metrics, and recommendations to executive leadership while collaborating with Engineering, IT, and Security teams in a SaaS environment.

Lead solution sales for Microsoft Security with enterprise customers: identify opportunities, build solutions and business cases, manage senior relationships and pipeline, collaborate with partners and internal teams, forecast and pursue high-potential accounts, and obtain relevant product/role certifications.

Design and assess secure systems for Microsoft business operations: perform threat modeling and security design assessments, drive risk-based architecture decisions, communicate risk, mentor teammates, and ensure compliance with security policies and screenings.

Evaluates and monitors information security, privacy, and AI-related controls; coordinates internal and external audit engagements; maintains control evidence; performs risk-based monitoring; supports incident response and operational security; and ensures compliance with applicable laws, standards, frameworks, and regulations. The role also promotes secure-by-design and privacy-by-design practices across organizational strategies, technologies, and projects.

Implements, supports, and optimizes SIEM, SOAR, security telemetry, and data pipelines. Responsibilities include log onboarding, parsing, normalization, detection rule development and tuning, data quality validation, troubleshooting, automation, architecture review support, documentation, and continuous improvement. The engineer works in a client-facing consulting environment under senior guidance and supports multiple security operations platforms and environments.

Maintain and improve cybersecurity across Azure Cloud and on-premises environments. Monitor and tune security alerts, manage vulnerability scanning and remediation, conduct threat intelligence analysis, support incident response, perform risk assessments and threat modeling, and implement security controls and configurations. The role also supports regulatory compliance, security documentation, cross-functional initiatives, and on-call response to security alerts.

Support cybersecurity and systems security engineering for U.S. Navy afloat and undersea platforms. Analyze vulnerabilities, design and assess security solutions across lifecycle phases, support testing and accreditation, recommend risk mitigations aligned with DoD/Navy requirements, and produce technical documentation and briefs to strengthen mission resilience.

Deliver full-lifecycle SAP security across ECC, S/4HANA, BW on HANA, and Fiori: create and maintain roles, catalogs, pages, and spaces; troubleshoot Fiori/authorization issues; support GRC, BRF+, MSMP, SAC alignment; collaborate with functional and technical teams through implementation, go‑live, and operations to ensure secure integrations and compliance.

Design and implement enterprise cloud data protection and governance across Microsoft 365, Google, AWS, and Azure. Enable secure AI integrations, enforce sensitivity labeling, lifecycle controls, tenant hardening, Zero Trust and conditional access, automate reporting, and advise on AI governance to ensure compliance and resilient hybrid cloud security.

Perform SAP user management including role creation, provisioning, access reviews, SoD risk assessments, and GRC security component design, development, and testing. Assess client security requirements and propose controls beyond standard SAP security.

Lead and manage SOC operations and a blended analyst/engineer team; oversee alert triage, threat hunting, detection engineering, incident response lifecycle, forensics, playbook development, SIEM/NDR/EDR tuning, and stakeholder coordination to ensure mission-critical security coverage.

Design and implement enterprise Identity and Access Management (IAM/ICAM) solutions for federal clients: modernize legacy systems, define cloud and on‑prem security controls, integrate Okta/SailPoint/CyberArk, implement authentication/authorization protocols (OAuth2/OIDC/SAML/FIDO), create technical standards, and align architecture with FICAM/NIST and Zero Trust objectives.

Lead enterprise cybersecurity strategy and architecture across SOC, engineering, AppSec, and vulnerability management. Drive Zero Trust, cloud security, AI‑enabled defenses, automation, detection, and incident response while mentoring teams and advising executives on risk and modernization.

Lead security GRC and cyber defense activities including risk assessments, compliance with NIST/FISMA/SOC frameworks, FedRAMP/ATO oversight, audit lifecycle management, security posture reporting, tooling and IAM guidance, and mentoring security analysts.

Lead SAP IS‑U application security architecture and role/authorization design. Manage GRC integration, SoD analysis, security testing, provisioning strategy, access governance, and transition to security operations. Produce architecture docs, authorization matrices, GRC configs, test results, runbooks, and compliance artifacts.

Design and implement advanced cybersecurity solutions for DOE/NNSA programs. Perform security engineering, assessments, risk analysis, and compliance activities; develop software and technical solutions; support multi-lab teams; deliver cybersecurity training; and manage stakeholder priorities while using tools like Splunk, RSA, Tenable Nessus, and SELinux.