Washington, DC

Cybersecurity Jobs in Washington, DC

73 jobs found

Include remote jobs

4d ago

Staff AI Security Engineer

Okta Washington, DC

Washington, DC

4d ago

$180k - $248k/yr Full time Agent Agentic Ai Ai Security

Apply Now

Job Description

Okta is seeking a Staff AI Security Engineer to shape the technical direction for securing AI models and agentic systems. This senior individual contributor role focuses on scalable AI security infrastructure, hands-on control development, and cross-functional partnership to enable safe AI innovation.

Responsibilities

Secure AI implementations: Design and deploy enterprise AI guardrails, gateways, and related controls to protect agentic workflows from emerging threats.
Agent hardening and sandboxing: Create security architectures for local and hosted agents to reduce risks including tool-calling abuse, prompt injection, goal misalignment, and data exfiltration.
Define paved roads and security standards: Develop secure design patterns and developer tools that help engineering teams build and ship AI features safely and efficiently.
Threat modeling for AI workflows: Lead threat modeling and security reviews for agentic AI systems, enterprise deployments, and agent ecosystems.
AI discovery and visibility: Build systems to discover, inventory, and evaluate AI usage and data flows across the enterprise.
Agentic platform infrastructure: Design and operate internal AI security platforms and create integrated capabilities to automate complex security operations.
Technical leadership and mentorship: Align product, security, and infrastructure teams on technical strategy while mentoring engineers and security practitioners across domains.

Requirements

AI threat expertise: Deep knowledge of the AI threat landscape, including OWASP, MITRE ATLAS, and NIST AI RMF, with practical experience addressing threats such as prompt injection and excessive agency.
Security engineering or backend experience: 8+ years in security engineering or backend software development, with strong coding proficiency in Python or Go and hands-on cloud experience.
Agentic framework security: Experience securing or auditing agentic frameworks (examples include LangChain, Strands, Claude Agent SDK, or custom tool-calling agents) in sandboxed environments.
Cloud and access control: Proven ability to design scalable cloud infrastructure (AWS/GCP), API gateways, proxy architectures, and enterprise access controls.
Developer-first tooling: Track record of building developer-first security tools and platform controls that support engineering velocity.
Communication and influence: Strong communication skills, including experience driving technical strategy, influencing engineering leaders, and mentoring engineers.
Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or equivalent practical experience.

Technologies

Python, Go
OWASP, MITRE ATLAS, NIST AI RMF
LangChain, Strands, Claude Agent SDK
AWS, GCP

Role Details

Location: Washington, DC (hybrid)
Salary: USD 180,000 - 247,500 per year

The Okta Experience

Supporting Your Well-Being
Driving Social Impact
Developing Talent and Fostering Connection + Community

View full job page →

5d ago

Information System Security Engineer

MANTECH Washington, DC

Washington, DC

5d ago

Full time Authorization To Operate Cybersecurity Tools Engineer

Apply Now

Job Description

MANTECH is seeking an Information System Security Engineer (ISSE) to define and implement cybersecurity requirements and network security measures for an IS and Network Environment on an onsite basis in Washington, DC.

Responsibilities

Assess information protection needs for an IS and Network Environment; define security requirements aligned to applicable cybersecurity requirements
Design security architectures for the IS and Network Environment; design and develop cybersecurity-enabled products for operational use
Integrate and/or implement security capabilities with Cross Domain Solutions (CDS) for the IS and Network Environment
Create security designs for new or existing network systems; ensure hardware, operating systems, and software applications address required cybersecurity controls
Design, develop, and implement network security measures to support confidentiality, integrity, availability, authentication, and non-repudiation
Develop and implement specific cybersecurity countermeasures for the IS and Network Environment
Produce interface specifications for the IS and Network Environment
Apply vulnerability mitigation approaches for the IS and Network Environment and recommend changes to network or network system components as needed
Ensure network system designs support incorporation of FBI directed cybersecurity vulnerability solutions

Requirements

Meets one of the following experience levels:
- High school diploma/GED and 14 years of experience
- Associate’s degree and 7 years of experience
- Bachelor’s degree and 5 years of experience
- Master’s degree and 3 years of experience
Holds at least one certification:
- CISSP (or Associate)
- CompTIA Advanced Security Practitioner (CASP) CE
- Certified Secure Software Lifecycle Professional (CSSLP)
- CISSP- Information System Security Engineering Professional (ISSEP)
- CISSP- Information System Security Architecture Professional (ISSAP)
Familiarity with security tools and operations, including Tenable Nessus and/or Security Center, IBM Guardium, HP WeblInspect, Network Mapper (NMAP), or similar applications
Working knowledge of the NIST Risk Management Framework (RMF) and ATO processes
Current/active Top Secret clearance with eligibility to obtain SCI prior to starting
Willingness to undergo a polygraph

Technologies

Cross Domain Solutions (CDS)
Tenable Nessus
Security Center
IBM Guardium
HP WeblInspect
Network Mapper (NMAP)
National Institute of Standards and Technology (NIST) Risk Management Framework (RMF)
ATO processes

Preferred Qualifications

Degree in Computer Science, Cybersecurity, or other cyber discipline

Physical Requirements

Remain in a stationary position approximately 50% of the time
Occasionally move about inside the office to access file cabinets and office machinery
Constantly operate a computer and other office productivity machinery (calculator, copy machine, computer printer)
Often position self to maintain computers in the lab, including under desks and in the server closet
Frequently communicate with co-workers, management, and customers, which may include delivering presentations; must be able to exchange accurate information

View full job page →

6d ago

Information Systems Security Engineer - SME

Agile Defense Washington, DC

Washington, DC

6d ago

$175k - $190k/yr Full time CISSP Doj Saa Program Engineer

Apply Now

Job Description

Agile Defense is seeking an Information Systems Security Engineer (ISSE) – SME based in Washington, DC (onsite) to serve as a senior technical authority for the Department of Justice (DOJ) Security Assessment and Authorization (SAA) Program. In this role, you will lead risk-informed implementation of the DOJ policy and NIST Risk Management Framework (RMF) requirements across complex DOJ IT environments, advising Government leadership while driving consistent, high-quality security engineering outcomes.

The ISSE – SME will oversee end-to-end RMF lifecycle execution, ensuring systems are categorized correctly, security controls are selected and tailored appropriately, and control assessment and authorization activities are completed with clear documentation. You will also direct continuous monitoring efforts and provide senior expertise across cybersecurity risk analysis, incident response support, vulnerability remediation, and audit readiness.

RMF & SAA Program Leadership

Lead, mentor, and supervise security professionals responsible for end-to-end RMF lifecycle execution for DOJ information systems.
Direct and coordinate activities within the Prepare step of RMF, ensuring roles, responsibilities, governance structures, and risk management strategies are clearly defined and maintained.
Guide system categorization efforts to ensure information systems are properly classified based on mission impact, data sensitivity, and regulatory requirements.

Security Engineering & Control Implementation

Direct the selection, tailoring, and documentation of security controls aligned with system categorizations, DOJ risk tolerance, and compliance requirements.
Oversee implementation of technical, operational, and management controls across system and application lifecycles, ensuring quality, completeness, and consistency of deliverables.
Serve as the senior technical authority for security architecture decisions, secure configurations, and remediation strategies.

Assessment, Authorization & Continuous Monitoring

Ensure comprehensive security control assessments are planned, executed, and documented to validate control effectiveness.
Prepare and review risk management documentation to support system authorization decisions and executive-level risk acceptance.
Direct continuous monitoring and ongoing assessment activities, collecting metrics and trends to inform risk posture and adjust security strategies.

Risk, Incident & Audit Support

Provide subject-matter expertise for cybersecurity risk analysis, incident response, vulnerability remediation, and audit support.
Support OIG, FISMA, and internal review activities, ensuring systems remain audit-ready and defensible.

Stakeholder Engagement & Reporting

Serve as a trusted technical advisor to DOJ leadership, system owners, ISSOs, and mission stakeholders.
Track, report, and communicate security engineering status, risks, and improvement opportunities to Government and contractor leadership.
Foster collaboration across divisions to ensure consistent application of security best practices.

Training & Continuous Improvement

Promote a culture of security awareness through technical guidance, mentoring, and training.
Maintain up-to-date knowledge of RMF, NIST guidance, DOJ policies, and industry best practices.
Identify opportunities to improve RMF execution efficiency, consistency, and effectiveness through process refinement and approved tooling.

Required Qualifications

Senior-level experience providing security engineering leadership in federal or IC environments.
Deep expertise in NIST RMF, FISMA, and federal authorization processes.
Demonstrated experience supporting complex, enterprise-scale IT systems across multiple lifecycle stages.
Proven ability to advise leadership on risk-based security decisions.
Required Certification: CISSP.

Highly Desired

Prior experience supporting DOJ, or Intelligence Community customers.
Experience working alongside ISSOs, AOs, and assessment teams in high-tempo environments.
Familiarity with network, infrastructure, application, and SaaS security architectures.
Experience supporting audit remediation and continuous monitoring programs.

Compensation & Tools

Salary: USD 175,000 - 190,000 per yearly.
Technologies: CISSP, NIST Risk Management Framework (RMF), FISMA, DOJ Security Assessment and Authorization (SAA) Program.

Benefits

Health Insurance
Life Insurance
Paid Time Off
Holiday Pay
Short-term and long-term Disability
Retirement
Learning and Development opportunities
Other optional benefit elections

View full job page →

6d ago

Cybersecurity Analyst - AI Trainer

DataAnnotation Washington, DC 🇺🇸 Remote

Washington, DC

6d ago

$50 - $100/hr Contract Ai Security Ai Trainer Ai Training

Apply Now

Job Description

DataAnnotation is seeking a Cybersecurity Analyst - AI Trainer to support the training of AI models for cybersecurity. The role focuses on reviewing AI-generated security content and providing feedback that improves how these systems reason about real-world threats and defenses. This position is fully remote with flexible scheduling and hourly compensation.

Location and Employment Type

Location: Washington, DC (remote)
Job type: Contract

Compensation

Hourly pay: USD 50 to 100 per hour
Bonuses: Higher bonus rates may be available for certain projects

Responsibilities

Assess AI-generated cybersecurity content, including threat analysis, vulnerability assessments, and offensive security techniques, to confirm real-world accuracy and validity
Design and solve security-focused technical problems used to train AI systems
Produce clear technical explanations and security-relevant code
Deliver feedback that directly influences the next generation of AI security models

Requirements

Experience: 2+ years of hands-on experience in a cybersecurity role such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or adjacent fields, including government or military cyber operations
Coding: Some coding experience required, with comfort navigating and patching a codebase
Language: Fluency in English (native or bilingual level) with strong writing skills
Education: A bachelor’s degree is preferred
Certifications (plus): Examples include OSCP, CRTO, GREM, GCFA, CEH, and similar

Benefits

Fully remote: Work from anywhere in the US, Canada, UK, Ireland, Australia, and New Zealand
Flexible schedule: Choose which projects you take on and when you work, using your own computer
Competitive hourly compensation: Projects paid at $50 to $100 USD per hour
Impact: Contribute to shaping cybersecurity-focused AI technologies

Contracting Advantages

Fully remote: Available to candidates working from the US, Canada, UK, Ireland, Australia, and New Zealand
Flexible schedule: Select projects and work times based on project needs
Competitive pay: Hourly rates of $50 to $100 USD, with potential for higher bonus rates on certain projects
Impact: Support AI model training for cybersecurity use cases

Additional Notes

Payment is made via PayPal
We will never ask for any money from you
This role is available only to candidates in the US, Canada, UK, Ireland, Australia, and New Zealand

View full job page →

8d ago

Senior Cloud Information System Security Engineer

MANTECH Washington, DC

Washington, DC

8d ago

Full time Senior Cloud Platforms Cloud Security Architecture

Apply Now

Job Description

MANTECH is seeking a Senior Cloud Information System Security Engineer (ISSE) to support cybersecurity efforts across an information system and network environment. This onsite role in Washington, DC focuses on defining security needs, building security architectures and network protections, and integrating security with Cross Domain Solutions to meet established cybersecurity requirements, including FBI directed cybersecurity vulnerability solutions.

What you’ll do

Identify information protection needs for an IS and Network Environment, and define related security requirements aligned with applicable cybersecurity requirements.
Design security architectures for use within the IS and Network Environment, including development of cybersecurity-enabled products.
Integrate and/or implement security with Cross Domain Solutions (CDS) for deployment within an IS and Network Environment.
Develop and implement security designs for new or existing network system(s), ensuring hardware, operating systems, and software applications address required cybersecurity controls.
Design, develop, and implement network security measures supporting confidentiality, integrity, availability, authentication, and non-repudiation, along with specific cybersecurity countermeasures for the environment.
Create interface specifications for the IS and Network Environment, propose approaches to mitigate vulnerabilities, and recommend changes to network or network system components as needed.
Ensure network system(s) designs support incorporation of FBI directed cybersecurity vulnerability solutions.

Minimum qualifications

Meet one of the experience combinations: Master’s degree with 6 years, Bachelor’s degree with 8 years, Associate’s degree with 10 years, or High school diploma/GED with 14 years.
Hold at least one certification from the following: CISSP (or Associate), CompTIA Advanced Security Practitioner (CASP) CE, CSSLP, CISSP- ISSEP, CISM, or CISSP- ISSAP.
Hold at least one certification from the following: AWS Certified Cloud Practitioner, AWS Certified Security – Specialty, (ISC)2 Certified Cloud Security Professional (CCSP), AWS Certified Solutions Architect – Associate, AZ-500: Microsoft Certified: Azure Security Engineer Associate, or Google - Professional Cloud Security Engineer.
Familiarity with security tools including Tenable Nessus and/or Security Center, IBM Guardium, HP WeblInspect, Network Mapper (NMAP), and/or similar applications.
Working knowledge of NIST Risk Management Framework (RMF) and ATO processes.

Technologies you may work with

Tenable Nessus, Security Center
IBM Guardium, HP WeblInspect, Network Mapper (NMAP)
NIST Risk Management Framework (RMF), ATO processes
Cross Domain Solutions (CDS)
AWS, Azure, and Google cloud security certifications listed above, including CISSP

Preferred qualifications

Degree in Computer Science, Cybersecurity, or other cyber discipline.

Security clearance and screening

Must have a current/active Top Secret security clearance and be willing and able to obtain SCI eligibility prior to start.
Selected candidate must be willing to undergo a Polygraph.

Physical requirements

Must be able to remain in a stationary position 50%.
Needs to occasionally move about inside the office to access file cabinets and office machinery.
Constantly operates a computer and other office productivity machinery (such as a calculator, copy machine, and computer printer).
Often positions self to maintain computers in the lab, including under desks and in the server closet.
Frequently communicates with coworkers, management, and customers, which may involve delivering presentations; must be able to exchange accurate information in these situations.

View full job page →

10d ago

Product Security Engineer - AI Trainer

DataAnnotation Washington, DC 🇺🇸 Remote

Washington, DC

10d ago

$50 - $100/hr Contract Ai Security Cybersecurity Analysis Engineer

Apply Now

Job Description

Product Security Engineer - AI Trainer to support the development of AI models for cybersecurity use cases by reviewing AI-generated security content and building security-focused training problems. This is a contract opportunity that can be completed fully remotely with an hourly compensation model through the platform.

Location

Washington, DC (remote)

Role Type and Compensation

Job type: Contract
Pay: USD 50 to 100 per hour, paid hourly via the platform
Payment method: PayPal
Work model: Fully remote

Responsibilities

Review AI-generated cybersecurity content, including threat analysis, vulnerability assessments, and offensive security techniques, to verify real-world accuracy and validity.
Create and solve security-focused technical problems used to train AI systems.
Produce clear technical explanations along with security-relevant code.
Deliver feedback intended to inform and improve the next generation of AI security models.

Requirements

Minimum experience: 2+ years of hands-on experience in a cybersecurity role, such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or related areas, including government or military cyber operations.
Coding experience: required, with comfort navigating and patching an existing codebase.
Language: English fluency (native or bilingual) with strong writing skills.
Education: a bachelor’s degree is preferred.
Certifications: a plus (examples include OSCP, CRTO, GREM, GCFA, CEH, and similar).

Benefits

Fully remote: work from anywhere in the US, Canada, UK, Ireland, Australia, and New Zealand.
Flexible schedule: select which projects you take on and when you work.
Tools and setup: perform work on your own computer from home.
Competitive pay: hourly rates range from $50 to $100 USD, with opportunities for higher bonus rates for certain projects.
Impact: contribute to the evolution of AI technologies designed for cybersecurity.

Additional Notes

Payment is made via PayPal.
Never request for money: the hiring process will not ask candidates for any payment.
Eligible regions: this contract role is available only to applicants in the US, Canada, UK, Ireland, Australia, and New Zealand.

View full job page →

12d ago

Principal Threat Intelligence Engineer

UnitedHealth Group Washington, DC 🇺🇸 Remote

Washington, DC

12d ago

$113k - $193k/yr Full time Agentic Ai Artificial Intelligence Cybersecurity Tools

Apply Now

Job Description

UnitedHealth Group is looking for a Principal Threat Intelligence Engineer (remote in Washington, DC) to deploy and integrate threat intelligence capabilities across its security ecosystem. In this role, you will help turn threat data into actionable intelligence by building the pipelines, workflows, and integrations that support CTI, SOC, IR, and other SecOps teams.

This position supports a modern approach to intelligence operations, combining threat intelligence platforms, SIEM enrichment, and automation (including agentic AI and LLM-enabled capabilities) to increase the speed and availability of contextualized intelligence. The goal is to reduce manual effort while improving detection fidelity across security tooling.

Responsibilities

Deploy, integrate, and maintain a threat intelligence platform integrated into United Health’s security tooling ecosystem
Integrate threat intelligence into SIEM platforms (for example, Splunk) to support detection use cases and alert enrichment
Use agentic AI, LLMs, and related capabilities to improve availability and speed of delivery of contextualized threat intelligence for CTI, SOC, IR, and other SecOps members
Build and deploy technology-supported workflows for intelligence use cases across SOC, IR, Insider Risk, Fraud, Red Team, and Threat Hunt environments
Develop and maintain SOAR playbooks for automated threat response and enrichment, using SOAR to optimize intelligence workflows
Orchestrate workflows across security tools to reduce manual analysis and response time
Build and maintain integrations between threat intelligence feeds (commercial, open-source, ISACs) and internal security platforms
Integrate and operationalize TIPs such as MISP, OpenCTI ThreatConnect, Anomali, and ThreatQuotient with enterprise security tools
Develop pipelines to ingest, normalize, deduplicate, and enrich Indicators of Compromise (IOCs) and threat data
Correlate intelligence with telemetry from SIEM, EDR, NDR, and cloud security tools to improve detection fidelity
Enable automated enrichment of alerts using threat intelligence data within SIEM workflows

Requirements

3+ years of experience in a cyber threat intelligence, cyber security engineering, incident response, or malware analysis role, with heavy emphasis on tool and technology integration
Proficiency in one or more of: Python (primary) for automation, API integrations, and data processing
Proficiency in one or more of: Java, JavaScript/Node.js, or Go for service development
Experience with REST APIs, JSON, and STIX/TAXII protocols
Experience with data parsing, transformation, and pipeline development
Experience with scripting (Bash, PowerShell)
Demonstrated familiarity with Git and CI/CD pipelines
Demonstrated familiarity with operating systems and platforms including Linux (Ubuntu, CentOS, RHEL, Kali), AWS, Docker, Windows Server (NT through 2012), Active Directory, and Mac OS X
Experience applying AI in a threat intelligence framework, including LLM, MCP server configuration, RAG, and associated processes
Hands-on experience with TIPs such as MISP, OpenCTI, ThreatConnect, and Anomali
Experience integrating multiple intelligence feeds and formats
Solid experience with SIEM platforms: Splunk, Microsoft Sentinel, IBM QRadar, Elastic
Experience building detection rules, correlation searches, and dashboards
Proven understanding of log ingestion, normalization, and enrichment pipelines
Experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, Swimlane, and Tines
Development experience with playbooks/runbooks for automated response
Proven knowledge of structured threat data formats (STIX, TAXII)

Benefits

Comprehensive benefits package
Incentive and recognition programs
Equity stock purchase
401k contribution (all benefits subject to eligibility requirements)

Preferred Qualifications

Relevant certifications (for example, GCTI, GCIA, CISSP, Splunk certifications)
Experience in large-scale security operations or SOC environments
Familiarity with MITRE ATT&CK and other intelligence frameworks
Familiarity with data engineering technologies such as Kafka, Spark, Elasticsearch
Experience with cloud platforms (AWS, Azure, GCP) and security integrations
Experience in threat hunting and detection engineering