Top Remote Senior Level Cybersecurity Jobs in San Antonio, TX

Technical pre-sales lead supporting account teams and partners to win new logo deals and POVs. Deliver technical value stories, map pain to business ROI, shape GTM strategy, enable partners, run custom proofs-of-value, and travel regionally to client sites.

Own and scale Filigran's technology partner ecosystem: identify partners, negotiate technical alliances, prioritize and drive connector delivery with partners and internal engineering tied to pipeline, enable commercial teams with joint assets, and report ecosystem health and impact to leadership.

Lead and improve global SOC capabilities by overseeing threat detection, incident response, and SIEM-driven operations. Serve as technical escalation for analysts, develop playbooks and automation, coordinate stakeholders, and use metrics and threat analysis to drive detection and response maturity.

Lead and manage AI teams to design, train, deploy, and operate production-grade ML and generative AI systems for security detection and response. Define AI roadmap, partner with product and platform teams, uphold secure MLOps practices, mentor staff, recruit talent, and deliver scalable, observable AI integrated into production cloud environments.

Lead SOC investigations and incident response, triage and analyze telemetry across SIEM/EDR/IDS/packet data, mentor junior analysts, tune detections, communicate findings and remediation to clients, and participate in rotating on-call duties to ensure timely, accurate security operations.

Lead go-to-market strategy for Magnet Forensics' security, incident response, and AI product portfolio. Influence executive, product, and sales stakeholders; translate technical AI/ML and forensic capabilities into messaging; develop buyer personas; create sales enablement and demand-generation content; evangelize products at events; partner with competitive intelligence and customer advocacy; mentor product marketing team members.

Design, develop, document, deploy, and maintain hands-on cybersecurity training labs and CTFs. Build repeatable lab deployments using Ansible/Terraform, deploy to AWS/OpenStack, provide instructor support, perform QA, and collaborate with Course Architects and clients. Provide technical support during trainings, mentor staff, and assist in scoping engagements. Travel ~10-25% and pass background check.

Lead threat detection and response: research adversary behavior, monitor environments, respond to incidents, build SIEM/SOAR use cases (Splunk), perform forensics and cloud IR, produce reports, automate detection and remediation, and mentor junior analysts.

Support IAM governance by developing and maintaining reporting, KPIs, dashboards, and documentation; run access certification campaigns; validate metrics with stakeholders; track remediation and control effectiveness; prepare materials for senior leadership and improve governance frameworks to strengthen compliance and reduce risk.

Lead and grow the Identity Platform Engineering team to design, implement, and operate enterprise IAM capabilities (lifecycle, governance, PAM, authentication/authorization, federation). Deliver API-driven, developer-consumable identity services using IaC, CI/CD, automation, and observability. Integrate identity across cloud, SaaS, on‑prem, and AI-enabled systems, enforce least-privilege and Zero Trust patterns, and improve governance, audit readiness, and operational reliability.