Top Senior Cyber Security Jobs in San Antonio, TX

Lead and grow a remote Security Detection & Response team, build detection engineering and observability systems, drive telemetry onboarding, Panther and MITRE-aligned detections, Python automation, CI/CD workflows, and AI-assisted triage. Own incident response, investigations, cross-functional collaboration, and measurement of detection effectiveness.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Leads USAA’s enterprise Privileged Access Management program, owning strategy, roadmap, governance, credential and session management, and least-privilege initiatives. Oversees CyberArk implementations, cybersecurity risk and compliance, regulatory and audit commitments, vendor relationships, remediation, budgets, and program reporting. Builds and manages a security team while partnering with engineering, audit, legal, risk, compliance, and business stakeholders. Represents the organization with regulators and communicates security risks and performance to senior leadership.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Lead product vision and strategy for security operations services, defining outcomes for managed investigation, response, threat hunting, and advisory services. Partner with customer security ops, product, and marketing teams to deliver AI-driven, automated features, represent Zscaler to customers, and drive measurable security outcomes and operational alignment.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

Perform Cyber Operational Readiness Assessments (CORA) for the Air Force focusing on endpoint security, network access control, firewall validation, audit log review, and configuration evaluations against STIGs/SRGs. Provide reports, coordinate with base leadership, obtain required certifications, travel to Air Force locations, and support daily assessment operations.

Lead daily GSOC operations including event triage, escalation, and incident response. Guide and mentor analysts, coordinate with MSSPs and internal teams, maintain playbooks, track metrics, and improve detection and response across converged cyber and physical security environments.

Lead risk-based security assessments of systems, applications, cloud services, and third-party vendors. Evaluate controls, review SOC and security documentation, analyze evidence, produce risk-based recommendations and executive summaries, support audits and regulatory examinations, and partner with Procurement, Legal, and business stakeholders to manage residual risk and improve security posture.

Embed security across the SDLC by designing and maintaining CI/CD security controls, integrating SAST/SCA/DAST, securing AWS and container platforms, implementing IaC, managing vulnerabilities and incident response, supporting compliance (PCI-DSS, SOC2, NIST), mentoring teams, and developing security metrics.

Lead and execute offensive cyber operations including red team engagements, network exploitation, malware analysis, and tool development. Produce client briefings, mentor junior operators, and improve operational tooling and efficiency.

Short-term (2-month) contract to design, build, and secure multi-site networks (LAN/MAN/WAN). Responsibilities include routing (EIGRP/OSPF/BGP), VPN and remote-access deployments, VLANs, ACLs, NAT, STP, DMVPN/MPLS designs, and integrating firewalls/load balancers across Cisco, F5, Palo Alto, and Citrix NetScaler platforms.

Lead development and maintenance of enterprise cybersecurity strategy, tools, and processes. Install, monitor, and support security applications (firewalls, EDR, DLP, IDS/IPS, vulnerability scanning), conduct testing, monitor performance, coordinate remediation, provide technical guidance, and participate in 24/7 rotational support while producing metrics and reports to ensure compliance.

Serve as principal advisor and day-to-day manager for collateral, SCI, and SAP information system security. Oversee RMF/JSIG authorization, risk assessments, security testing, incident response, configuration management, training, documentation, and ensure authorization and recovery processes for assigned authorization boundaries.

Manage day-to-day security operations for classified information systems, maintain authorization packages, conduct continuous monitoring and A&A activities, coordinate configuration changes, handle incident response, ensure documentation and audit logging, and support Collateral, SCI, and SAP security requirements.

Provide enterprise cybersecurity monitoring, detection, incident response, threat hunting, vulnerability assessment and remediation. Design, implement and maintain security controls (SIEM, endpoint, DLP, MFA, IDS/IPS), collaborate with IT teams, support audits and document security practices to improve global security posture.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

Perform advanced threat hunting and deep analysis of attacker activity across on-premises and cloud environments, notify customers of imminent threats, build proof-of-concept hunting tools and automations, synthesize findings into mitigation recommendations, and drive product/tool improvements by transferring threat intelligence and investigation best practices to engineering and customer teams.

Hands-on senior IT security systems administrator responsible for administering Google Workspace and Microsoft 365, managing Windows and Mac endpoints via MDM, operating identity and SSO/MFA systems, and running security tooling (EDR, DLP, SIEM, email security). Owns threat monitoring, incident response, vulnerability and patch management, compliance evidence, DR planning, security reporting, and vendor relationships for a remote distributed workforce.