Top Senior Cyber Security Jobs in San Antonio, TX

Provides security engineering and architecture expertise for FedRAMP authorization and continuous monitoring. Reviews cloud service provider architectures, security controls, authorization packages, assessment reports, vulnerabilities, and compliance documentation against NIST, FedRAMP, FISMA, RMF, and agency requirements. Leads vendor interviews, identifies technical and documentation gaps, advises government program leads and CISOs on risk posture, and supports secure, compliant, resilient system design.

Lead customer security strategy and architecture using Microsoft security products. Assess security posture, design cloud-native solutions, remove technical blockers, author customer insights, and support complex enterprise deployments to accelerate adoption and secure cloud/hybrid environments.

Owns broad product and operational security responsibilities, including identity and access management, threat modeling, code review, fuzzing, bug bounty operations, AI security research, software supply chain monitoring, penetration test coordination, and compliance evidence. The role requires a strong software engineering background, product security expertise, security tooling development, systems programming experience, and familiarity with web3 or DeFi. It is remote-first and emphasizes autonomy, documentation, and high ownership.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Design and implement AI-powered security agents and tooling across CI/CD, perform threat modeling and manual assessments, find and drive remediation of vulnerabilities, embed security into development workflows, connect telemetry to detection systems, and shape product security strategy and incident response.

Leads large-scale security, IT, and engineering programs from strategy through execution. Coordinates cross-functional stakeholders, manages governance, risks, dependencies, and timelines, and develops unified security and compliance frameworks. The role drives control implementation, regulatory alignment, risk mitigation, process automation, continuous improvement, and a culture of compliance while connecting security initiatives to business goals and customer expectations.

Serve as a senior security solution architect advising enterprise customers on modern, cloud-native Microsoft security architectures. Design and validate solutions using Microsoft security products, remove technical blockers, act as SME on complex deployments, gather customer insights to influence product roadmap and map solutions to business outcomes, and support large-scale security and compliance projects.

Build backend services and distributed systems for a cybersecurity and software supply chain security platform. Develop scalable APIs, data pipelines, and platform components handling vulnerability, container, package, runtime, and SBOM data. Work across Linux, Kubernetes, containers, and cloud environments while solving concurrency, performance, reliability, and distributed processing challenges. Own projects from design through deployment, participate in architecture discussions, review code, and collaborate with security researchers and product teams.

Designs, implements, and operates Azure-native security controls for identity, networking, and workloads. Manages Defender for Cloud and Microsoft Sentinel, implements Conditional Access, MFA, and Zero Trust patterns, embeds security into Infrastructure-as-Code pipelines, monitors cloud posture, supports incident response, drives remediation, and maintains compliance documentation and metrics. Partners with cloud and infrastructure security teams to ensure secure, resilient, and compliant Azure environments.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

Manages enterprise information security governance, risk, and compliance initiatives. Develops security policies and frameworks, leads data classification and threat modeling, conducts risk assessments, oversees vulnerability remediation, evaluates security controls, supports audits, and prepares risk metrics and executive reports. Partners with technical teams to embed security requirements and promotes governance best practices across the organization.

The Security Compliance Analyst manages cybersecurity, data privacy, classification, retention, governance, vulnerability assessments, incident response, and ATO documentation. Responsibilities include monitoring cloud environments and system logs, using SIEM tools, analyzing security risks, supporting security policies, reporting incidents, and ensuring compliance throughout the system lifecycle. The role also collaborates with Agile teams and stakeholders to protect sensitive data and resolve information assurance issues.

Lead Uber’s highest-severity security incidents from escalation through containment, recovery, and remediation. Command response teams, make high-consequence decisions, investigate logs and system data, brief executives, conduct post-incident analysis, mentor responders, and improve incident response through simulations, threat modeling, automation, and AI-assisted tooling.

Leads Forward’s application and product security program, including a team of senior engineers, penetration testing, vulnerability remediation, secure SDLC practices, and AI security. Owns testing standards, remediation workflows, exposure controls, pre-production security reviews, and security services. Partners with Engineering and executives to communicate risk and priorities while securing web applications, APIs, cloud infrastructure, and AI-built software.

Lead application security engineering across the SDLC using AI-assisted threat modeling, automated security testing, vulnerability prioritization, and secure-by-default controls. Partner with Engineering, Product, QA, DevOps, and AI platform teams to secure applications, APIs, cloud infrastructure, data, and AI/ML systems. Build security automation, CI/CD controls, policy-as-code guardrails, developer enablement, and proactive defenses against emerging threats such as prompt injection and data poisoning.

Design and lead secure AI security solutions for enterprise customers across cloud, hybrid, and on-premises environments. Conduct technical discovery, architect integrations spanning AI systems, LLM applications, data pipelines, model layers, and runtime environments, and support presales validations and implementations. Serve as a technical advisor to CISOs and security leaders while partnering with Sales, Product, and R&D to guide deployments, resolve escalations, and influence product strategy.

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.

Staff Security Engineer partners with Product, Engineering, and DevOps to embed security into application architecture, cloud infrastructure, and CI/CD processes. Responsibilities include secure design and code review, vulnerability remediation, AWS cloud security, WAF tuning, security automation in Python, SIEM and log pipeline contributions, endpoint controls, and security standards. The role requires deep expertise in application security, cloud security, or security automation, plus threat modeling and independent project ownership.

Provides information assurance and cybersecurity services for DoD applications, including RMF and A&A support, security documentation, vulnerability assessments, POA&M management, STIG compliance, security audits, incident reporting, continuous monitoring, and DevSecOps security integration. The role supports cloud migration, cybersecurity tooling, compliance with DoD and NIST standards, external audits, and implementation of government cybersecurity directives.

Leads KeyBank’s Red Team and offensive security program, including adversary emulation, penetration testing, physical and application assessments, cloud security testing, AI security evaluations, and purple team exercises. Develops testing strategy, methodologies, tooling, metrics, and maturity roadmaps; mentors engineers; coordinates internal and third-party engagements; validates remediation and attack paths; and presents findings and strategic recommendations to executives and cybersecurity stakeholders.

Leads application security engineering for enterprise systems, including SAST and DAST scanning, security control implementation, web application protection, and pipeline development. Uses Veracode, Burp tools, Linux, and programming or scripting languages to identify and remediate vulnerabilities. Applies OWASP, CVSS, CWE, federal compliance standards, and secure architecture practices while supporting scalable digital transformation initiatives. Requires Public Trust eligibility and U.S. citizenship.

Designs, implements, configures, and supports enterprise cybersecurity solutions across IAM, endpoint, network, email, application, cloud, and security awareness domains. Conducts vulnerability assessments, threat hunting, incident investigation, security tool tuning, policy development, and security architecture reviews. Serves as a security subject matter expert on technology projects, collaborates with an MSSP, provides incident escalation support, and maintains availability for critical security operations.