Top Senior Cyber Security Jobs in San Antonio, TX

Lead alliance and technical product marketing: build joint positioning and go-to-market enablement with strategic partners, own competitive intelligence and technical differentiation, create content and launch programs that drive pipeline and inform product and GTM strategy.

Lead competitive intelligence for Proofpoint's Data Security platform using AI and automation to surface signals, analyze competitors, and deliver field-ready recommendations. Build deep technical knowledge in DLP, CASB, Insider Threat, and DSPM, support sales deals, create enablement content, and influence product and marketing strategy cross-functionally.

Lead design and implementation of security controls, drive audit readiness across multiple frameworks (FedRAMP, SOC2, ISO, CMMC), gather audit evidence, liaise with auditors and government officials, translate compliance into practical controls with engineering/product teams, draft policies, automate compliance processes, and represent the program in customer security reviews.

Lead design and governance of security architecture across cloud and on‑prem environments. Implement cloud and infrastructure controls, drive vulnerability management, perform risk assessments and threat modeling, support incident response and compliance, and provide security guidance to engineering teams to improve enterprise security posture.

Design and execute integration and security-focused test plans for PAM and Keeper Secrets Manager. Validate integrations across cloud providers, IAM, CI/CD, and OS/databases; perform reliability and security testing; analyze logs and defects; contribute to automation and collaborate with engineering, product, and security teams to ensure reliability and compliance.

Design and build secure native iOS applications using Swift/Objective-C and C/C++. Implement intuitive UIs with SwiftUI/UIKit, apply MVVM/Clean Architecture, and ensure secure networking, cryptography, Keychain use, and hardened release pipelines. Collaborate with security experts and integrate automated security scans into CI/CD.

Secure enterprise data warehouses, ETL/ELT pipelines, and data interfaces for international and government environments. Implement classification-driven controls, manage cross-border data compliance (GDPR, CCPA, LGPD, PIPL), support FedRAMP/FISMA/NIST/CMMC frameworks, secure ingestion and interfaces, enforce least-privilege access, perform risk assessments and incident response, and collaborate with data engineering, legal, and government stakeholders.

Lead design and implementation of secure CI/CD pipelines, IaC automation, cloud security and compliance. Perform vulnerability assessments, monitor environments, manage Kubernetes/Docker, support incident response and disaster recovery, and provide technical leadership and DevSecOps frameworks for enterprise global projects.

Design, implement, and maintain SAP S/4HANA Public Cloud security and role-based access controls. Perform SoD assessments, integrate identity services (IAS/IPS/SSO), support Fit-to-Standard workshops, audit/compliance requests, quarterly releases, troubleshooting, role optimization, and post-go-live support for SAP GROW implementations.

Customer-facing cloud security presales engineer who consults with executives and security teams, develops security services and lab-based use cases, educates sales, creates collateral, and stays current on security technologies and frameworks to support sales engagements.

Design, build, validate, and maintain high-confidence detections across SIEMs and security platforms. Translate incidents, hunts, and threat intelligence into production-ready detection logic, drive detection-as-code workflows, and partner with responders to reduce noise, improve context, and monitor detection health. Coach teams, shape telemetry requirements, and own the full detection lifecycle from development to retirement.

Lead Togal's security program: own SOC 2 compliance, manage audits and Vanta, respond to customer security reviews, design and lead incident response, evaluate monitoring/MDR/SIEM, tighten cloud security posture, and coordinate breach communications with Legal and executive leadership.

Design, implement, and maintain enterprise-scale Identity & Access Management solutions across hybrid environments. Drive modernization to Zero Trust, automate identity processes, strengthen privileged access and governance, integrate AI-enabled tooling, monitor and respond to identity threats, ensure compliance and audit readiness, and collaborate with cross-functional teams to reduce identity risk and enable secure business operations.

Assess customers' information security and privacy posture against standards (NIST, PCI, GDPR, HIPAA, etc.), perform gap analyses, conduct onsite/remote assessments, produce findings and remediation recommendations, support sales as SME, and travel to customer sites as needed (25–50%).

Lead hands-on application security testing and secure code review across priority apps. Perform SAST/DAST/SCA/container scans and web/API testing, integrate automated checks into CI/CD, coach Security Champions, apply threat modeling and AI-assisted tooling, and produce clear vulnerability reports with remediation guidance to engineering and management.

Lead application and operational implementation of GRC/compliance frameworks (SOC 1/2, ISO 27001, CSA STAR, NIST CSF). Develop policies, run internal audits, support risk management and remediation, coordinate with SecOps to ensure controls meet audit standards, and support access reviews and annual audits.

Lead and grow a team of offensive security engineers, ensure high-quality red team, application, and cloud security engagements, drive operational metrics (utilization, margin, NPS), integrate field findings into product, champion AI/automation, and support sales and client relationships at executive levels.

Lead end-to-end application and product security for a Kubernetes-based multi-tenant platform. Perform deep security reviews of Go services, Kubernetes controllers, and frontends; lead threat modeling; integrate automated security checks into CI; manage vulnerability lifecycle; develop security-related features; and train developers on secure coding and attack vectors.

Design, implement, and operate application and cloud security controls across the SDLC. Integrate security tooling (SAST/DAST/SCA/IaC), secure CI/CD pipelines, run secure code reviews and threat modeling, deploy and manage cloud security posture and CNAPP tooling, and partner with engineering teams to remediate vulnerabilities and build secure, repeatable patterns.

Lead design and implementation of enterprise IAM capabilities (IGA, AM, PAM). Build SSO/MFA, RBAC/ABAC, lifecycle provisioning/deprovisioning, privileged account management, integrations with cloud and on‑prem, scripting automation, directory services management, and IAM monitoring and incident response.

Join the Infrastructure team to provision and secure cloud resources (compute, containers, databases, networking). Maintain infrastructure security, implement policies, handle Jira tickets, participate in daily standups, and perform DevSecOps tasks using Terraform, Helm, CI/CD, and security tooling.

Lead and build Swords Security Operations Center: architect SIEM, develop detection-as-code, run incident response, mentor SOC engineers, design SOAR/AI automation, run threat hunting and metrics to reduce MTTD/MTTR and scale defenses across cloud environments.

Lead design and improvement of detection, alerting, incident response playbooks, and threat hunting. Drive investigations, digital forensics, AI-assisted automation, and cross-functional coordination to contain, eradicate, and prevent security incidents while measuring and improving SOC effectiveness.

Manage daily operations of Privilege Identity applications and monitor SIEM services within the IAM infrastructure. Handle end-user escalations, maintain and update documentation, review and improve PI and SIEM processes, and evolve into strategic IAM responsibilities as services expand globally.

Lead SecOps and threat initiatives: detect, investigate, and remediate complex incidents; perform forensics and adversary emulation; develop automation and security tools; run threat exercises; mentor engineers; and communicate risks while driving closure on incidents and security projects.