Top Senior Cyber Security Jobs in San Antonio, TX

Leads application security engineering for enterprise systems, including SAST and DAST scanning, security control implementation, web application protection, and pipeline development. Uses Veracode, Burp tools, Linux, and programming or scripting languages to identify and remediate vulnerabilities. Applies OWASP, CVSS, CWE, federal compliance standards, and secure architecture practices while supporting scalable digital transformation initiatives. Requires Public Trust eligibility and U.S. citizenship.

Provide fractional cybersecurity advisory and hands-on operations for hedge funds and family offices: conduct assessments, run vulnerability management and incident response, implement policies and controls, monitor logs and network traffic, test BCDR plans, advise on vendor selection, and report KPIs and remediation plans.

Serve as a fractional CISO advising alternative asset firms and family offices on building, maintaining, and operating full cybersecurity programs. Provide hands-on leadership, risk assessment, policy and controls development, and program execution on project-based engagements.

Monitor, investigate, and respond to security alerts, phishing, vulnerabilities, and incidents for managed security clients. Conduct threat hunts, collect evidence, identify root causes, perform containment and remediation, and create incident reports and SOPs. Support deployment of security toolsets, collaborate with analysts and engineers, communicate with clients, and participate in after-hours or on-call coverage.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Leads an engineering team responsible for designing, building, and operating data security products and controls. Provides technical direction, hands-on engineering leadership, and delivery ownership across DLP policy, data discovery and classification, data access controls, policy-as-code workflows, automation, integrations, testing, deployment, reliability, and operational support. Translates data security requirements into scalable solutions while mentoring engineers and driving adoption of secure engineering practices.

Lead product security architecture and offensive testing, including threat modeling, architecture reviews, penetration testing across web applications, APIs, mobile clients, and cloud infrastructure, secure design definition, code reviews, and remediation validation. Partner with engineering teams on authentication, authorization, data protection, trust boundaries, and cloud-native security while communicating risks and leading cross-functional security initiatives.

Lead design, assessment, and operationalization of secure Google Cloud environments. Advise on GCP security strategy, posture assessments, SIEM/Chronicle integration, CNAPP/CSPM tooling, Security Command Center implementation, Vertex AI security, remediation roadmaps, and delivery of architecture, runbooks, and executive advisory. Mentor consultants and develop repeatable security methodologies.

Lead and deliver Google Cloud security architecture, posture assessments, and operationalization. Advise on GCP security strategy, implement Security Command Center and cloud-native security tooling, integrate findings into SIEM/SecOps, guide AI workload security, produce executive reports and remediation roadmaps, and mentor consultants while driving repeatable methodologies and delivery quality.

Build security tooling and customer-facing transparency systems; oversee SBOM, vulnerability management, vulnerability disclosure, and bug bounty programs. Assess vulnerability severity and exploitability, publish security advisories and CVE records, coordinate disclosures, answer customer security inquiries, and collaborate with Engineering, Product, customers, partners, and security researchers. Apply AI to security workflows and use software engineering and automation practices to improve security processes.

Owns company-wide security across product, infrastructure, corporate systems, and IT. Responsibilities include fixing authentication and authorization issues, managing keys and secrets, hardening internal tools, improving permissions, contributing to backend engineering, and leading security reviews, incident response, and security tooling. This hands-on role requires broad security expertise, strong software engineering ability, and comfort working in an ambiguous early-stage startup environment.

Manage security operations and lead a security engineering team defending endpoints, SaaS, infrastructure, and corporate systems. Serve as senior Incident Commander, oversee detection and response using CrowdStrike, conduct cybersecurity risk assessments, and improve vulnerability, patch, access, and configuration management. Build detection coverage across endpoint, identity, SaaS, and cloud signals while partnering with AppSec and technical leaders. Lead the company’s AI security strategy and develop specialized security capabilities.

Build and operate automated security infrastructure across AWS and Kubernetes, including cryptographic-material lifecycles, security telemetry, compliance automation, policy-as-code, threat modeling, and CI/CD security controls. Develop agentic AI workflows using tools such as Claude Code and MCP integrations. Support incident response, review security architecture, automate evidence collection, and partner with engineering, audit, risk, vendors, and clients to improve security posture at scale.

Build and operate reliable security infrastructure across hundreds of AWS environments. Responsibilities include security telemetry and log analytics, OpenSearch, GitOps deployments, Kubernetes and EKS security, cross-account cloud infrastructure, Python automation, AI-assisted engineering workflows, compliance evidence collection, incident support, and on-call operations. The role partners with Security Operations, Risk, and SRE teams to automate manual processes and improve platform resilience.

Lead and develop the Security team while owning the company-wide security and compliance program. Responsibilities include managing SOC 2, PCI DSS, GDPR/CCPA, audits, policies, vendor risk, security awareness, and customer security communications. The role also provides technical direction for security tooling, cloud security, identity and access management, application security, vulnerability management, architecture reviews, and threat modeling.

Leads enterprise data protection initiatives, including data classification, DLP policy management, eDiscovery support, insider threat investigations, and data governance. Uses behavioral analytics, audit logs, SIEM, UEBA, and forensic tools to identify misuse and leakage. Develops security controls, incident response playbooks, and compliance updates while collaborating with Legal, HR, and Compliance. Participates in threat-hunting and red, blue, and purple team exercises. Requires five-plus years of relevant experience and eligibility for a Top Secret clearance.

Owns IT systems administration and security operations for a fully remote workforce. Responsibilities include managing Microsoft 365 and Google Workspace, endpoint and identity platforms, security tools, access controls, threat monitoring, incident response, vulnerability management, compliance evidence, disaster recovery, vendor relationships, reporting, and operational roadmaps.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Lead development of security enforcement integrations that warn or block unsafe AI artifact installations, serve sanitized alternatives, and record audit events. Build reliable event-driven backend systems with queues, webhooks, idempotency, retries, back-pressure, approval flows, dry runs, audit logs, and rollback mechanisms. Integrate third-party security, infrastructure, and identity APIs, with potential future work on fleet-wide revocation controls and security platform integrations.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Monitor and secure federal cloud environments across AWS, Azure, and Google Cloud. Perform cloud threat hunting, log analysis, incident response, and develop cloud security playbooks and monitoring use cases. Ensure cloud logs are integrated with SIEM tools, tune detection systems, establish KPIs, support threat information sharing, and assist with cloud SOC tool deployment and proof-of-concept efforts.

Manage, maintain, and troubleshoot enterprise security technologies while monitoring, detecting, investigating, and remediating security incidents. Perform digital forensics, threat hunting, vulnerability and risk assessments, audits, compliance checks, evidence preservation, and root cause analysis. Collaborate with internal teams and third parties, implement new security solutions, create security documentation, and support incident response during regular and on-call hours.

Design, implement, and maintain security controls across cloud (AWS) and on-prem systems. Lead vulnerability management, incident response, and remediation. Serve as SME for SIEM, SAST/DAST, IAM. Embed security in SDLC, support SOC 2/ISO 27001 audit readiness, mentor junior engineers, and recommend control improvements.

Leads end-to-end Cisco Duo MFA and access management engagements, including architecture, deployment, integrations, migrations, automation, device trust, security reviews, documentation, and client handoff. Supports Okta and Ping Identity projects, contributes to presales activities, owns technical delivery, mentors junior engineers, and manages client communication. The role integrates identity platforms with VPNs, cloud services, applications, directories, endpoint management tools, and enterprise infrastructure.