Top Cyber Security Jobs in San Antonio, TX

Build Ent’s endpoint data-protection layer for classifying sensitive data, tracing provenance, and enforcing egress policies across devices, applications, networks, removable media, browsers, and AI tools. Develop cross-platform interception and content inspection capabilities, integrate on-device language models, optimize performance, produce forensic evidence, investigate compatibility issues, and improve detection precision for enterprise customers.

Deliver cybersecurity assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance for enterprise clients. Assess on-premises, cloud, hybrid, identity, OT, and ICS environments; identify risks and security gaps; produce reports; and present recommendations to technical and executive stakeholders. Support incident response and post-incident improvements, collaborate with engagement managers and specialists, contribute to consulting methodologies, and stay current on threats and security best practices. Travel is approximately 20%.

Architects and maintains cybersecurity infrastructure, policies, standards, and compliance programs. Leads vulnerability reviews, remediation, risk assessments, incident response, forensic investigations, security audits, and regulatory compliance efforts. Develops security strategies, certification methodologies, monitoring plans, and disaster recovery/business continuity architectures. Coordinates security implementations across IT and business departments, reports to the CISO, and promotes security awareness and training.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Design and build cloud security tooling, automation, and AI-enabled threat-hunting capabilities. Perform threat modeling, incident response, security research, architecture reviews, and detection engineering. Develop SIEM and SOAR integrations, automate security processes, address AI-related threats using MITRE ATLAS, and contribute to multi-year security roadmaps. Collaborate across engineering and business teams, prioritize security improvements, support on-call operations, and mentor team members.

Designs, deploys, operates, and maintains endpoint security solutions across workstations, servers, VDI, and mobile devices. Responsibilities include managing CrowdStrike Falcon, Symantec DLP, Skyhigh, and Zscaler technologies; monitoring telemetry and sensor health; troubleshooting endpoint issues; executing upgrades and migrations; supporting SIEM/SOAR integrations, malware coverage, automation, documentation, and security roadmap initiatives.

Own strategic post-sales relationships with enterprise customers, advising them on AI security and governance. Lead discovery, define measurable outcomes, drive adoption, support retention and expansion, and coordinate Product, Engineering, Security, Support, and operationalization teams. Translate CISO-level strategy, GRC concerns, business objectives, and technical requirements into practical solution strategies while identifying new AI security use cases and growth opportunities.

Monitors, detects, investigates, and responds to enterprise cybersecurity threats within a Security Operations Center. Responsibilities include SIEM and EDR alert triage, incident response, endpoint and identity threat analysis, cloud security monitoring, vulnerability remediation support, and investigation of phishing, malware, ransomware, and unauthorized access. The analyst also supports Zero Trust initiatives, SOAR automation, playbook development, root-cause analysis, and continuous improvement of security operations.

Lead AWS GovCloud security engineering and accreditation for pre-production modernization environments. Design secure cloud architectures, landing zones, IAM controls, network segmentation, infrastructure automation, containers, and CI/CD deployments. Own DoD RMF, IATT-C, and ATO packages, security controls, POA&Ms, vulnerability remediation, continuous monitoring, and cybersecurity assessments. Provide cloud and cybersecurity guidance for modernization, migration, data transition, Zero Trust, and ICAM initiatives while advising program leadership.

Supports information security governance programs covering data retention and protection, eDiscovery, legal holds, insider risk, investigations, and regulatory compliance. Develops policies and governance processes, assesses risks and control gaps, administers retention and destruction activities, supports litigation and audit requests, investigates insider risk events, manages related technologies and vendors, and delivers reports and executive communications. Partners with Legal, Compliance, HR, Corporate Security, Technology, and business stakeholders.

Secure Temporal’s development pipeline, product, and customer execution environments. Partner with engineering teams on secure architecture, threat modeling, risk assessments, code and software supply-chain security, vulnerability triage, Kubernetes hardening, multi-tenant isolation, and responsible AI security. Participate in on-call rotations and help establish actionable security policies and practices across the organization.

Build automation and data tooling for Sales Engineering, support customer Proofs of Value, integrate and validate security data, and analyze vulnerabilities, controls, and attack paths. Own threat intelligence for go-to-market teams by tracking CVEs and active exploitation. Present findings to customers, support technical sales conversations, and collaborate with Product, R&D, and Research to improve detection and mitigation logic.

Leads cybersecurity solutions engineering for government and education customers across managed security, network monitoring, cloud security, and related services. Provides technical discovery, solution design, demonstrations, proofs of concept, onboarding, deployment guidance, escalations, and post-sales support. Partners with sales and technical account teams, mentors engineers, develops enablement materials, informs product strategy, identifies expansion opportunities, and manages customer activity in Salesforce.

Leads Trace3’s Security Solutions practice, developing go-to-market strategy, security offerings, AI-enabled services, presales execution, partner relationships, and complex client engagements. Owns revenue, gross profit, forecasting, pipeline, and operating-plan performance. Advises executive leadership, supports assessments and proof-of-concepts, communicates with technical and executive audiences, and leads, coaches, and develops practice teams.

Build Tempo’s product security program from the ground up, including application, infrastructure, endpoint, and supply-chain security tooling. Identify and remediate production and development-pipeline risks, lead incident response through post-mortems, conduct secure design reviews, and establish scalable security practices. The role requires hands-on coding, deep incident-response expertise, strong infrastructure and application-security knowledge, and autonomous collaboration with engineering.

Supports Azure Government cloud infrastructure, web applications, and PaaS environments while partnering with infrastructure, cloud, and application teams. Performs NIST RMF security control assessments, credentialed vulnerability scans, configuration reviews, and security findings analysis. Recommends remediation, evaluates security control effectiveness, and develops artifacts for RMF documentation and accreditation. The role requires Azure administration, Windows and Linux hardening, DISA STIG/SCAP knowledge, DoD IAT III certification, and an active Secret clearance.

Own Fetch’s information security function, including vulnerability management, application security, incident response, forensics, security architecture, GRC, compliance, third-party risk, AI governance, and security awareness. Serve as incident commander and senior technical authority, mature the security program, lead audits and executive reporting, manage security risks, and hire and develop the Security Engineering team.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

Perform Cyber Operational Readiness Assessments (CORA) for the Air Force focusing on endpoint security, network access control, firewall validation, audit log review, and configuration evaluations against STIGs/SRGs. Provide reports, coordinate with base leadership, obtain required certifications, travel to Air Force locations, and support daily assessment operations.

Lead daily GSOC operations including event triage, escalation, and incident response. Guide and mentor analysts, coordinate with MSSPs and internal teams, maintain playbooks, track metrics, and improve detection and response across converged cyber and physical security environments.

Lead risk-based security assessments of systems, applications, cloud services, and third-party vendors. Evaluate controls, review SOC and security documentation, analyze evidence, produce risk-based recommendations and executive summaries, support audits and regulatory examinations, and partner with Procurement, Legal, and business stakeholders to manage residual risk and improve security posture.