Top Cyber Security Jobs in Buffalo, NY

Lead security architecture, threat modeling, and enterprise risk management. Drive incident response, DevSecOps enablement, secure SDLC practices, and mentor engineers while aligning security with compliance and business needs.

As a Sr. Security Engineer, you'll advise on security requirements, build trust with customers, and collaborate on technical risk mitigation throughout sales processes.

Lead the Triage team in the SOC, focusing on threat qualification, operational strategy, process optimization, and team development while ensuring efficient incident response workflows.

Design and build production-grade security automation and AI-assisted SOAR playbooks to convert detections into policy-driven responses. Integrate across identity, endpoint, network, cloud, and SaaS, embed guardrails, ensure measurable and auditable outcomes, and enable self-healing and resilient automation. Collaborate with platform owners and response teams and embed security controls into CI/CD and policy-as-code pipelines.

The Director of Cyber Product Security will lead a team to secure technology platforms, collaborate on security standards, and improve security programs.

As a Security Engineer, safeguard Runpod's GPU cloud platform, conduct security assessments, implement fixes, and foster a security-first culture with development teams.

The Sr. Security Engineer I leads incident response, threat detection, and engineering, managing investigations, enhancing detection capabilities, and mentoring analysts.

Hands‑on senior engineer to design, deploy, and operate enterprise data protection capabilities (Microsoft Purview, DLP, DSPM). Responsibilities include data discovery, classification, labeling, encryption, detection logic, integration with identity/endpoint/SIEM, incident support, automation, and cross‑functional partnership to reduce data exposure and improve control effectiveness.

Lead a technical security engineering team to design and execute enterprise security controls and exposure management. Drive platform strategy, automation, detection engineering, vulnerability management, cloud and application security, and collaborate across teams to reduce attack surface and improve measurable security posture.

Design, implement, and automate infrastructure security controls across multi-cloud and containerized environments. Build secure IaC and guardrails (Terraform, Go), review cloud and data platform architectures, partner with engineering to embed security, advise senior stakeholders, and drive incident response and continuous security improvements.

Design, implement, and automate security configurations for corporate endpoints (macOS, Chromebooks, mobile), build automation and integrations, perform security reviews of enterprise systems, and collaborate with IT and engineering to integrate endpoint and SaaS security into company initiatives.

Sell CDW Security products and services across the full sales lifecycle: strategic account planning, opportunity development, relationship-building, pursuit, and closure. Drive bookings, revenue, and gross profit targets, maintain Salesforce pipeline, coordinate across internal teams and partners, mentor junior sellers, and represent CDW at industry events to expand market presence.

Field-based technical pre-sales role designing and scoping security assessment, deployment, and advisory services. Collaborate with sales, delivery, and partners, author SOWs, maintain partner certifications, act as subject-matter expert across endpoint and security operations technologies, and drive territory strategy and enablement.

The Insider Risk Analyst will develop vetting protocols, conduct background checks on elevated-risk candidates, analyze security risks, and enhance screening processes. Responsibilities include evaluating background check outcomes, preparing reports, and collaborating with security teams.

Monitor and analyze security events in Datadog, identify and investigate incidents, document and evolve incident response procedures, provide technical guidance, troubleshoot configuration/script issues, and work directly with customers on implementations and remote services.

Lead corporate security engineering to define secure-by-default baselines, oversee vulnerability management, drive automation to prevent configuration drift, govern SaaS security, mentor engineers, and ensure alignment with CMMC 2.0 and NIST 800-53 while improving audit readiness.

Lead corporate security monitoring and detection operations: own strategy and maturity roadmap, manage analysts and threat hunters, improve detection coverage and alert quality, support incident investigations, maintain audit-ready documentation, and provide actionable security metrics to leadership and compliance stakeholders.

Conduct research on mobile threats, analyze cyber campaigns, reverse engineer malware, produce intelligence reports, and collaborate with teams for threat detection.

Ensure Rubrik products meet security standards by integrating AppSec into the SDLC, performing automated and manual assessments, threat modeling, hardening applications and deployments, tracking AppSec metrics, and producing security guidance for engineering and operations teams.

Design, build, and maintain secure, scalable SecOps platforms using C++, Rust, and scripting. Implement CI/CD and DevOps practices, integrate systems via APIs/webhooks and AI-driven tools, architect cloud (AWS/Azure/GCP) environments, optimize Linux/kernel configurations, automate infrastructure, and collaborate with SecOps on monitoring, detection, and response to protect enterprise assets.

The Application Security Engineer will identify and fix security vulnerabilities in the application and infrastructure, ensuring compliance with standards. They will also mentor other engineers, improve security practices, and enhance the organization's security posture.

As a Principal Security Engineer, you will lead security initiatives, design secure systems, automate processes, and mentor teams, ensuring safe technology usage.

As an Information Security GRC Program Manager, you will manage GRC programs, support compliance initiatives, assess risks, and improve operational efficiency while ensuring audit readiness.

The Principal Security Operations Analyst will triage, investigate, and respond to cyber threats, mentor junior analysts, and enhance security efforts through advanced analysis and automation.

The Executive Technology & Security Specialist will support the executive team by managing their technology needs, implementing security protocols, and ensuring reliable communication in high-pressure situations.