Top Cyber Security Jobs in Buffalo, NY

The ISSO will enhance security and compliance for federal cloud environments, manage ATO processes, conduct audits, and oversee incident responses.

As a Principal Security Engineer, you will lead security initiatives, design secure systems, automate processes, and mentor teams, ensuring safe technology usage.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

The Director will lead product security and incident response, manage vulnerabilities, develop security roadmaps, and ensure compliance with standards, focusing on offensive security and incident management.

The Security Architect will design and configure information systems per security standards, enhance security posture, develop policies, assess vulnerabilities, and lead security initiatives while collaborating with teams.

The Director of Security and Compliance leads compliance efforts, manages FedRAMP/GovRamp authorizations, and collaborates on product security within a financial technology company.

Lead the Security Incident Response Team at GitLab, manage cybersecurity incidents, foster collaboration, and enhance incident response capabilities.

The Penetration Testing Analyst performs technical testing on various targets, produces reports, collaborates with teams, and assists with incident response.

Lead security architecture, threat modeling, and enterprise risk management. Drive incident response, DevSecOps enablement, secure SDLC practices, and mentor engineers while aligning security with compliance and business needs.

As a Sr. Security Engineer, you'll advise on security requirements, build trust with customers, and collaborate on technical risk mitigation throughout sales processes.

Lead the Triage team in the SOC, focusing on threat qualification, operational strategy, process optimization, and team development while ensuring efficient incident response workflows.

Design and build production-grade security automation and AI-assisted SOAR playbooks to convert detections into policy-driven responses. Integrate across identity, endpoint, network, cloud, and SaaS, embed guardrails, ensure measurable and auditable outcomes, and enable self-healing and resilient automation. Collaborate with platform owners and response teams and embed security controls into CI/CD and policy-as-code pipelines.

The Director of Cyber Product Security will lead a team to secure technology platforms, collaborate on security standards, and improve security programs.

As a Security Engineer, safeguard Runpod's GPU cloud platform, conduct security assessments, implement fixes, and foster a security-first culture with development teams.

The Sr. Security Engineer I leads incident response, threat detection, and engineering, managing investigations, enhancing detection capabilities, and mentoring analysts.

Hands‑on senior engineer to design, deploy, and operate enterprise data protection capabilities (Microsoft Purview, DLP, DSPM). Responsibilities include data discovery, classification, labeling, encryption, detection logic, integration with identity/endpoint/SIEM, incident support, automation, and cross‑functional partnership to reduce data exposure and improve control effectiveness.

Lead a technical security engineering team to design and execute enterprise security controls and exposure management. Drive platform strategy, automation, detection engineering, vulnerability management, cloud and application security, and collaborate across teams to reduce attack surface and improve measurable security posture.

Design, implement, and automate infrastructure security controls across multi-cloud and containerized environments. Build secure IaC and guardrails (Terraform, Go), review cloud and data platform architectures, partner with engineering to embed security, advise senior stakeholders, and drive incident response and continuous security improvements.

Design, implement, and automate security configurations for corporate endpoints (macOS, Chromebooks, mobile), build automation and integrations, perform security reviews of enterprise systems, and collaborate with IT and engineering to integrate endpoint and SaaS security into company initiatives.

Sell security products and services through full lifecycle account management: strategic planning, pipeline management, relationship-building with clients and partners, coordinating internal resources, forecasting in Salesforce, mentoring junior sellers, and representing CDW at industry events to drive revenue and market presence.

Field-based technical pre-sales role designing and scoping security assessment, deployment, and advisory services. Collaborate with sales, delivery, and partners, author SOWs, maintain partner certifications, act as subject-matter expert across endpoint and security operations technologies, and drive territory strategy and enablement.

Monitor and analyze security events in Datadog, identify and investigate incidents, document and evolve incident response procedures, provide technical guidance, troubleshoot configuration/script issues, and work directly with customers on implementations and remote services.

Lead corporate security monitoring and detection operations: own strategy and maturity roadmap, manage analysts and threat hunters, improve detection coverage and alert quality, support incident investigations, maintain audit-ready documentation, and provide actionable security metrics to leadership and compliance stakeholders.

Lead corporate security engineering to define secure-by-default baselines, oversee vulnerability management, drive automation to prevent configuration drift, govern SaaS security, mentor engineers, and ensure alignment with CMMC 2.0 and NIST 800-53 while improving audit readiness.

Conduct research on mobile threats, analyze cyber campaigns, reverse engineer malware, produce intelligence reports, and collaborate with teams for threat detection.