Top Cyber Security Jobs in Buffalo, NY

Partner with engineering, compliance, and security teams to embed application security into the SDLC: triage static/SCA alerts, advise on OWASP Top 10 remediation, maintain developer playbooks and training, track security metrics and evidence for audits, and help shape AI governance and GenAI-safe workflows.

This intern role in Federal Security Operations focuses on cybersecurity, project tracking, and maintaining relationships with customer stakeholders in a mission-driven environment.

The Staff Product Security Engineer will enhance security in product development, conduct threat modeling, review code, automate processes, and advise on security requirements.

The AI Security Consultant will enhance security programs, secure AI systems, engage in technical analysis, and report findings. They will also contribute to thought leadership while ensuring high-quality service delivery.

Perform 24/7 SOC monitoring and incident response across networks, endpoints, cloud and SaaS; triage, investigate, and remediate incidents; collaborate with vulnerability management, FedRAMP, and engineering teams; refine detection/playbooks; maintain incident documentation and SOC processes; support FedRAMP-related security and privacy responsibilities and periodic background investigations.

Lead and grow a security engineering team to design and operate cloud-native security controls, drive DevSecOps practices, conduct threat modeling and incident response, partner cross-functionally on security roadmaps, and ensure compliance with frameworks (NIST, SOC 2, ISO, etc.). Responsible for vulnerability management, identity and access controls, observability/SIEM, and security automation.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

Lead GameChanger's Information Security and Technology organization, owning strategy, roadmaps, and teams across product/cloud/AI security, security operations, GRC, vulnerability management, and internal IT. Partner with engineering, product, legal, and parent-company security to manage risk, incident response, and secure adoption of AI while supporting a remote-first workforce.

Lead and grow a remote Security Detection & Response team, build detection engineering and observability systems, drive telemetry onboarding, Panther and MITRE-aligned detections, Python automation, CI/CD workflows, and AI-assisted triage. Own incident response, investigations, cross-functional collaboration, and measurement of detection effectiveness.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

Guide Falcon Complete customers to improve security posture by assessing environments, recommending and documenting remediations, coordinating with internal teams and support, producing service reports, and resolving customer issues per SLAs.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Lead federal cloud security and compliance efforts to achieve and sustain ATOs. Implement and automate FedRAMP/IL-5/RMF controls, manage continuous monitoring, coordinate 3PAO audits, drive cloud security architecture, oversee change control/SCRs, and lead incident response and POA&M remediation using AI-enabled automation and monitoring across high-security GovCloud environments.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

Lead the Application Security Practice, overseeing team performance and business growth while delivering high-quality security consulting services and fostering innovation through AI integration and research contributions.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

Lead planning, deployment, tuning, and operational support of CrowdStrike Falcon's AI/ML detection and response capabilities. Implement and optimize ML models, develop automation playbooks and Falcon API integrations, troubleshoot AI-related issues, support incident response and threat hunting, and deliver customer workshops and collateral. Up to 25% travel.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Assess Falcon environments, recommend and document security remediations, troubleshoot incidents with support and internal teams, produce service reports, and ensure customers meet Falcon Complete standards and SLAs.

Serve as a Falcon Complete advisor monitoring customer security posture, assess environments, recommend remediations, coordinate with internal teams and support, produce reports, and ensure alignment with CrowdStrike standards and SLAs to improve threat detection and incident response.

Lead competitive intelligence for CrowdStrike's cloud security portfolio, analyzing competitors' technical capabilities and market positioning. Provide deal support, win/loss analysis, and actionable guidance to Product, Sales, and senior leadership. Develop competitive materials, readiness plans, and recommendations to influence product strategy and GTM. Work autonomously and collaborate cross-functionally globally.

The Network Security Architect will assess network security, guide teams, enhance security policies, design network solutions, and mentor engineers while aligning with a Zero Trust Strategy.

Sell Zscaler's data security portfolio (DLP, CASB, DSPM) to commercial accounts. Act as the specialist for customers and partners, build account-based strategies, collaborate with solution engineers and sales leadership, and close complex deals with stakeholders from technical practitioners to C-suite.

Lead product vision and strategy for security operations services, defining outcomes for managed investigation, response, threat hunting, and advisory services. Partner with customer security ops, product, and marketing teams to deliver AI-driven, automated features, represent Zscaler to customers, and drive measurable security outcomes and operational alignment.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.