Top Senior Cyber Security Jobs in Buffalo, NY

Leads cybersecurity, network security, and site reliability engineering across manufacturing and engineering environments. Designs secure infrastructure, manages Fortinet firewalls, Arista networks, VMware platforms, servers, SAN storage, backups, and disaster recovery. Oversees vulnerability management, incident response, compliance, infrastructure hardening, monitoring, troubleshooting, documentation, automation, and production incident escalation. Provides technical leadership, mentoring, and security architecture guidance while supporting global manufacturing operations.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Leads Ferguson’s enterprise Security Engineering function, including vulnerability management, DevSecOps, penetration testing, application and cloud security, endpoint and email protection, edge security, configuration management, and security tooling. Builds and develops technical teams, establishes roadmaps and metrics, prioritizes risk-based remediation, oversees vendors and service operations, and communicates security posture and investment needs to executives and technology partners.

Leads enterprise cybersecurity architecture for AI, cloud, hybrid, and on-premises environments. Designs secure AI architectures, cloud foundational controls, zero-trust identity models, API and data protections, and secure LLM, RAG, agent, and MCP integrations. Establishes governance, reusable security patterns, model-usage procedures, compliance controls, and audit readiness across AWS and Azure. Advises executives and technical teams, mentors security professionals, and drives secure cloud migrations while addressing AI/ML risks such as adversarial attacks, model poisoning, data drift, bias, and data leakage.

Lead product vision and strategy for security operations services, defining outcomes for managed investigation, response, threat hunting, and advisory services. Partner with customer security ops, product, and marketing teams to deliver AI-driven, automated features, represent Zscaler to customers, and drive measurable security outcomes and operational alignment.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

Own day-to-day cybersecurity, identity and access hygiene, compliance readiness, and infrastructure security across a multi-site healthcare environment. Administer Microsoft security tools, MFA, Conditional Access, SIEM, email protection, patching, backups, firewalls, and network controls. Lead SOC 2 evidence collection, security reporting, remediation tracking, third-party access reviews, and audit preparation. Direct and verify outsourced IT and offshore resources, enforce SLAs, supervise network work, and communicate risks to nontechnical leaders.

Provides multi-discipline security support for Special Access Programs, SCI, and collateral activities. Responsibilities include enforcing NISPOM and SAP policies, identifying vulnerabilities and risks, supporting operations security, conducting facility compliance reviews, tracking corrective actions, delivering security briefings, and investigating classified-information losses or compromises. The role also develops procedures, performs damage assessments, and coordinates security education and awareness programs.

Design and assess secure systems for Microsoft business operations: perform threat modeling and security design assessments, drive risk-based architecture decisions, communicate risk, mentor teammates, and ensure compliance with security policies and screenings.

Lead complex cloud, identity, supply-chain, and nation-state security investigations. Perform root-cause analysis, threat hunting, blast-radius assessment, attribution, and incident response across Microsoft telemetry. Operationalize intelligence into queries, detections, playbooks, and platform fixes; investigate adversary tradecraft; use AI-assisted tooling; produce executive-ready reports; and mentor peers in advanced investigations, forensics, and reverse engineering.

Maintain and improve cybersecurity across Azure Cloud and on-premises environments. Monitor and tune security alerts, manage vulnerability scanning and remediation, conduct threat intelligence analysis, support incident response, perform risk assessments and threat modeling, and implement security controls and configurations. The role also supports regulatory compliance, security documentation, cross-functional initiatives, and on-call response to security alerts.

Lead product security initiatives for cloud, AI, and enterprise platforms. Responsibilities include threat modeling, security architecture reviews, identifying systemic weaknesses, developing secure-by-design guidance and reference architectures, advising engineering and product leaders, leveraging AI and automation for scalable security assessments, investigating emerging attack paths, mentoring teams, and improving security review methodologies and tooling.

Act as senior cybersecurity advisor to executive business and technology leaders, align security strategy with business objectives, identify and mitigate risks, embed security-by-design across initiatives, influence prioritization of controls and investments, ensure compliance with regulatory/internal standards, and communicate metrics and risk to non-technical stakeholders.

Provides technical leadership for enterprise AI security, designing secure AI platform architectures, vetting frameworks, identity and posture management for AI agents, and preventative security guardrails. The role requires building scalable security systems with Python, Go, or Java, managing infrastructure as code, addressing cloud and container security, mentoring engineers, and advising leadership on AI security risks.

Lead design and execution of information security controls, risk assessments, and mitigation plans. Serve as SME on security tools and architectures, monitor and respond to threats, support security audits, and present recommendations to stakeholders. Collaborate cross-functionally to ensure compliance with policies and strengthen the company’s security posture.

Support operation, accreditation, maintenance, and auditing of classified information systems. Prepare and maintain RMF/ATO documentation, perform continuous monitoring, vulnerability scanning, patching, and configuration management. Coordinate with security stakeholders, maintain IS inventory, assist with assured file transfers, and ensure compliance with DAAPM, NISPOM, DISA STIGs, NIST guidance, and related policies.

Serve as a senior security solution architect advising enterprise customers on modern, cloud-native Microsoft security architectures. Design and validate solutions using Microsoft security products, remove technical blockers, act as SME on complex deployments, gather customer insights to influence product roadmap and map solutions to business outcomes, and support large-scale security and compliance projects.

Serves as the endpoint security subject-matter expert for support, Sales Engineering, and Customer Success. Diagnoses complex Windows and macOS endpoint issues, analyzes telemetry and logs, troubleshoots integrations with EDR, DLP, and MDM products, and provides prioritized customer recommendations. Partners with Engineering and QA on defect investigation and validation, maintains lab capabilities, and creates runbooks and documentation. The role also enables field teams to explain endpoint findings and improve customer outcomes.

Own Tribe’s corporate security, compliance, AI governance, and client-facing security programs. Lead SOC 2 and future certification efforts, enterprise security reviews, risk management, security controls, incident response, vendor risk, and Trust Center operations. Establish governance for AI agents, assistants, model providers, and subprocessors while partnering with engineering on architecture reviews, threat modeling, secure SDLC, data flows, and production readiness. Translate customer requirements into scalable security controls and operating processes.

Identify and validate AI opportunities across IT operations and cybersecurity, including service management, threat detection, infrastructure monitoring, identity access, endpoint protection, and vulnerability management. Translate operational challenges into structured use cases, assess business value and risk, document data and integration requirements, promote responsible AI, facilitate stakeholder workshops, build internal champions, and monitor emerging AI capabilities while supporting security compliance and change management.

Serve as the senior network-security subject-matter expert for support, sales engineering, and customer success. Review firewall rules, segmentation, controls, and product findings; troubleshoot integrations across enterprise network-security platforms; diagnose issues using packet captures, flow data, logs, and protocol behavior; and provide actionable root-cause guidance. Partner with Engineering and QA on defects and fixes, maintain network test capabilities, and author runbooks and documentation. Coach sales engineers and help harden the product through escalations and feedback.

Designs and leads cloud and application security solutions across DNS, HTTP servers, microservices, container infrastructure, and CI/CD pipelines. Defines security requirements, controls, encryption, access management, risk assessments, testing standards, and compliance measures. Analyzes security data and risks, integrates network security controls, develops scalable solutions, leads technical working groups, and communicates findings and recommendations to technical stakeholders, customers, and third parties.

Optimize Microsoft security operations by tuning Sentinel detections, reducing false positives, designing alert and incident-response automation, integrating Defender products and third-party telemetry, improving SOC workflows, and developing investigation playbooks, runbooks, and documentation. This hands-on 3–4 month contract requires strong Sentinel and Defender expertise, advanced KQL, Logic Apps, SOAR automation, SIEM engineering, and security operations optimization experience.

Build and maintain cloud security improvements across AWS/GCP, Kubernetes, and CI/CD environments. Design detection and response capabilities using SIEM, EDR/MDR, cloud-native detections, and CNAPP tools. Investigate and respond to security incidents end to end, develop detection logic and playbooks, and create security tooling and automations using Python, Terraform, and infrastructure-as-code. The role also supports endpoint security and secure DevOps practices.

Leads the global Network Security and Load Balancing platform team, setting strategy, architecture, automation, and operational direction. Oversees firewalls, proxies, load balancers, cloud security, Zero Trust, and micro-segmentation. Manages audits, regulatory engagements, vulnerability remediation, risk reporting, product backlogs, and stakeholder communications. Partners with cybersecurity, architecture, application, compliance, and business teams to maintain secure, compliant network platforms.