Top Cyber Security Jobs in Buffalo, NY

Hands-on senior security engineer responsible for designing and automating security controls across cloud and application stacks. Lead implementation of PAM/JIT, vulnerability management, SAST/DAST/SCA integration, security automation (Python/Go/Terraform/Tines), endpoint and DLP protections, cloud network hardening, key management, SIEM correlation, and developer-focused security tooling and reviews to protect PHI and advance security posture.

Design, implement, and automate cloud security controls (primarily AWS, with GCP work) using code (Python, Go) and IaC (Terraform). Build authorization and JIT access systems, harden containers and CI/CD pipelines, integrate data classification with access controls, automate security operations and incident response, and partner with engineering to embed HIPAA-compliant, secure-by-design practices.

Lead and remain hands-on for security engineering and operations: design and harden controls, build automation and detection, manage MDR, run incident response, and own vulnerability management, metrics, and cross-functional security integration.

Own and operate the organisation's accounts, access, and cloud subscriptions; set practical security standards; identify and remediate risks hands-on; manage onboarding/offboarding access across core platforms; partner with engineers and researchers to ensure secure, usable controls.

Lead and build vdBA's Managed Detection and Response service line for life sciences: own roadmap, tooling, SLAs, incident response, compliance (SOC 2/HITRUST/ISO), client engagements, and scale the security operations team while integrating security into delivery and sales.

Design, build, and harden security-critical systems: manage KMS and key management, protect PHI/PII, secure storage and tenant isolation, embed security in SDLC and CI/CD, lead threat modeling, and improve security scanning and compliance.

Design, build, and maintain automated API and security test frameworks. Validate authentication, authorization, rate limiting, and error handling. Conduct fuzzing, token validation, access control testing, and integrate tests into CI/CD. Analyze failures, test integrations, ensure API contract adherence, and mentor automation engineers to improve coverage and reliability.

Lead technical discovery and solution design for enterprise identity and privileged access management opportunities. Build reference architectures, guide PoC/PoV engagements, present to executive and technical stakeholders, collaborate with Sales Engineering, Product and Sales leadership, and represent Keeper at customer and market events while staying current on identity security landscape.

Lead Datadog-first security observability and detection engineering: design, scale and tune Datadog Cloud SIEM, log pipelines, detection rules and telemetry. Correlate signals across EDR, cloud and identity, automate detection-as-code, reduce false positives, and build dashboards, monitors and workflows in partnership with Security Ops, SRE and Engineering.

Operate and improve security operations and enterprise controls: incident response, playbooks, endpoint/SaaS/cloud tooling, remediation coordination, access governance, compliance evidence, and automation to reduce risk.

Serve as the ISSO for assigned systems, maintain system security documentation (SSPs, control narratives, POA&Ms), support FedRAMP/GovRAMP/DoD authorization and continuous monitoring, coordinate remediation and assessments with engineering and auditors, support incident response and audit readiness, and track security metrics and evidence.

Lead and own the enterprise SSPM program: implement and manage SSPM platform, onboard SaaS apps, tune controls, integrate with SIEM/SOAR/ITSM/identity, perform threat modeling and risk assessments, drive remediation, support compliance mapping, report metrics, and partner across cyber, IT, risk, and business teams to reduce data exposure and improve SaaS security posture.

Lead design, deployment, and scaling of enterprise DLP across cloud, endpoint, SaaS, and network with a focus on AI-driven automation. Build automated classification, remediation, and workflows, integrate DLP with SIEM/SOAR/identity/cloud, develop policies for regulatory compliance, mentor engineers, and present program insights to leadership.

Lead security assessments and integrations for mergers & acquisitions, develop risk-based mitigations, deploy security tools, support vulnerability remediation and pen testing, advise executives and stakeholders, and produce documentation and metrics across identity, cloud, endpoint, and monitoring domains.

Lead and scale the enterprise application security program, embed secure SDLC and DevSecOps practices, integrate SAST/DAST/SCA into CI/CD, run assessments and remediation, advise engineering on architecture and high-risk issues, build governance/metrics, represent AppSec for audits, and mentor application security engineers.

Design and implement automated cloud security controls across multi-cloud environments. Integrate security into CI/CD pipelines, harden infrastructure and IaC, manage IAM and secrets, advance container and workload security, protect AI/ML systems and data, and support monitoring, detection, and incident response for cloud applications.

Lead and improve ZODL security posture, manage incident response, coordinate external audits, advise staff on operational and personal security, prioritize mitigations, recruit security talent, and collaborate with engineering and research to secure Zcash software and protocols.

Perform advanced offensive security work: conduct complex penetration tests, teach and integrate offensive tradecraft into the AI platform, harden product and company defenses, and collaborate with core engineers to build and ship capabilities that automate red-team techniques.

Design and integrate diverse cybersecurity and IT tools into an AI engine, ensure common data/function models, advise on autonomous security analysis, and own corporate security posture for endpoints, cloud, and build pipelines.

Lead and execute OT/IoT security assessments, design and implement OT security architectures, perform technical testing, produce remediation recommendations and documentation, and guide organizational change for energy/water/manufacturing clients.

Own product security across the SDLC: threat modeling, secure design reviews, application security testing (code review, SAST/DAST), supply-chain/dependency hardening, CI/CD security, and building automated security tooling and guardrails while partnering with engineering and product.

Lead security engineering for an AI-native cybersecurity product: architect product security, build and evolve operational security and incident response, collaborate with ML engineers to integrate security into AI agents, implement protections and automation, and represent Cogent externally through writing and speaking.

Own and harden corporate security for endpoints, identity, and SaaS. Implement Zero Trust and device-trust patterns, build automation and tooling, run detection/response for enterprise systems, and serve as the internal security SME for corporate workflows.

Lead cloud and cybersecurity engineering engagements: design and implement multi-cloud security architectures, detect and respond to threats, manage identity and access, enforce compliance baselines (SOC 2, ISO 27001, PCI, HIPAA), secure cloud infrastructure and DevSecOps pipelines, mentor staff, and develop AI-accelerated internal tooling and automation.

Manage and lead cybersecurity advisory engagements: implement GRC programs, assess ITGC and IT risk, develop remediation roadmaps, run incident response tabletop exercises, manage GRC platforms, conduct vendor risk reviews, develop policies/SOPs, mentor staff, and support business development.