Top Cyber Security Jobs in Buffalo, NY

Lead cloud and cybersecurity engineering engagements: design and implement multi-cloud security architectures, detect and respond to threats, manage identity and access, enforce compliance baselines (SOC 2, ISO 27001, PCI, HIPAA), secure cloud infrastructure and DevSecOps pipelines, mentor staff, and develop AI-accelerated internal tooling and automation.

Manage and lead cybersecurity advisory engagements: implement GRC programs, assess ITGC and IT risk, develop remediation roadmaps, run incident response tabletop exercises, manage GRC platforms, conduct vendor risk reviews, develop policies/SOPs, mentor staff, and support business development.

Lead delivery of cybersecurity strategy and advisory engagements as the primary client contact. Conduct security and maturity assessments, risk analyses, program roadmaps, workshops, and executive presentations. Mentor junior staff, support scoping/proposals, collaborate with GRC and engineering teams, and contribute to practice development and business development activities.

Lead cybersecurity advisory engagements including building GRC programs, conducting compliance readiness and ITGC assessments, executing remediation roadmaps, directing incident response exercises, performing IT risk assessments, managing GRC platforms, and delivering client-facing recommendations and project management.

Build and operate Flox's security program: deploy and manage SIEM/SOC, harden AWS and Cloudflare, implement IaC/CSPM/SAST/SCA scanning, manage endpoint protection, secure the software supply chain, run incident response, and own identity and access controls.

Serve as part-vCISO and account manager: assess client security posture, design and customize security programs mapping controls to infrastructure, liaise with auditors, guide implementations, advise engineering on integrations, and communicate with stakeholders to ensure compliance and operational security.

Design, implement, and maintain a cross-platform endpoint security agent (Windows, macOS, Linux) using Go and JavaScript. Build low-level system automation, telemetry collection, secure agent-cloud communication, real-time threat detection, update mechanisms, and monitoring tools. Optimize performance, ensure multi-OS compatibility, and collaborate with security teams on detection rules and compliance checks.

Own integration, configuration, and output quality of security tooling; tune findings to reduce noise; design severity scoring, triage flows, and enrichment; build a security judgment layer; partner with engineering, product, and design; engage with customers; benchmark and contribute to open-source security tooling.

Design and implement security and privacy improvements across Tailscales codebase. Audit features for vulnerabilities, perform threat modeling and security analysis, drive remediation, and spend at least half your time writing code to build security features, defenses, and tooling.

Lead and scale the Email Security engineering team, own roadmap delivery, drive architecture for high-throughput distributed systems, partner with Product and Security, mentor engineers, and oversee on-call, incident response, and system reliability.

Assess and validate a high-volume Salesforce-to-AWS notification integration (S-Docs, VA Notify). Build and deploy integration components, implement DevSecOps (SAST/DAST/SCA), automate secrets/configuration, enable monitoring and error handling, and document architecture, risks, and compliance for federal ATO/RMF alignment.

Own and implement the platform's security and compliance posture (SOC 2, PCI, HIPAA). Design and automate controls and evidence pipelines, secure PII and tenant isolation across a multi-tenant platform, harden AI/LLM systems, partner with domains and CTO, and write production code to make compliance continuous and auditable.

Serve as a senior platform consultant and security architect advising engineering teams on secure-by-design platforms. Lead threat modeling, design large-scale cloud-native microservices, embed CI/CD security, drive Zero Trust and IAM strategies, mentor engineers, influence architecture and delivery, and communicate security posture to technical and business leaders.

Secure and harden cloud infrastructure, identity systems, and internal AI/agentic tooling. Build security automation, detection pipelines, and IaC controls (Terraform). Investigate incidents, query logs (Athena, CloudTrail Lake), design IAM policies, support secure customer deployments, research cloud/AI security threats, and produce runbooks and playbooks to scale security practices.

Develop, implement, and maintain security policies and controls mapped to NIST CSF; manage policy and compliance workflows in ServiceNow IRM; perform risk assessments and gap analyses; support audit readiness and vendor assessments; produce dashboards and reports; lead security awareness and AI governance training; mentor junior analysts; collaborate with IT, risk, compliance, and business teams to drive remediation and policy adoption.

Support VA Health portfolio cybersecurity across projects: lead ATO/ATC activities, develop security/privacy artifacts, review controls against NIST SP 800-53, perform scans and remediation, update ServiceNow/CAM and GRC tools, prepare audit documentation, and coordinate with stakeholders to identify and mitigate risks while enabling agile application development and operations.

Design, implement, and improve security architecture across AWS and Azure. Harden identity and privilege models, integrate CNAPP/CSPM and AppSec into SDLC, drive vulnerability and patch management, enable SIEM telemetry, implement IAM/PAM/least-privilege, and promote zero trust across engineering and product teams.

Sell IonQ's quantum-security solutions to SLED accounts by identifying and closing opportunities around quantum-safe encryption and post-quantum readiness. Manage full sales cycle, engage CISOs and IT leaders, collaborate with technical teams, maintain pipeline in CRM, and represent the company at industry events. Drive strategic, solution-oriented deals in complex, consultative environments.

Lead cross-functional security initiatives: automate security tasks and incident response, manage HITRUST/SOC2/PCI assessments and remediation, evaluate and optimize security tools, secure software development (GitHub, code scanning, AI code), respond to audits, deliver training, and investigate and remediate security incidents to advance program maturity.

Lead end-to-end onboarding and enterprise deployments of Clearly AI, integrating with Jira, ServiceNow, Confluence, and GitHub. Configure review workflows, run structured project management, optimize threat modeling/privacy/vendor-risk processes, translate deployment friction into product improvements, triage support, and create onboarding documentation to drive production adoption and measurable security outcomes.

Lead multiple product security engineering teams to design, implement, and operate security controls across Allstate's technology ecosystem. Architect secure digital products, drive DevSecOps, CI/CD, cloud-native and application security best practices, integrate IAM/SIEM/vulnerability management, influence stakeholders, manage security product roadmaps, mentor engineers, and own production security KPIs and compliance.

Own and scale Mozillas web bug bounty program, triage and validate incoming vulnerability reports, drive remediation with engineering teams, perform targeted JavaScript and Python code reviews, collaborate with SIRT on incidents, and develop tooling to improve program efficiency and insights.

Manage and grow a security engineering team responsible for product and platform security, embedding security into the SDLC, running red team/adversarial testing, performing hands-on web application pentesting, threat modeling, secure-coding guidance, and defining AI security guardrails.

Lead design, implementation, and management of security infrastructure across on-prem, cloud, and hybrid environments. Drive incident response, threat detection tuning, vulnerability assessments, risk and compliance (HIPAA, PCI-DSS, NIST, ISO 27001), security policy development, and security training. Collaborate with IT, DevOps, legal, and procurement to integrate security into SDLC and vendor selection.

Build and operate an internal Red Team to continuously find vulnerabilities across protocol, consensus, bridges, and execution clients. Develop Rust-based fuzzers and custom security tooling, simulate economic attacks on testnet, analyze game-theoretic risks (MEV, staking), and partner with engineering teams to review critical architecture and mitigate exploits.