Top Cyber Security Jobs in Buffalo, NY

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

The role involves managing the security incident response team, handling incidents, coaching team members, and improving security processes, aiming for operational excellence in threat response.

The Senior Security Engineer will design secure development lifecycles, integrate security tools, lead remediation of security issues, and mentor teammates, ensuring systems resilience and security across DraftKings.

The Security Analyst II will enhance Garner's security posture by monitoring threats, conducting risk analysis, ensuring compliance, and communicating effectively with stakeholders.

Lead planning, deployment, tuning, and operational support of CrowdStrike Falcon's AI/ML detection and response capabilities. Implement and troubleshoot AI-driven detection models, automation playbooks, API integrations, and threat-hunting for customers. Provide training, mentorship, and customer-facing collateral while optimizing detection efficacy and integrating Falcon into customers' security workflows.

The Senior Security Engineer will assess application security for AI systems, focusing on prompt injection techniques, threat modeling, and client training on AI security topics.

The Security Engineer will design, build, and enhance security tools and frameworks, analyze security challenges, and contribute to AI/ML security research. Responsibilities include software development, security code review, and technical communication.

As a Security Engineer, you will conduct security assessments, develop security tools, perform architecture reviews, and collaborate on advanced security research.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

Lead and grow an Infrastructure Security team securing cloud infrastructure, edge networks, and application delivery. Drive cloud security architecture, WAF/SASE/zero-trust implementations, PAM and secrets management, incident management and on-call response, KPIs/OKRs, cross-team partnerships, and continuous security process and tooling improvements.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

Lead and mature GitLab's security compliance program, expand certification portfolio (SOC 2, ISO, PCI, FedRAMP, etc.), drive automation and AI-enabled compliance workflows, manage auditors and cross-functional stakeholders, mentor a team, and improve metrics, reporting, and regulatory readiness to support business growth.

Lead and scale an AI Security incubation team to drive technical GTM, recruit and mentor principal AI security specialists, build repeatable POVs and sales playbooks, advise C-level customers on secure AI deployments (RAG, agents, prompt workflows), and channel field insights into product and engineering roadmaps while supporting high-value deals.

As a Sr. Product Security Engineer, you will focus on network security, identifying gaps, architecting solutions, and leading cross-functional security initiatives.

Manage and improve vulnerability management, asset visibility, and cloud security across hybrid and multi-cloud environments. Operate tools (Wiz, Rapid7), maintain asset inventories, triage and track vulnerabilities, coordinate remediation with Engineering/SRE/IT, support incident investigations and on-call rotation, maintain compliance evidence and runbooks, and contribute to program improvements and reporting.

The Staff Cloud Security Engineer will secure cloud infrastructure for Huntress, focusing on product security, risk management, and compliance for a SaaS platform. Responsibilities include collaborating with DevOps, managing vulnerabilities, threat modeling, and developing incident response strategies.

Lead and grow a team to drive maturity in Insider Risk, Data Protection/DLP, AI Security, and Federal Security. Own strategy, cross-functional programs, threat scenarios, and security investments while working with stakeholders to implement controls and scale capabilities.

Lead second-line IT risk oversight for technology, cyber, data and AI. Perform risk assessments, advise on controls and product launches, drive policy and remediation, support regulatory compliance, and report to executives and board on information security themes.

Lead customer trust and security governance: oversee contract reviews, security questionnaires, and escalations; partner with Legal, Sales, Product, and Procurement; develop templates, policies, playbooks, metrics, and awareness programs; and apply automation and AI to scale workflows and reporting.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

The Sr. Infrastructure Security Engineer is responsible for protecting patient data, enhancing cloud infrastructure security, and collaborating with engineering teams to implement effective security practices.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Run day-to-day marketing for AppSec, AI/ML Security, and Research & Engineering practices: produce technical content, own social and event presence, run demand-generation campaigns, enable sales, build analytics and attribution, and coordinate cross-practice coverage with engineering and GTM teams.