Top Cyber Security Jobs in Buffalo, NY

Own the full lifecycle of enterprise cybersecurity accounts, from deployment planning and integrations through adoption, renewal, and expansion. Serve as the primary technical contact for security, engineering, and IT stakeholders. Guide vulnerability management workflows, cloud and scanning-tool integrations, remediation prioritization, and compliance reporting. Translate customer feedback into product improvements and create scalable onboarding playbooks.

Supports application security and information systems for a large healthcare organization. Analyzes user requirements, develops and implements system solutions, manages moderately complex projects, coordinates project teams, establishes system procedures, and provides guidance to less experienced staff. Collaborates with internal teams, vendors, and stakeholders across multiple facilities. Epic accreditation or certification is required, along with industry experience and a related bachelor's degree.

Lead product strategy, roadmap, and delivery for AI-native security experiences. Partner with engineering, security research, design, and data science teams to translate emerging technologies into customer value. Establish operational readiness practices covering release governance, risk management, quality reviews, incident learning, executive readiness, onboarding, adoption, and partner success. Drive complex cross-organizational programs and ensure scalable, reliable launches and measurable customer outcomes.

Provides L1 technical support for enterprise customers using cloud email and SaaS security platforms. Resolves configuration, API, integration, false-positive, and threat investigation issues through troubleshooting and log analysis. Communicates root causes and recommendations, partners with Engineering and Product, supports onboarding, maintains knowledge documentation, and identifies recurring customer issues. Requires 4+ years of cybersecurity, SaaS, or enterprise technical support experience, strong email security and cloud ecosystem knowledge, API troubleshooting skills, and excellent communication.

Own FAR.AI’s internal IT and security function, including accounts, devices, identity and access management, onboarding, offboarding, office networking, support, endpoint hardening, data protection, governance, and vendor risk. The role will remediate security gaps using threat modeling, automate self-service infrastructure, partner across teams, communicate and manage change, and hire and lead an IT Coordinator.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

The VP and CISO will establish and lead the enterprise information security program, define security strategy and roadmap, oversee security architecture, policies, compliance, risk management, third-party partners, and security operations. The role advises executives and the Board, manages distributed security teams, engages regulators and auditors, and translates cybersecurity risks into strategic business decisions.

Leads company-wide security governance, compliance, internal IT, risk management, audits, access controls, vendor security, cloud technology standards, incident preparedness, and AI governance. Manages a small team and service providers while remaining hands-on with security and IT operations. Owns SOC 2 Type II and ISO 27001 programs, supports customer security assurance, and establishes ownership, service, and sourcing frameworks across the company.

Supports federal cybersecurity governance, risk management, Authority to Operate processes, continuous monitoring, vulnerability remediation, incident coordination, and compliance with NIST, FISMA, DHS, and ICE requirements. Maintains security plans, risk registers, POA&M records, and audit artifacts while advising leadership and coordinating with system owners, project managers, vendors, and technical teams. The role provides advisory and validation support rather than system configuration or operational control.

Leads R1’s enterprise security technology strategy and execution, overseeing security architecture, engineering, IAM, cloud security, threat and exposure management, offensive security, AI security, incident preparedness, and security transformation. Partners with executive and cross-functional leaders, manages budgets and investments, develops senior talent, and presents security risk and performance metrics. The role requires modernizing security capabilities across a complex, regulated organization while supporting growth, integrations, acquisitions, and new ventures.

Leads cybersecurity engineering and Risk Management Framework implementation for government systems. Responsibilities include resolving cybersecurity risks, reviewing security testing and validation documentation, developing technical architectures and requirements, supporting audits and design reviews, validating security controls, hardening systems, and securing system interconnections. The role requires extensive cybersecurity experience, DHS and FISMA High expertise, technical leadership, U.S. citizenship, and public-trust-equivalent background eligibility.

Own and implement application security across the software development lifecycle for multiple product lines. Define security controls, validation gates, standards, and guardrails; conduct architecture reviews; enhance CI/CD security; triage SAST, SCA, and penetration-testing findings; support incident response; maintain FedRAMP and CJIS compliance; and represent security practices in audits and customer engagements.

Ten-week technology risk internship supporting data aggregation, risk analysis, dashboards, control testing, risk assessments, evidence collection, remediation recommendations, and reporting automation. Interns will analyze ServiceNow, GRC, incident, and control data; identify emerging risk trends; assist with documentation and stakeholder coordination; and apply AI prompt engineering to synthesize datasets. The program includes mentorship, leadership exposure, professional development, and potential conversion to a full-time technology and security development program.

Supports cybersecurity, security engineering, IAM, resilience, risk management, control reviews, audits, security monitoring, incident readiness, access governance, documentation, and regulatory research. The 10-week internship provides hands-on exposure to enterprise security architecture, authentication initiatives, cybersecurity frameworks, business continuity, and security operations while developing collaboration, reporting, and project-management skills.

Leads 24/7 security operations for federal Oracle systems, including SIEM configuration, threat intelligence, log analysis, digital forensics, incident response, security posture assessments, and audit-log retention. Coordinates with ISSOs on RMF and authorization activities, develops detection rules and playbooks, reports SOC metrics, and manages operational staffing, coaching, escalations, remediation, and compliance evidence.

Leads enterprise information security architecture strategy and design across network, application, data, identity, on-premises, hybrid, and cloud environments. Assesses risks, develops mitigation strategies, integrates advanced security technologies, automates security capabilities, and establishes identity and access management best practices. Influences stakeholders, drives organizational change, mentors technical teams, and ensures security initiatives align with business objectives and regulatory requirements.

Lead development of security enforcement integrations that warn or block unsafe AI artifact installations, serve sanitized alternatives, and record audit events. Build reliable event-driven backend systems with queues, webhooks, idempotency, retries, back-pressure, approval flows, dry runs, audit logs, and rollback mechanisms. Integrate third-party security, infrastructure, and identity APIs, with potential future work on fleet-wide revocation controls and security platform integrations.

Leads information security architecture and program initiatives across IT and business projects. Provides security consulting, develops enterprise data, network, and application protection requirements, conducts threat analysis, vulnerability assessments, penetration testing, and remediation planning. Researches emerging threats and technologies, supports control testing and incident response, and guides security team members. Requires extensive information security leadership, application and network security expertise, secure architecture knowledge, and strong communication skills.

Serve as a senior security solution architect advising enterprise customers on modern, cloud-native Microsoft security architectures. Design and validate solutions using Microsoft security products, remove technical blockers, act as SME on complex deployments, gather customer insights to influence product roadmap and map solutions to business outcomes, and support large-scale security and compliance projects.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Perform deep security analysis of endpoint products and sensors: threat modeling, source-code review, exploit-style testing (including kernel components), reproduce/validate bug bounty findings, collaborate with developers to fix vulnerabilities, and build tooling/automation to improve security workflows.

Lead technical marketing for Falcon Secure Access by creating demos, labs, workshops, and technical content that translate secure access, browser security, Zero Trust, and AI security capabilities into market-facing messaging, sales enablement, and go-to-market strategy. Collaborate cross-functionally to drive adoption and competitive differentiation.

Perform application security assessments across CrowdStrike products: threat modeling, code review, penetration testing, and secure design guidance. Build automation and tooling, respond to bug bounty reports, and collaborate with engineering to remediate defects and harden cloud-native, containerized applications.

Leads end-to-end cybersecurity execution across Danaher's global Diagnostics operating companies. Responsibilities include managing distributed security teams, cyber risk and vulnerability programs, architecture reviews, assurance and certifications, connected medical device product security, data and AI security, M&A cyber integration, application security, and OT/manufacturing security. The role serves as the senior cybersecurity leader for the platform, influencing executives and operating companies while driving regulatory compliance, continuous improvement, and global security initiatives.

Designs, deploys, and manages enterprise cloud security solutions across AWS and Azure. Responsibilities include automating security controls, managing AWS WAF and CDK rules, improving policies, patching vulnerabilities, implementing DevSecOps practices, assessing cloud applications and APIs, monitoring security posture, analyzing logs, triaging issues, and supporting compliance and risk initiatives.