Top Cyber Security Jobs in Buffalo, NY

Leads cybersecurity solution sales for enterprise and small-to-medium business customers. Builds security transformation strategies, identifies and qualifies opportunities, develops pipelines, conducts consultative conversations, and drives complex cloud solution deals through closure. Partners with internal teams and channel partners on proposals, account planning, forecasting, competitive strategy, events, and customer outcomes. Serves as a cybersecurity subject matter expert, mentors colleagues, and supports customer adoption of AI, cloud, and security solutions.

Develop and evaluate backend security coding tasks for AI systems. Responsibilities include implementing backend features, fixing bugs, refactoring code, optimizing performance, identifying and remediating vulnerabilities, conducting security-focused code reviews, and creating deterministic automated tests and verifiers. The role requires strong backend engineering, application security, debugging, testing, algorithms, and software architecture skills. Work is remote, flexible, part-time, and contractor-based.

Leads implementation, administration, and support of enterprise Cisco ISE and network access control solutions. Designs authentication, authorization, device profiling, posture assessment, guest access, network segmentation, and Zero Trust capabilities across wired, wireless, VPN, and cloud environments. Troubleshoots complex access and certificate issues, manages integrations and lifecycle activities, develops automation, supports cybersecurity projects, establishes standards and controls, partners with infrastructure teams and vendors, and mentors junior engineers.

Lead and own the enterprise SSPM program: implement and manage SSPM platform, onboard SaaS apps, tune controls, integrate with SIEM/SOAR/ITSM/identity, perform threat modeling and risk assessments, drive remediation, support compliance mapping, report metrics, and partner across cyber, IT, risk, and business teams to reduce data exposure and improve SaaS security posture.

Leads enterprise security architecture for commercial banking and payments, developing secure, scalable strategies across cloud, infrastructure, applications, data, and security platforms. Establishes architecture standards and reference patterns, embeds security into software development and CI/CD, advises on regulatory and risk requirements, and guides cloud modernization, identity, API, container, and data security initiatives. Partners with architects, engineering, DevOps, SRE, security, business, and executive stakeholders to influence technology decisions in a highly matrixed organization.

Customer-facing Cloud Solution Architect driving security transformation on Azure and Microsoft 365. Design and implement security architectures (Identity, Threat Protection, Cloud Security), run design sessions, perform hands-on evaluations of Defender, Sentinel, and Azure AD, and influence product and engineering teams to improve customer security posture and adoption.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.

Own the strategy, roadmap, delivery, and lifecycle of enterprise data security products. Lead data governance, discovery, classification, DLP, access governance, compliance, and secure-by-design capabilities. Manage backlogs, Agile delivery, KPIs, stakeholder communication, and risk reduction outcomes while integrating AI to improve security workflows and productivity.

Leads architecture and implementation of Microsoft Red Team visibility, telemetry, monitoring, detection, alerting, deconfliction, and operational security capabilities. Designs scalable services and data pipelines, maintains authoritative operational asset inventories, identifies systemic security gaps, and drives durable engineering solutions. Provides hands-on technical leadership, architecture reviews, debugging, incident response, mentorship, and cross-organizational influence while enabling authentic Red Team operations with strong defensive visibility and control.

Own corporate detection and response, incident response, endpoint security, identity and SaaS security, Google Workspace governance, and corporate-to-production monitoring. Build LLM-driven security triage with measured evaluation, automate enforcement through vendor APIs, improve detection fidelity, and partner with engineering to ship security improvements. Manage Mac fleet security, phishing-resistant authentication, access reviews, DLP, OAuth governance, and containment playbooks.

Engineer and maintain enterprise network security platforms across on-premises and cloud environments. Design firewall and network security solutions, troubleshoot complex connectivity and security issues, and automate infrastructure operations using scripting, APIs, Infrastructure as Code, configuration management, and CI/CD pipelines. Support platform upgrades, vulnerability remediation, monitoring integrations, validation processes, and modernization initiatives while collaborating with network, cloud, application, and security teams.

Lead engineering for enterprise network security platforms, including firewall infrastructure, Infrastructure as Code, CI/CD pipelines, Ansible automation, APIs, and scripting. Troubleshoot complex network, cloud, and security issues; establish engineering standards; improve reliability and scalability; manage platform upgrades and vulnerability remediation; and provide technical leadership across engineering, networking, application, cloud, and security teams.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audit programs. Author system descriptions and policies, manage risk treatment plans, track remediation, support internal audits, and partner with Engineering, Legal, Privacy, and Product to drive control ownership and audit readiness.

Maintain and mature Mozilla's ISMS, support ISO 27001 and SOC 2 Type 2 audits, author compliance narratives, track remediation, lead policy program, scale compliance for products, and partner with cross-functional teams to drive control ownership and audit readiness.

Lead enterprise security operations, resilience, incident response, threat intelligence, cloud security, IAM, and risk management. Serve as deputy to the CISO and primary incident commander while advising executives on cyber risk. Build and scale multidisciplinary security teams, modernize cloud-native defenses, embed security-by-design across products and AI/ML systems, and establish metrics-driven governance, automation, regulatory alignment, and business-focused security strategies.

Build and scale platform security through architecture reviews, threat modeling, IaC hardening, IAM improvements, Kubernetes security, and disaster recovery exercises. Develop automation for detection, response, compliance, onboarding, access anomaly detection, and self-service security posture checks. Investigate incidents, track root-cause remediation, support SOC 2 evidence collection, and collaborate closely with software engineers on secure development and incident response.

Supports the security and compliance program by assessing security controls, evaluating compliance with SOC 2, ISO 27001, PCI DSS, HIPAA, and other frameworks, collecting audit evidence, performing control testing, tracking remediation, and reviewing technical documentation. Partners with engineering, security, business teams, and system owners to identify and resolve compliance gaps across cloud and infrastructure environments.

Conduct penetration tests across infrastructure, networks, web and mobile applications, and cloud environments. Perform application and cloud security testing, simulate adversary techniques, develop custom security tools, document vulnerabilities, validate remediation, and support HIPAA, SOC 2, and PCI DSS compliance. Collaborate with engineering and product teams, track emerging threats, and contribute to purple-team exercises, tabletop events, and security training.

Lead enterprise security architecture across cloud, application, infrastructure, identity, data, and third-party environments. Develop security principles, standards, patterns, and controls; review designs; conduct threat modeling and risk assessments; guide secure-by-design implementations; and advise technical and business stakeholders. The role also supports regulatory compliance, evaluates security technologies, and strengthens organizational security practices.

Manages cybersecurity compliance and authorization for Air Force NIPR systems. Responsibilities include developing and maintaining system security plans, supporting RMF accreditation, conducting audits and inspections, managing POA&Ms, STIGs, IAVM compliance, continuous monitoring, FISMA requirements, security testing, and ATO activities. The role also provides tactical security guidance, assesses technology risks, and coordinates cybersecurity activities across multi-contractor teams and cloud and on-premises environments.

The VP of Security will lead Engine’s security strategy, engineering, operations, AI security, corporate IT, and enterprise trust. Key priorities include building an AI security function, securing agent identities and AI gateways, leading AppSec, SecOps, and CloudSec, strengthening identity and access controls, managing corporate IT, supporting SOC 2 and PCI controls, and representing security to executives, the board, and enterprise customers.

Perform manual application and API penetration testing, validate SAST, SCA, and DAST findings, assess cloud security across AWS, Azure, and GCP, and identify vulnerabilities and misconfigurations. Integrate security into CI/CD pipelines, develop scripting and command-line tooling, support remediation and secure coding, participate in architecture reviews, and report security metrics. The role also uses CSPM capabilities and AI-enabled development and security assistants.

Configures and optimizes DAST and API security scanning across applications, APIs, and CI/CD pipelines. Performs manual application penetration testing, validates SAST/SCA/DAST findings, assesses cloud security across AWS, Azure, and GCP, and develops scripting and CLI tooling. Partners with development, DevOps, and cloud teams to remediate vulnerabilities, improve secure coding, conduct architecture reviews, and track security metrics.

Design and ship product security improvements covering authentication, authorization, session and token handling, secrets management, third-party access, abuse detection, fraud prevention, and account takeover defense. Threat-model systems, remediate vulnerabilities, build secure developer tooling, and partner with Product, Engineering, and Trust & Safety. Mentor engineers and use AI-assisted development while balancing security controls with user experience.