Top Cyber Security Jobs in Buffalo, NY

Perform hands-on application and system security assessments: discover and validate vulnerabilities, develop proof-of-concepts and custom tooling, conduct threat modeling and architecture reviews, and communicate clear remediation guidance to clients while contributing to security research.

Lead and grow a product research team focused on defensive cybersecurity research. Own technical and managerial leadership, collaborate with Product, SOC, and Engineering, scale automated threat-detection workflows using AI, and mentor researchers to deliver prioritized platform capabilities.

Lead research to detect Windows threats and develop sensor/telemetry capabilities. Collaborate with engineering and product teams to implement detections, investigate false positives/negatives, apply AI to research workflows, produce technical documentation, and mentor others while promoting the company externally.

Lead and operationalize the enterprise information security program across AppSec, CloudSec, SecOps/IR, and GRC. Own SOC/detection and response, application and cloud security, risk registers, compliance (SOC2/ISO/NIST/HITRUST), security KPIs, and build a high-performing security organization partnered with engineering, IT, legal, and privacy.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Design and implement multitenant workload and network isolation for bare-metal and virtualized GPU infrastructure. Harden Linux kernel and container runtimes, perform threat modeling and penetration testing, write low-level security code (C/Go/Rust), mitigate GPU and PCIe security risks, and lead incident response and forensic work for ephemeral container environments.

Secure customer-facing products, APIs, and internal services through threat modeling, architecture and code reviews. Remediate vulnerabilities by coding fixes in Python/Go/JS/TS. Build and manage SAST/DAST/SCA security pipelines in CI/CD. Configure WAFs, API gateways, and bot protection. Provide secure coding guidance, run bug bounty triage, and support compliance (SOC 2, ISO 27001, GDPR).

Lead product strategy and execution for security, compliance, and public-sector capabilities in MongoDB Atlas for Government. Translate FedRAMP/DoD/NIST requirements into roadmaps, drive multi-team programs, align senior stakeholders, enable audit readiness, and support market expansion and GTM for regulated industries.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Partner with engineering, compliance, and security teams to embed application security into the SDLC: triage static/SCA alerts, advise on OWASP Top 10 remediation, maintain developer playbooks and training, track security metrics and evidence for audits, and help shape AI governance and GenAI-safe workflows.

This intern role in Federal Security Operations focuses on cybersecurity, project tracking, and maintaining relationships with customer stakeholders in a mission-driven environment.

Perform 24/7 SOC monitoring and incident response across networks, endpoints, cloud and SaaS; triage, investigate, and remediate incidents; collaborate with vulnerability management, FedRAMP, and engineering teams; refine detection/playbooks; maintain incident documentation and SOC processes; support FedRAMP-related security and privacy responsibilities and periodic background investigations.

Lead product marketing for the North America region: drive product launches, craft positioning and content, build competitive intelligence, enable sales with demos and materials, coordinate analyst and event messaging, and create demand-generating thought leadership.

Investigate security alerts (Cynet), perform live incident response, malware analysis and forensics, threat hunting, and produce threat intelligence reports. Operate security tools (firewalls, IDS, SIEM, endpoint protection) and collaborate with research to improve detection and hunting capabilities.

Own and execute hyperscaler marketplace GTM (AWS, Azure, GCP) and scale a tiered VAR partner program. Drive sell-with and sell-through motions, accelerate partner-led revenue, align joint GTM with Sales and Marketing, enable VARs with Solution Architecture, and design partnership financial models and incentives.

Recruit, onboard, enable, and manage channel partners (MSPs/MSSPs/VARs) across territories. Drive partner sales and quota attainment, deliver technical and sales enablement, execute marketing programs, manage deal registrations, communicate product launches, and maintain strategic partner relationships to grow pipeline and revenue.

As a Principal DFIR Consultant, lead complex investigations, mentor staff, develop methodologies, and engage in client relationships while ensuring high-quality deliverables and practice development.

Lead design and implementation of Saviynt IGA solutions, perform assessments and roadmaps, draft proposals and SOWs, produce deliverables, mentor junior engineers, and lead technical architecture and security discussions with stakeholders.

Act as the technical lead for strategic customers, driving adoption, deployments, architecture reviews, and executive engagements. Remove technical blockers, align cloud security strategy, partner with CSM and Sales on expansions, and provide product feedback to influence roadmap.

Lead and grow a team of Security and IT technical program managers and own the cyber security and IT program portfolio. Drive prioritization, resourcing, and delivery of cross-functional security initiatives, translate strategy into roadmaps, manage risks and dependencies, and standardize playbooks and metrics.

Own technical pre-sales for enterprise AI security: lead discovery, design demos, execute end-to-end POCs, partner with AEs, surface product feedback, and advise customers on complex technical decisions.

Manage a high-volume pipeline of technical integrations and partnerships across security, identity, cloud, collaboration and DevOps ecosystems. Evaluate APIs/webhooks, perform hands-on testing with Postman/curl, coordinate onboarding and technical validation, gather cross-functional requirements, drive partner applications and launches, and report outcomes to leadership while using AI tools to scale research and documentation.

Develop, implement, and maintain cybersecurity policies and data classification aligned with NIST CSF, FedRAMP High, IL5 and other standards; support ATO processes, manage compliance documentation and audits, train employees on security/privacy, and troubleshoot policy implementation for GovCloud environments.

Lead and perform HITRUST Gap, Readiness, and Validated Assessments. Define scope, test controls, validate evidence in MyCSF, produce readiness and validated reports, advise clients on remediation, and ensure compliance with HITRUST methodology and related frameworks.

Sell Mitiga's runtime security platform to enterprise CISOs and security leaders. Manage end-to-end enterprise sales cycles from prospecting to close, build strategic territory and partner plans, collaborate with solutions engineering and customer success, and maintain accurate CRM records while consistently exceeding revenue targets.