Top Cyber Security Jobs in Buffalo, NY

Assists the CISO in managing a bank’s information security program, including cybersecurity strategy, risk assessments, policy development, regulatory compliance, audits, incident response, business continuity, security metrics, employee training, and oversight of security technologies. The role coordinates with IT, security, and business teams to protect data and technology assets and meet banking, OCC, and FFIEC requirements.

Own and scale Komodo Health’s application and product security program across software repositories, CI/CD pipelines, cloud deployments, and AI features. Build security automation, configure SAST/SCA/DAST tooling, conduct threat modeling and penetration-test remediation, secure software supply chains, and establish AI security guardrails. Partner closely with Engineering and Forward Deployed Engineering teams, support customer security reviews, improve vulnerability management, and maintain SOC 2 readiness.

Leads Windows security assurance across compliance, risk assessment, security controls, vulnerability research, and security tooling. Manages security assurance program managers, partners with engineering and product teams, translates requirements into controls, drives scalable security reviews and scanning, and coordinates high-impact initiatives. The role requires influencing across teams, managing ambiguity, tracking outcomes, and improving security processes throughout the product lifecycle.

Leads a team of intelligence analysts and translates security priorities into threat intelligence requirements. Oversees intelligence production workflows, establishes standards, reviews finished intelligence products, tracks sophisticated adversaries and ransomware campaigns, and partners with engineering and external organizations to improve customer protection. The role also manages escalations, communicates technical findings and business impact, and supports security objectives across Microsoft and its customers.

Leads hypothesis-driven threat hunting, cloud vulnerability analysis, remediation, and incident response across AWS, Azure, GCP, and OCI. Administers Qualys and Tenable, analyzes SIEM and cloud telemetry, investigates threats, prioritizes vulnerabilities, remediates misconfigurations and IAM risks, develops detections and hunt playbooks, documents findings, briefs stakeholders, and mentors junior engineers.

Designs, deploys, and improves information security solutions. Responsibilities include vulnerability scanning, penetration testing, risk assessments, network and system monitoring, incident investigation and response, firewall and encryption implementation, security control assessments, compliance reviews, policy development, technical documentation, and staff security guidance.

Protects information systems, data, and operations by assessing security risks, vulnerabilities, and control gaps; monitoring alerts and access activity; investigating security incidents; implementing safeguards; reviewing access controls; maintaining risk, incident, and compliance records; tracking remediation; and developing security policies, procedures, standards, and awareness materials.

Secures and governs cloud-native platforms, Kubernetes environments, CI/CD pipelines, identities, APIs, secrets, and AI workloads. The role implements vulnerability scanning, secure software supply chain controls, access governance, monitoring, threat detection, and incident response support. It partners with engineering and operations teams to establish security standards, remediate vulnerabilities, harden infrastructure, and advance secure-by-design practices across cloud and application environments.

Design, secure, administer, and improve on-premises, cloud, and hybrid infrastructure. Manage servers, networks, operating systems, virtualization, firewalls, endpoints, and monitoring tools. Strengthen security controls, investigate incidents with a third-party SOC, manage vulnerabilities and risks, maintain documentation, and lead infrastructure and security projects including upgrades, migrations, automation, and tool deployments.

Leads enterprise cybersecurity, infrastructure, cloud, technology risk, governance, and operational resilience. Advises executive leadership and Board committees, owns security strategy and risk remediation, directs incident response and security operations, oversees Microsoft cloud infrastructure, resilience planning, regulatory compliance, vendors, budgets, and technology investments. Recruits and develops security and infrastructure teams while ensuring secure, reliable, and cost-effective technology supporting the institution’s strategic goals.

Provides cybersecurity risk, security, governance, and compliance consulting for clients. Leads and supports advisory engagements, communicates technical findings to executive and technical audiences, develops reports and security roadmaps, evaluates business drivers and control frameworks, supports proposals and business development, and helps advance client cybersecurity programs and practice operations.

Supports federal cybersecurity authorization and ongoing authorization activities under the NIST RMF. Reviews ATO packages, SSPs, PIAs, risk assessments, contingency plans, POA&Ms, and security controls. Maintains assessment records in CSAM or similar GRC tools, tracks authorization renewals, supports continuous monitoring, and coordinates audit and compliance responses with technical and non-technical stakeholders.

Own security outcomes for an engineering portfolio across application and cloud security. Lead threat modeling, architecture reviews, risk prioritization, remediation, secure coding, cloud and IaC security, and adoption of security scanning tools. Partner with engineering leaders, coach security champions, support incident response, provide hands-on remediation, and feed portfolio insights into security strategy and platform patterns. The role spans SaaS code, pipelines, identity, infrastructure, data, containers, Kubernetes, and AI-enabled systems.

Lead product security initiatives for cloud, AI, and enterprise platforms. Responsibilities include threat modeling, security architecture reviews, identifying systemic weaknesses, developing secure-by-design guidance and reference architectures, advising engineering and product leaders, leveraging AI and automation for scalable security assessments, investigating emerging attack paths, mentoring teams, and improving security review methodologies and tooling.

Leads product security, cloud and infrastructure security, AI security, security architecture, vulnerability management, and edge security. Oversees threat modeling, secure development standards, AWS controls, vulnerability remediation, AI risk governance, customer security reviews, and security engineering delivery. Reports to the CISO, partners with engineering and GRC leaders, and hires and develops the security engineering organization.

Lead enterprise security architecture across AWS cloud, applications, infrastructure, and CI/CD pipelines. Responsibilities include threat modeling, DevSecOps integration, policy-as-code guardrails, IAM, encryption, data protection, container security, compliance, risk assessments, and evaluation of AI security solutions. The role partners with engineering and cloud teams to implement secure architectures and controls aligned with NIST, OWASP, CIS, ISO 27001, FedRAMP, and SOX.

Performs application security assessments, penetration testing, secure code reviews, vulnerability analysis, and remediation validation across web applications, APIs, microservices, and backend systems. Produces detailed security reports, prioritizes risks, recommends mitigations, and communicates findings to technical and executive stakeholders. The role supports secure-by-design practices throughout the SDLC and evaluates modern cloud-native, containerized, and DevSecOps environments.

Designs and implements secure architecture across cloud, on-premises, hybrid, application, infrastructure, and AI-enabled environments. Defines security controls, governance requirements, and enterprise guardrails; supports cloud transformation and emerging AI adoption. Leads architecture reviews, ensures regulatory and policy compliance, and collaborates with architecture, engineering, development, cybersecurity, compliance, risk, and operations teams to identify and mitigate security risks.

Lead and scale ACV’s Application Security program across engineering, product, and DevOps. Establish Secure SDLC and shift-left practices; integrate security tools into CI/CD; oversee threat modeling, code reviews, assessments, and penetration testing; develop security policies, training, and automation; remediate vulnerabilities with developers; and support compliance with SOC 2, ISO 27001, and related requirements.

Designs and implements automation for federal security authorization and ATO processes. Responsibilities include automating evidence collection, validation, workflow routing, reporting, policy checks, and readiness dashboards; integrating security scans, SBOM/SCA, vulnerability, repository, and system-of-record tools; and maintaining testing, documentation, traceability, and release artifacts. Requires collaboration with security, engineering, platform, data, and government stakeholders.

Assess and improve federal information-system security authorization programs. Review ATO packages, SSPs, privacy assessments, system artifacts, POA&Ms, audit reports, and continuous-monitoring activities under RMF. Coordinate stakeholders, support compliance reporting, track authorization renewals, advise on security and privacy requirements, and develop best practices. The role requires cybersecurity incident response, systems administration, SOC, malware analysis, threat intelligence, and enterprise credential-store experience.

Conducts security and privacy control assessments, vulnerability and penetration testing, ATO artifact reviews, risk analysis, and compliance reporting. Develops assessment plans, test schedules, findings reports, POA&M remediation templates, and executive briefings. Advises system owners, ISSOs, contractors, and stakeholders on corrective actions, acceptable evidence, authorization requirements, and enterprise security improvements while applying NIST, FedRAMP, RMF, FISMA, and related government standards.

Administers enterprise security infrastructure, investigates and responds to security alerts and incidents, performs threat hunting, maintains security asset inventories, documents procedures, and coordinates resolution across internal and external teams. The role requires at least three years of information security experience and hands-on operation of multiple security technologies, including protections, filtering, proxies, antivirus, threat hunting, or log investigation tools.

Drive technical pre-sales engagements for Microsoft Security: build demos/PoCs, lead hands-on workshops, design secure cloud architectures, resolve technical blockers, and advise customers on improving security posture using Microsoft security products and AI-enabled solutions.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.