Top Cyber Security Jobs in Buffalo, NY

The Cyber Security Analyst SME governs security and compliance across cloud infrastructure and application environments. Responsibilities include maintaining security evidence mappings, enforcing CI/CD pipeline gates, conducting vulnerability assessments, analyzing CND events and logs, developing security policies, managing ATO and compliance activities, and advising engineering and governance teams. The role also supports AWS cloud security, data governance, reporting, risk analysis, incident response, and stakeholder communications.

Provides information assurance and cybersecurity services for DoD applications, including RMF and A&A support, security documentation, vulnerability assessments, POA&M management, STIG compliance, security audits, incident reporting, continuous monitoring, and DevSecOps security integration. The role supports cloud migration, cybersecurity tooling, compliance with DoD and NIST standards, external audits, and implementation of government cybersecurity directives.

Leads KeyBank’s Red Team and offensive security program, including adversary emulation, penetration testing, physical and application assessments, cloud security testing, AI security evaluations, and purple team exercises. Develops testing strategy, methodologies, tooling, metrics, and maturity roadmaps; mentors engineers; coordinates internal and third-party engagements; validates remediation and attack paths; and presents findings and strategic recommendations to executives and cybersecurity stakeholders.

Leads application security engineering for enterprise systems, including SAST and DAST scanning, security control implementation, web application protection, and pipeline development. Uses Veracode, Burp tools, Linux, and programming or scripting languages to identify and remediate vulnerabilities. Applies OWASP, CVSS, CWE, federal compliance standards, and secure architecture practices while supporting scalable digital transformation initiatives. Requires Public Trust eligibility and U.S. citizenship.

Designs, implements, configures, and supports enterprise cybersecurity solutions across IAM, endpoint, network, email, application, cloud, and security awareness domains. Conducts vulnerability assessments, threat hunting, incident investigation, security tool tuning, policy development, and security architecture reviews. Serves as a security subject matter expert on technology projects, collaborates with an MSSP, provides incident escalation support, and maintains availability for critical security operations.

Serve as a fractional CISO advising alternative asset firms and family offices on building, maintaining, and operating full cybersecurity programs. Provide hands-on leadership, risk assessment, policy and controls development, and program execution on project-based engagements.

Provide fractional cybersecurity advisory and hands-on operations for hedge funds and family offices: conduct assessments, run vulnerability management and incident response, implement policies and controls, monitor logs and network traffic, test BCDR plans, advise on vendor selection, and report KPIs and remediation plans.

Conduct application security assessments, identify and validate vulnerabilities, perform dynamic testing and static code reviews, and recommend remediation strategies. The consultant collaborates with development teams, uses tools such as Burp Suite, stays current with application security methodologies, and communicates complex security issues to diverse audiences.

Monitor, investigate, and respond to security alerts, phishing, vulnerabilities, and incidents for managed security clients. Conduct threat hunts, collect evidence, identify root causes, perform containment and remediation, and create incident reports and SOPs. Support deployment of security toolsets, collaborate with analysts and engineers, communicate with clients, and participate in after-hours or on-call coverage.

Administer identity and access security programs, including access reviews, privileged access management, endpoint privilege controls, and Azure PIM. Support compliance audits through evidence collection, triage SIEM and endpoint alerts, manage phishing simulations, document procedures, and track vulnerability remediation. Partner with IT, engineering, and compliance teams to improve security processes and posture in a cloud-native environment.

Own end-to-end security architecture and risk posture for a strategic, AWS-heavy program protecting trade secrets and sensitive intellectual property. Lead cloud and application security reviews, threat modeling, risk assessments, control design, and risk acceptance. Develop secure reference architectures, design patterns, standards, and guidance across cloud platforms, data flows, identity, and integrations. Provide technical leadership, mentorship, and security direction while communicating risks effectively to technical, business, audit, and executive stakeholders.

Lead technical presales engagements for Microsoft security solutions, including Entra, Purview, Defender, and Sentinel. Deliver discovery sessions, demonstrations, whiteboarding, solution designs, and proof-of-concept efforts. Build competitive strategies, resolve technical blockers, guide customer decisions, collaborate with partners and deployment teams, and help existing customers optimize security product usage. Embed governance, security, and compliance into customer engagements while quantifying business value and supporting sales targets.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Leads an engineering team responsible for designing, building, and operating data security products and controls. Provides technical direction, hands-on engineering leadership, and delivery ownership across DLP policy, data discovery and classification, data access controls, policy-as-code workflows, automation, integrations, testing, deployment, reliability, and operational support. Translates data security requirements into scalable solutions while mentoring engineers and driving adoption of secure engineering practices.

Lead end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational security environments. Develop offensive tooling, implants, and AI-driven autonomous agents for reconnaissance, exploitation, and post-exploitation. Serve as a technical lead for customer engagements, brief security executives, collaborate with blue teams and threat intelligence organizations, establish operational standards, and mentor senior operators.

Lead product security architecture and offensive testing, including threat modeling, architecture reviews, penetration testing across web applications, APIs, mobile clients, and cloud infrastructure, secure design definition, code reviews, and remediation validation. Partner with engineering teams on authentication, authorization, data protection, trust boundaries, and cloud-native security while communicating risks and leading cross-functional security initiatives.

Lead design, assessment, and operationalization of secure Google Cloud environments. Advise on GCP security strategy, posture assessments, SIEM/Chronicle integration, CNAPP/CSPM tooling, Security Command Center implementation, Vertex AI security, remediation roadmaps, and delivery of architecture, runbooks, and executive advisory. Mentor consultants and develop repeatable security methodologies.

Lead and deliver Google Cloud security architecture, posture assessments, and operationalization. Advise on GCP security strategy, implement Security Command Center and cloud-native security tooling, integrate findings into SIEM/SecOps, guide AI workload security, produce executive reports and remediation roadmaps, and mentor consultants while driving repeatable methodologies and delivery quality.

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Build security tooling and customer-facing transparency systems; oversee SBOM, vulnerability management, vulnerability disclosure, and bug bounty programs. Assess vulnerability severity and exploitability, publish security advisories and CVE records, coordinate disclosures, answer customer security inquiries, and collaborate with Engineering, Product, customers, partners, and security researchers. Apply AI to security workflows and use software engineering and automation practices to improve security processes.

Lead Prelim’s security program across secure SDLC, application and cloud security, IAM, incident response, endpoint management, vendor risk, security reviews, and SOC 2 Type II compliance. Partner with DevOps and engineering, coordinate penetration testing, develop policies and risk roadmaps, manage audits and customer questionnaires, and improve detection and access controls. The role is the company’s first dedicated security hire and requires strong judgment, communication, and hands-on technical skills.

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.

Leads security analysis, compliance oversight, risk management, vulnerability assessments, remediation planning, audits, and Authority to Operate activities for a federal CMS program. Reviews architectures and technical designs, integrates security into Agile development, maintains security documentation and metrics, monitors regulatory updates, and advises engineering, operations, and program stakeholders. Develops security policies, supports FISMA and CMS assessments, and delivers security awareness training.

Design and implement automated cloud security controls across multi-cloud environments. Integrate security into CI/CD pipelines, harden infrastructure and IaC, manage IAM and secrets, advance container and workload security, protect AI/ML systems and data, and support monitoring, detection, and incident response for cloud applications.

Conduct ISO 27001 and information security management system audits for assigned clients, managing engagements from contracting and scheduling through planning, assessment, reporting, invoicing, and follow-up. Lead audit teams when needed, mentor junior auditors, maintain client records, coordinate travel, and ensure audits meet BSI, regulatory, scheme, cost, timing, and customer satisfaction requirements.