Top Cyber Security Jobs in Buffalo, NY

Conduct hardware, network, web, mobile, and application security assessments, including threat modeling, code review, penetration testing, firmware and binary analysis, and technical writing. Analyze embedded architectures, debug interfaces, firmware security mechanisms, proprietary protocols, IoT devices, and customer environments. Communicate findings and recommendations to customers while adapting quickly to unfamiliar technologies and delivering quality results on complex projects.

Performs digital forensics and incident response investigations, including host forensics, network traffic analysis, malware triage, log review, and business email compromise analysis. Produces technical reports and recommendations, communicates findings to technical and managerial audiences, supports client engagements, automates DFIR workflows, participates in on-call rotations, and contributes to threat hunting, proactive investigations, and Purple Team activities.

Engineers and operates corporate IT security across identity, devices, endpoints, SaaS, internal networks, and workforce AI tools. Responsibilities include access hardening, device trust, lifecycle automation, SaaS security posture, detection engineering, incident command, audit evidence, and AI guardrails. The role is primarily hands-on and partners with Security, IT, Legal, Compliance, and business leaders to investigate incidents, remediate risks, and improve corporate security controls.

Designs, implements, and optimizes Microsoft 365 security, compliance, identity, and governance solutions for clients. Configures Microsoft Purview, Entra ID, Defender, DLP, information protection, access controls, and AI-agent security capabilities. Assesses environments, identifies gaps, develops remediation plans, automates administration with PowerShell, and delivers documentation, workshops, testing, and knowledge transfer. The role requires strong consulting and customer-facing skills while supporting technical project delivery across enterprise environments.

Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.

Supports the Facility Security Officer with personnel clearance processing, classified-access administration, compliance reporting, security inspections, FOCI mitigation, and records management. Maintains data in DISS and other government systems, investigates security violations, tracks access requests, prepares reports, and helps update security procedures. The role requires interpreting NISPOM and DoD regulations, maintaining accurate records, protecting classified information, and working onsite with internal and external stakeholders.

Own and execute the application security program, including SIEM management, threat detection, architecture and code reviews, vulnerability management, security testing, incident response, forensic investigations, and security tooling. Partner with engineering and infrastructure teams to remediate vulnerabilities, promote secure coding, develop training, and improve enterprise security through cloud, container, compliance, and monitoring practices.

Provides pre-sales technical support and technical account management for Vectra’s cybersecurity platform. Leads customer discovery, product demonstrations, proofs of concept, technology reviews, integrations, and security architecture discussions. Builds technical relationships with customers and channel partners, supports sales teams, collaborates on deployments and product projects, and maintains expertise in security technologies, networking, cloud security, attacker progression, incident response, and competitive offerings. Regional travel is required as needed.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

Secure Microsoft Windows online services through offensive security, code and deployment reviews, penetration testing, vulnerability research, and scalable mitigation development. Build reusable security review tools and agents, demonstrate exploit impact, identify novel attack vectors, bypass security controls, and collaborate with product engineering teams to strengthen architecture and defenses.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Leads and develops Security Consultants while overseeing security submission triage, validation, escalations, and resolution. Provides application security expertise across web, network, cloud, or mobile domains; improves operations through metrics, automation, and process optimization; manages workloads; and partners with customers, leadership, and cross-functional teams. The role requires incident response and vulnerability management experience, technical mentorship, strong communication, and periodic travel for customer-facing and onsite events.

Lead application and infrastructure security for LiteLLM, focusing on Python code reviews, vulnerability remediation, threat modeling, secure development tooling, CI/CD and supply-chain security, cloud and IT controls, incident response, and LLM-specific attack testing. Partner closely with engineers to strengthen authentication, authorization, tenant isolation, secrets management, deployment security, monitoring, vulnerability management, and disclosure processes.

Leads Americas security architects in customer-facing engagements, enterprise security strategy, architecture reviews, escalations, and product feedback. Drives customer growth, security adoption, resilience, risk management, and AI transformation. Develops managers and technical leaders, builds high-performing teams, engages executive stakeholders, and provides technical thought leadership across Microsoft security solutions, cloud security, identity, data protection, SIEM, XDR, and security operations.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Analyzes exposure risks across databases and data platforms, including permissions, access models, configurations, storage, encryption, and service-to-service access. Investigates attack paths, validates risks using queries and logs, prioritizes issues by exploitability and business impact, and partners with database, cloud, platform, engineering, and cybersecurity teams on remediation and preventative controls.

Oversee internal IT infrastructure, cybersecurity operations, incident response, cloud systems, identity and access management, employee IT support, and technology vendors. Administer Microsoft 365, Azure, networking, firewalls, endpoints, backups, and SSO. Lead security assessments, vendor selection and negotiations, insurance compliance, documentation, infrastructure initiatives, and risk communication to leadership.

The Senior Cloud Security Engineer identifies and mitigates cloud vulnerabilities, monitors environments for breaches, responds to incidents, assesses security weaknesses, and strengthens cloud security controls. The role develops risk management programs, conducts gap analyses, optimizes cloud security tools, improves monitoring and response capabilities, tracks emerging threats, and advises stakeholders on security policies and standards. The position supports the National Science Foundation and requires an active Public Trust clearance.

Hands-on senior security engineer responsible for building secure libraries, templates, guardrails, and developer tooling. Reviews architecture and code for authentication, authorization, and data exposure risks; conducts threat modeling; strengthens secrets, logging, and auditability; integrates security checks into CI/CD; supports vulnerability remediation, secure development practices, and incident reviews.

Develop and integrate network security software with firewalls, routers, switches, IPS, proxies, and other security devices. Responsibilities include gathering technical requirements, designing integrations, maintaining security-device test labs, assisting development and testing, creating test cases, troubleshooting complex integration issues, and documenting configurations. The role requires expertise in networking and security, packet analysis, major firewall vendors, virtualization, and regular expressions.

Designs and implements cloud security solutions for Microsoft Azure and Microsoft 365 customers. Leads security architecture discussions, Zero Trust adoption, technical evaluations, implementation planning, troubleshooting, and enterprise security strategy. Advises executives and technical stakeholders on identity and access management, threat protection, cloud security, information protection, and secure-by-design architectures. Collaborates with Microsoft engineering, product, and security teams to remove blockers and orchestrates technical resources to deliver customer outcomes.

Own Deepgram’s privacy operations, security compliance, audit evidence, control mapping, security questionnaires, policies, and public trust documentation. Lead DPIAs, data-flow mapping, DSAR and deletion workflows, vendor reviews, SOC 2, ISO 27001, and PCI DSS audits. Partner with Engineering, Legal, Research, and Sales Engineering to verify technical claims, automate evidence collection, maintain accurate documentation, and translate privacy and AI regulations into practical requirements and enablement.

Build and automate security controls across bare-metal Linux infrastructure and AWS. Responsibilities include host hardening, vulnerability and patch management, container and CI/CD security, penetration testing, detection and incident response, access and log reviews, compliance evidence automation, and software supply-chain security. The role also supports customer security work and applies AI tooling to security operations.

Conduct OT and ICS inventories at DoD facilities, assess network architecture and cybersecurity compliance, create topology and dataflow diagrams, oversee field teams, coordinate site visits, and recommend remediation aligned with RMF, DoD standards, and UFC requirements. The role requires extensive domestic and international travel, customer collaboration, project reporting, and technical assessment of critical building systems.

Conduct cybersecurity assessments and OT/ICS inventories at CONUS and OCONUS DoD facilities. Perform logical network scans, document topology and data flows, evaluate compliance with DoD cybersecurity standards and RMF requirements, identify vulnerabilities, and recommend remediation. The role also supports site-visit planning, stakeholder coordination, logistics, and closeout reporting.