Top Cyber Security Jobs in Buffalo, NY

Leads Carina’s cloud infrastructure, internal IT, cybersecurity, risk management, compliance, and business continuity programs. Oversees AWS platform operations, infrastructure as code, deployment reliability, observability, incident response, disaster recovery, employee technology, identity systems, vendors, budgets, and governance. Advises executives on technology strategy, security posture, operational risk, and investments while partnering with Engineering and Data to provide a secure, reliable technology foundation.

Build Ent’s endpoint data-protection layer for classifying sensitive data, tracing provenance, and enforcing egress policies across devices, applications, networks, removable media, browsers, and AI tools. Develop cross-platform interception and content inspection capabilities, integrate on-device language models, optimize performance, produce forensic evidence, investigate compatibility issues, and improve detection precision for enterprise customers.

Deliver cybersecurity assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance for enterprise clients. Assess on-premises, cloud, hybrid, identity, OT, and ICS environments; identify risks and security gaps; produce reports; and present recommendations to technical and executive stakeholders. Support incident response and post-incident improvements, collaborate with engagement managers and specialists, contribute to consulting methodologies, and stay current on threats and security best practices. Travel is approximately 20%.

Lead cybersecurity risk strategy for frontier AI auditing. Design secure audit systems and privacy-enhancing technologies, evaluate AI-related cybersecurity risks, develop code and data tools, and strengthen internal IT infrastructure. Responsibilities include access controls, data protection, device management, incident response readiness, and communicating threat models, cryptography, and risk to technical and non-technical stakeholders.

Own and iterate security usage metrics and executive reporting using semantic models and telemetry. Lead data-quality investigations, field escalations, governance for compensable metrics, and cross-org alignment with Product, Finance, Marketing, and Compensation. Produce dashboards, enablement content, ad-hoc analyses, and host reviews to drive adoption and data-driven decisions.

Partner with sales leadership and cross-functional stakeholders to drive billed revenue growth for Microsoft 365 E5. Monitor revenue performance, improve pipeline health, perform root-cause analysis, generate data-driven insights, and translate strategy into execution plans. Lead governance, cadence, and operational improvements to scale best practices and accelerate sales execution across regions.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Partner with engineering, compliance, and security teams to embed application security into the SDLC: triage static/SCA alerts, advise on OWASP Top 10 remediation, maintain developer playbooks and training, track security metrics and evidence for audits, and help shape AI governance and GenAI-safe workflows.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Leads exposure management and vulnerability management across cloud, hybrid, SaaS, applications, APIs, certificates, domains, and shadow IT. Identifies, validates, prioritizes, and reports vulnerabilities, misconfigurations, leaked data, and other cybersecurity risks. Designs and implements security solutions, supports remediation and penetration testing, integrates threat intelligence, advises on security architecture, and mentors team members. Requires advanced cybersecurity expertise, cross-functional collaboration, and knowledge of security frameworks and technologies.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Lead global technical skilling strategy for Microsoft Security Solution Engineers: define capability frameworks, analyze field and performance data to identify gaps, design scalable AI-enabled learning and assessment, advise senior leaders, partner across product/engineering/enablement, drive adoption and measure impact, and build high-performing risk and capability practices.

Lead security across applications, services, infrastructure, and developer workflows. Identify, assess, and mitigate risks; run secure code reviews, threat modeling, and architecture discussions; build automation and tooling to prevent issues; harden authentication and access control; investigate incidents and manage disclosures; partner with engineering teams to design secure-by-default APIs and deployments.

Lead a U.S.-based team of Security Operations Engineers and TPMs to design, build, and operationalize identity protections that reduce lateral-movement risk. Define strategy, apply AI and automation, partner with engineering and platform teams, deliver scalable controls, and drive measurable security outcomes, operational readiness, and executive reporting.

Administers Workday and multi-platform HR security, including role-based access, security configuration, access reviews, governance, audit support, and remediation. Evaluates routine and elevated access requests, enforces least-privilege standards, analyzes security and audit trends, maintains governance documentation, and recommends policy and process improvements. Collaborates with HR, IT, Legal, Compliance, and business stakeholders while protecting confidential employee data.

Design and build cloud security tooling, automation, and AI-enabled threat-hunting capabilities. Perform threat modeling, incident response, security research, architecture reviews, and detection engineering. Develop SIEM and SOAR integrations, automate security processes, address AI-related threats using MITRE ATLAS, and contribute to multi-year security roadmaps. Collaborate across engineering and business teams, prioritize security improvements, support on-call operations, and mentor team members.

Assesses clients’ operational technology security posture across manufacturing, energy, utilities, and critical infrastructure. Conducts stakeholder interviews, reviews OT documentation, evaluates environments against cybersecurity frameworks and regulations, develops maturity assessments and remediation roadmaps, and presents findings to technical teams and executives. Advises on OT security governance, policies, procedures, risk management, and compliance while supporting broader cyber risk advisory engagements.

Lead RMF execution and authorization efforts for classified cloud and AI-integrated systems. Develop and maintain SSPs, SARs, POA&Ms, and continuous monitoring documentation; assess NIST, DoD, CNSS, FedRAMP, cloud, container, and AI security controls. Conduct architecture reviews, threat modeling, vulnerability assessments, risk analysis, and security control assessments while coordinating with architects, developers, DevSecOps teams, customers, and third-party assessors.

Serves as the senior technical authority for enterprise cybersecurity architecture and engineering supporting a federal VA program. Leads security architecture reviews, threat modeling, risk and gap analyses, modernization, governance, requirements traceability, and secure implementation across cloud, health IT, network, data, identity, and emerging technologies. Advises government and technical leadership, guides multidisciplinary teams, develops architectural standards and recommendations, supports A&A and ATO activities, presents executive briefings, reviews deliverables, and mentors cybersecurity personnel.

Own strategic post-sales relationships with enterprise customers, advising them on AI security and governance. Lead discovery, define measurable outcomes, drive adoption, support retention and expansion, and coordinate Product, Engineering, Security, Support, and operationalization teams. Translate CISO-level strategy, GRC concerns, business objectives, and technical requirements into practical solution strategies while identifying new AI security use cases and growth opportunities.

Designs and builds security orchestration and automation workflows for SOC processes, including alert triage, incident response, case management, integrations, scripting, error handling, and secure execution. The role translates client requirements into automation build plans, integrates SIEM, EDR/XDR, ticketing, threat intelligence, and email security tools, and may apply AI, cloud security, detection engineering, and automation-as-code practices.

Owns security operations and compliance for a multi-tenant GPUaaS platform. Maintains SOC 2 and SOC 3 programs, coordinates audits and penetration tests, manages IAM and security tooling, leads vulnerability management and incident response, supports customer security reviews and contracts, maintains policies, and drives security awareness and phishing programs.

Leads Ferguson’s network security program, managing a team of up to six and overseeing firewalls, IDS/IPS, VPN, URL filtering, endpoint, cloud, and perimeter security. Develops strategic roadmaps, manages budgets and vendors, oversees solution design and deployments, supports major projects, and ensures operational documentation and training. The role also evaluates emerging technologies, partners with architecture and engineering teams, and provides cybersecurity domain expertise across Zero Trust, SASE, and network security.

Lead AWS GovCloud security engineering and accreditation for pre-production modernization environments. Design secure cloud architectures, landing zones, IAM controls, network segmentation, infrastructure automation, containers, and CI/CD deployments. Own DoD RMF, IATT-C, and ATO packages, security controls, POA&Ms, vulnerability remediation, continuous monitoring, and cybersecurity assessments. Provide cloud and cybersecurity guidance for modernization, migration, data transition, Zero Trust, and ICAM initiatives while advising program leadership.