Top Remote Cyber Security Jobs in Rochester, NY

Define and drive Security Operations strategy at the intersection of Identity and AI. Analyze IAM and AI roadmaps, perform threat modeling, build security frameworks for AI-enabled systems and agentic workloads, identify capability gaps, incubate new security approaches, and partner with engineering and security teams to influence long-term direction and operational readiness.

Lead Microsoft's global Security partner strategy to accelerate customer adoption, consumption, and value realization via partner-led motions. Drive strategy, analytics, governance, partner readiness, and cross-functional alignment; generate insights from partner and product data; manage strategic programs and stakeholder communications; mentor team members and continuously optimize partner ecosystem performance.

Lead strategy to define and scale technical skilling for Microsoft's global Security Solutions Specialist community. Use sales and field data, market intelligence, and AI-enabled analytics to identify capability gaps, design skilling frameworks, drive adoption, measure impact, and advise senior leaders to accelerate security and AI-driven customer outcomes.

Lead global technical skilling strategy for Microsoft Security Solution Engineers: define capability frameworks, analyze field and performance data to identify gaps, design scalable AI-enabled learning and assessment, advise senior leaders, partner across product/engineering/enablement, drive adoption and measure impact, and build high-performing risk and capability practices.

Drive technical pre-sales engagements for Microsoft Security: build demos/PoCs, lead hands-on workshops, design secure cloud architectures, resolve technical blockers, and advise customers on improving security posture using Microsoft security products and AI-enabled solutions.

Lead and expand the Application Security program: define roadmap, embed security into SDLC, perform architecture and code reviews, manage vulnerability lifecycle and incident response, lead penetration testing strategy, deliver executive metrics, and mentor a small hands-on AppSec team.

Lead cloud security for GCP and Azure by operationalizing CNAPP tooling, embedding security-as-code with Terraform/CI-CD, driving vulnerability management, improving detection and response with Chronicle, hardening data and endpoint security, and mentoring engineers while serving as senior escalation during incidents.

Lead research and analysis on cloud-native security, create thought leadership, advise clients and vendors, present at events, support sales and peer review, mentor junior analysts, and improve research processes. Provide actionable guidance on cloud security architectures, vendor selection, and the intersection of cloud security with GenAI. Travel up to 25%.

Perform protocol-focused security research to prevent vulnerabilities on Ethereum mainnet. Tasks include AI-assisted analysis, fuzzing, manual review, reviewing hardforks and spec changes, improving security tooling and automation, coordinating disclosures, and supporting audits and audit competitions while collaborating with devops, specifications authors, and client implementers.

Lead research and produce high‑impact network security insights. Advise clients on evaluation, selection and deployment of network security technologies, present at events, support sales, mentor analysts, and drive research agenda and process improvements.

Lead research and advisory on network security: produce thought leadership, analyze market trends, advise clients on evaluation/selection/deployment of firewalls, NDR, SASE/SSE, microsegmentation and Zero Trust, present findings, mentor junior analysts, and support sales and research processes.

Own and iterate security usage metrics and executive reporting using semantic models and telemetry. Lead data-quality investigations, field escalations, governance for compensable metrics, and cross-org alignment with Product, Finance, Marketing, and Compensation. Produce dashboards, enablement content, ad-hoc analyses, and host reviews to drive adoption and data-driven decisions.

Lead and deliver Google Cloud security architecture, posture assessments, and operationalization. Advise on GCP security strategy, implement Security Command Center and cloud-native security tooling, integrate findings into SIEM/SecOps, guide AI workload security, produce executive reports and remediation roadmaps, and mentor consultants while driving repeatable methodologies and delivery quality.

Lead design, assessment, and operationalization of secure Google Cloud environments. Advise on GCP security strategy, posture assessments, SIEM/Chronicle integration, CNAPP/CSPM tooling, Security Command Center implementation, Vertex AI security, remediation roadmaps, and delivery of architecture, runbooks, and executive advisory. Mentor consultants and develop repeatable security methodologies.

Owner of information security, privacy, and data governance programs. Maintain SOC 2 Type II, lead ISO 27001 certification, administer Vanta, run risk assessments, incident response, data governance, and partner cross-functionally to embed security and privacy.

Lead Fabric's security program and corporate IT operations, including identity, endpoint, cloud, application, and vendor security. Hire and manage a small team, run incident response, handle customer security questionnaires, partner on SOC2/HITRUST/HIPAA control implementation, and set practical security policy while remaining hands-on in operations and tooling.

Senior individual contributor who researches and delivers thought leadership on application security for enterprise applications (ERP/CRM). Produces insights, advises CIOs, supports sales and events, mentors junior analysts, and builds security strategies, roadmaps, metrics, and vulnerability testing programs for major vendors and third-party tools.

Lead security advisory engagements focused on cybersecurity and data governance. Conduct program assessments, design and operationalize data governance programs, produce client deliverables, mentor consultants, support sales with scoping and proposals, and contribute to practice development, thought leadership, and forecasting to drive advisory services revenue.

Lead go-to-market strategy for the Security practice, develop and package security solutions, enable sales and delivery, build partner ecosystem, drive business development and marketing, and mentor security teams to achieve revenue and growth targets.

Lead technical marketing for API, AI agent, and application security by deploying and testing Akamai products, building PoCs, demos, labs, and attack simulations, creating technical content and enablement, validating messaging, and presenting technical briefings while collaborating with product, engineering, and field teams.

Design, implement, and automate cloud security controls (primarily AWS, with GCP work) using code (Python, Go) and IaC (Terraform). Build authorization and JIT access systems, harden containers and CI/CD pipelines, integrate data classification with access controls, automate security operations and incident response, and partner with engineering to embed HIPAA-compliant, secure-by-design practices.

Lead and remain hands-on for security engineering and operations: design and harden controls, build automation and detection, manage MDR, run incident response, and own vulnerability management, metrics, and cross-functional security integration.

Own and operate the organisation's accounts, access, and cloud subscriptions; set practical security standards; identify and remediate risks hands-on; manage onboarding/offboarding access across core platforms; partner with engineers and researchers to ensure secure, usable controls.

Design, build, and harden security-critical systems: manage KMS and key management, protect PHI/PII, secure storage and tenant isolation, embed security in SDLC and CI/CD, lead threat modeling, and improve security scanning and compliance.

Design, build, and maintain automated API and security test frameworks. Validate authentication, authorization, rate limiting, and error handling. Conduct fuzzing, token validation, access control testing, and integrate tests into CI/CD. Analyze failures, test integrations, ensure API contract adherence, and mentor automation engineers to improve coverage and reliability.