Top Senior Cyber Security Jobs in Rochester, NY

Lead end-to-end application and product security for a Kubernetes-based multi-tenant platform. Perform deep security reviews of Go services, Kubernetes controllers, and frontends; lead threat modeling; integrate automated security checks into CI; manage vulnerability lifecycle; develop security-related features; and train developers on secure coding and attack vectors.

Design, implement, and operate application and cloud security controls across the SDLC. Integrate security tooling (SAST/DAST/SCA/IaC), secure CI/CD pipelines, run secure code reviews and threat modeling, deploy and manage cloud security posture and CNAPP tooling, and partner with engineering teams to remediate vulnerabilities and build secure, repeatable patterns.

Lead design and implementation of enterprise IAM capabilities (IGA, AM, PAM). Build SSO/MFA, RBAC/ABAC, lifecycle provisioning/deprovisioning, privileged account management, integrations with cloud and on‑prem, scripting automation, directory services management, and IAM monitoring and incident response.

Join the Infrastructure team to provision and secure cloud resources (compute, containers, databases, networking). Maintain infrastructure security, implement policies, handle Jira tickets, participate in daily standups, and perform DevSecOps tasks using Terraform, Helm, CI/CD, and security tooling.

Lead and build Swords Security Operations Center: architect SIEM, develop detection-as-code, run incident response, mentor SOC engineers, design SOAR/AI automation, run threat hunting and metrics to reduce MTTD/MTTR and scale defenses across cloud environments.

Lead design and improvement of detection, alerting, incident response playbooks, and threat hunting. Drive investigations, digital forensics, AI-assisted automation, and cross-functional coordination to contain, eradicate, and prevent security incidents while measuring and improving SOC effectiveness.

Manage daily operations of Privilege Identity applications and monitor SIEM services within the IAM infrastructure. Handle end-user escalations, maintain and update documentation, review and improve PI and SIEM processes, and evolve into strategic IAM responsibilities as services expand globally.

Lead SecOps and threat initiatives: detect, investigate, and remediate complex incidents; perform forensics and adversary emulation; develop automation and security tools; run threat exercises; mentor engineers; and communicate risks while driving closure on incidents and security projects.

Lead corporate security strategy and operations across identity, endpoints, device trust, internal networks, SaaS security, and vendor risk. Deliver a current-state assessment and multi-year roadmap, improve monitoring and incident response, establish AI governance and access controls, hire and develop a corporate security team, and represent security in audits, investor/customer diligence, and executive reporting.

Lead and grow a distributed product security engineering team, own secure SDLC and Security Foundations, embed security into CI/CD, conduct threat modeling and automated testing (SAST/DAST/SCA/fuzzing), and manage the FedRAMP security program while partnering across engineering, DevOps, and product.

Lead architecture and implementation of endpoint security, automation, and orchestration across PC, mobile, cloud, and BYOD environments. Design reusable, service-oriented infrastructure, partner with product teams to prioritize automation, evaluate emerging technologies, and ensure scalability, availability, and performance aligned to product roadmaps.

Design, implement, and manage corporate security controls across identity, endpoints, network, and data. Lead IAM/SSO/MFA, EDR/MDM, email/DLP, vulnerability management, vendor risk assessments, phishing simulations, and incident investigations. Support compliance, audits, pen-tests/red-team remediation, and security culture through training and cross-functional collaboration.

Lead and scale a product security organization to define and execute SaaS, cloud, and product security strategy. Embed security into the SDLC/DevSecOps, influence architecture and roadmaps, manage customer security assurance and contract reviews, define secure development standards, oversee third-party/OSS risk, and measure program effectiveness while supporting sales and compliance needs.

Design and manage cloud and product security for AWS, perform security assessments and pen-test remediation, integrate security into DevOps/IaC, mentor engineers, and advise on compliance and threat mitigation across mobile core, applications, and cloud environments.

Lead product security for PTC SaaS: assess and remediate vulnerabilities, drive automation for detection/remediation, consult on secure design and SSDLC, perform threat modeling and application security assessments, and guide engineering teams on cloud, API, mobile, and DevSecOps controls.

Lead assessment and remediation of IT security risks across network, systems, and applications. Perform vulnerability assessments, manage IDS/IPS, coordinate remediation with IT and vendors, develop policies and training, support audits (SOX/PCI/HIPAA), and report findings to stakeholders while mentoring teams and guiding security projects.

Senior UI developer responsible for designing and building responsive React-based UIs and dashboards for cybersecurity analytics. Develop backend services and APIs in Python, integrate security data sources, optimize SQL Server/PostgreSQL reporting, collaborate with stakeholders, influence architecture, and mentor junior developers.

Lead Pinnacle's enterprise cybersecurity and network strategy, governance, and operations. Oversee security technologies (SIEM, EPP, DLP, firewalls, PKI, NAC), incident response, risk and compliance, and secure LAN/WAN/wireless architecture. Drive Microsoft cloud security (Azure, Microsoft 365, Conditional Access, MFA, RBAC, Intune), mentor engineering teams, manage vendors, and partner with executive leadership to modernize security across a multi-site healthcare environment.

Lead threat detection and incident response efforts: investigate security incidents, perform digital forensics, hunt for threats, build detection automation and models, collaborate with engineering and cross-functional teams, and mentor teammates to scale security capabilities across corporate and production environments.

Manage daily operations of Privileged Identity applications and monitor SIEM services within IAM infrastructure. Handle end-user escalations, update documentation, review and improve PI and SIEM processes, and evolve into global strategic IAM responsibilities.

Senior technical authority for security architecture, engineering design, and enterprise risk mitigation. Designs, implements, and configures security solutions across firewalls, endpoints, monitoring, vulnerability management, incident response, and forensics. Leads tactical implementation, performs assessments, product evaluations, project support, and supports the Information Security program and strategic objectives.

Lead and grow Kroll's CrowdStrike Falcon Cloud Security deployment practice: deploy, configure, integrate, tune CNAPP across AWS/Azure/GCP, build detections and SOAR playbooks, validate coverage, mentor consultants, and hand off runbooks to operations.

Lead and grow an offensive security team delivering web application pentests, Defense-in-Depth assessments, and Red Team operations. Drive an automation-first, AI-enabled program, own tooling and vendor contracts, define methodologies and KPIs, coordinate with detection/IR and product teams, and ensure prioritized remediation and continuous validation across IT, cloud, OT, and AI/ML environments.

Lead Triplemoon's information security and compliance program, ensuring HIPAA compliance and SOC 2 readiness. Oversee IT operations via MSP/MSSP, manage vendor risk, coordinate incident response and audits, maintain security policies and documentation, and advise leadership on cloud-first, remote workforce security.

Design and build agentic AI-driven security testing systems and automation frameworks. Integrate static/dynamic analysis, reverse engineering, network analysis, and custom tooling to enable autonomous and human-in-the-loop workflows that scale security testing across mobile, desktop, IoT, and APIs. Prototype, evaluate, and productionize agent orchestration, evaluation, and MLOps infrastructure.