Top Cyber Security Jobs in Rochester, NY

Lead technical response to security incidents across Twilio's global cloud infrastructure. Triage, contain, remediate, document incidents, drive post-incident improvements, automate workflows (SOAR), extend SIEM capabilities, participate in on-call rotation, mentor teammates, and collaborate with R&D to improve detection and threat mitigation.

Investigate digital security incidents, platform abuse, and threats affecting ClickUp’s product and internal systems. Collect evidence, identify indicators, determine impact, and drive remediation. Build AI-assisted and agentic workflows for forensics, incident response, and audits. Develop product defenses, automated controls, and response tooling while partnering with engineering, product, data, and operations teams. Mentor colleagues, communicate evidence-based findings, and improve security processes through automation.

Design and implement infrastructure security for AWS, Kubernetes, identity, networks, workloads, and CI/CD. Build agentic security tooling, lead detection and incident response, enforce least privilege, conduct architecture reviews, automate vulnerability and compliance monitoring, and guide teams toward secure designs. The role also investigates cloud security events, hardens infrastructure, creates audit evidence, and communicates technical risks to non-technical partners.

Run and maintain an enterprise Burp Suite DAST program, including authenticated scans, CI/CD integrations, and Linux troubleshooting. Use Veracode SAST and development tools to integrate security testing into pipelines. Design enterprise security controls, assess web applications against OWASP and related standards, and align security activities with NIST, FIPS, and FedRAMP requirements. The role supports a federal financial regulatory agency and requires U.S. citizenship and Public Trust suitability.

Build, customize, and maintain secure configuration baselines using CIS Benchmarks and DISA STIGs. Map technical settings to FISMA and NIST controls, develop baselines from vendor documentation, apply NVD and CVE data, and verify compliance through Tenable scans. The role requires independent ownership, collaboration with system teams, clear risk communication, and support for baseline rollout across servers, networks, cloud, SaaS, and mobile platforms.

Executes end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational environments. Develops offensive tooling, implants, and evasion tradecraft; operates and improves AI-driven security agents; discovers and exploits vulnerabilities; and communicates findings to customers and internal security teams. The role also contributes to operational playbooks, product hardening, detection improvements, and scalable offensive security practices.

The Application Security Engineer establishes security standards, performs penetration testing and secure code reviews, conducts threat modeling, and partners with developers to remediate vulnerabilities. The role manages WAFs, CI/CD security, identity and access controls, software supply chain security, cloud architecture reviews, AI-assisted development risks, privacy, payment security, and incident response. It also governs the secure SDLC, vulnerability management, secrets protection, API security, and security tooling across development teams.

Leads the university’s information security architecture and engineering strategy, including cloud, network, endpoint, application, data, identity, and AI security. Establishes zero trust, DevSecOps, infrastructure-as-code, and security-as-code practices; oversees architecture, technology selection, compliance alignment, automation, and AI security initiatives. Builds roadmaps, secures funding, manages strategic initiatives, and leads, recruits, mentors, and develops security architects, engineers, and managers while advising executive leadership.

Researches and analyzes cybercrime threats, threat actors, tools, techniques, and vulnerabilities. Develops customer-facing threat intelligence profiles, briefs internal and external stakeholders, and adapts content to business needs and feedback. The role also synthesizes research into mitigation recommendations, collaborates across teams, tracks emerging attacks, and contributes to security products and professional publications.

Lead the design and implementation of Aalyria’s security platform, including identity, authentication, authorization, PKI, workload identity, secrets, key management, audit evidence, and security standards. Build systems that operate securely in commercial, government, classified, and disconnected environments. Set technical direction across teams, mentor engineers, threat-model distributed systems, and operate production services through upgrades, maintenance, and incidents.

Build and operate Spacetime’s security platform, including authentication, authorization, PKI, workload identity, secrets and key access, SDKs, audit logging, and threat mitigations. Develop secure capabilities for commercial, government, classified, and disconnected environments. Collaborate with product and infrastructure teams, support production operations, participate in on-call and incident response, and maintain hardened supply-chain and deployment controls.

Own and build LiveKit’s vulnerability management and security operations program. Responsibilities include deploying scanning tools, triaging vulnerabilities, assessing severity, assigning remediation owners and SLAs, creating dashboards, automating remediation workflows, and collecting compliance evidence. The role partners closely with engineering and compliance teams and may involve agentic security automation, incident response, application security, and AI security.

Designs, implements, and maintains enterprise security solutions across networks, endpoints, email, identity, and data protection. Responsibilities include firewall and VPN management, threat detection, incident response, vulnerability management, security audits, penetration testing, SOC 2 compliance, phishing response, SIEM monitoring, threat hunting, and security assessments. The role also supports Azure security, third-party risk questionnaires, technical design reviews, and off-hours security operations.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Owns Blueberry’s day-to-day security operations, including vulnerability management and remediation across GCP and Python/Django applications. Maintains detection, logging, monitoring, incident readiness, backups, endpoint security, network controls, access management, and IT administration. The role requires production Python experience, Linux administration, cloud experience, and hands-on familiarity with security tools and controls.

Supports cybersecurity control implementation, security baselines, compliance assessments, risk mitigation, audits, documentation, and vulnerability remediation. Develops and customizes CIS and STIG benchmarks, translates baseline requirements into FISMA and NIST controls, and collaborates with technical teams to protect client systems. The role requires five-plus years supporting IT operations and eligibility for a Public Trust determination. Preferred experience includes cloud, networking, automation, infrastructure-as-code, containers, serverless technologies, monitoring, and security-related certifications.

Build and operate secure, reliable Azure GPU infrastructure for distributed AI training and reinforcement-learning workloads. Develop fleet-level automation, infrastructure-as-code, remediation, drift detection, and deployment tooling. Troubleshoot multi-node, multi-GPU, networking, performance, and reliability issues while translating ambiguous research needs into production solutions. Partner with engineers, researchers, and stakeholders on architecture, security, and delivery decisions, and contribute through code reviews, technical collaboration, and mentoring.

Research and analyze threat intelligence, attacker tactics, vulnerabilities, and forensic evidence. Conduct threat hunts and investigations, develop detection logic and security recommendations, create customer and internal briefings, produce threat content, and improve Microsoft security tooling and investigative practices. The role supports global efforts to identify adversary activity, catalog TTPs, and protect enterprise customers.

Leads enterprise network security engineering for critical infrastructure, including designing, implementing, maintaining, and securing network, firewall, cloud, SCADA, and infrastructure technologies. Oversees technical implementation plans, incident response, change management, compliance with NERC/CIP requirements, contractor delivery, and project teams. Provides 24x7 on-call support, technical mentoring, security architecture guidance, and operational leadership across routing, switching, authentication, automation, and network access control environments.

Leads security operations strategy, incident response, penetration testing, SOC coordination, detection engineering, M&A security assessments, control improvement, security engineering teams, and vendor management. Acts as the CISO’s technical deputy while remaining hands-on with security investigations and engineering. The role requires expertise across cloud, network, identity, detection, and incident response, with strong Azure and Microsoft Sentinel experience.

Leads end-to-end information security and IT infrastructure projects, including risk remediation, security tool deployments, compliance initiatives, and process improvements. Manages project plans, resources, risks, dependencies, stakeholder communications, governance requirements, audit documentation, and change adoption while coordinating technical and business teams.

Leads the enterprise Cybersecurity and IT Audit program, including risk assessments, audit strategy, IT SOX and ITGC oversight, cybersecurity and technology audits, advisory reviews, and Audit Committee reporting. Partners with technology leaders on governance, cloud, privacy, resilience, third-party risk, AI, and emerging technology initiatives. Manages audit budgets, co-sourced resources, talent development, and innovation through analytics, automation, and AI-enabled audit techniques.

Leads enterprise AI security and GenAI data protection, owning the AI Gateway from evaluation through deployment and operations. Designs monitoring, coaching, redaction, quarantine, and blocking controls for prompts, uploads, browser traffic, copilots, agents, and integrations. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures control effectiveness, and supports audit and regulatory readiness while enabling responsible AI adoption.

Lead Buffer’s security strategy and execution as a hands-on security engineer. Responsibilities include application and API security, secure development practices, AI threat modeling, incident leadership, vulnerability disclosure, SOC 2 and customer compliance, security automation, and infrastructure risk assessment. The role partners closely with engineering and business teams, writes and reviews code, supports on-call operations, and establishes security standards in a distributed SaaS environment.

Leads enterprise product and AI security strategy, secure-by-design implementation, SDLC controls, AI model risk management, product security architecture, vulnerability and incident management, software supply-chain integrity, regulatory alignment, and acquisition integration. Oversees security teams and partners across operating companies, establishes metrics and standards, supports customer security requirements, and reports program effectiveness and risk to executive leadership and the Board.