Top Cyber Security Jobs in Rochester, NY

Provides technical leadership for cybersecurity engineering on AWACS aircraft and ground-system modernization programs. Responsibilities include secure network and communications architecture, RMF compliance, ATO/IATT and POA&M development, cyber risk assessments, avionics and mission-system integration, TEMPEST compliance, security requirements, and design reviews. The role supervises personnel and collaborates with systems, software, avionics, and test engineering teams. Active Secret clearance and significant military aviation cybersecurity experience are required, with 25–35% domestic and international travel.

Lead cybersecurity across the lifecycle of military aircraft, avionics, mission, communications, and ground systems. Manage DoD RMF, ATO, IATT, security documentation, vulnerability assessments, risk analysis, compliance reviews, and mitigation strategies. Integrate cybersecurity requirements into system architectures, support TEMPEST and Program Protection activities, assess critical components and supply-chain risks, and participate in laboratory, ground, and flight testing. Coordinate with engineering teams and support audits, configuration management, and cybersecurity impact assessments.

Manage cybersecurity for facility-related IT and OT control systems supporting U.S. Government operations on Diego Garcia. Responsibilities include system administration, network and access control, vulnerability and threat reviews, incident reporting, audit logging, certification and accreditation support, backups, recovery procedures, compliance, and system maintenance. The role advises leadership, coordinates with stakeholders, maintains security documentation, and ensures reliable operation of critical services in a remote overseas environment.

Designs and scales AI-driven security GRC automation, including compliance evidence collection, control testing, risk assessment, audit preparation, and workflow integration. Builds scripts, bots, APIs, and AI/LLM solutions; integrates GRC platforms with security and IT systems; establishes quality controls and guardrails; monitors automation risk and performance; and partners with technical and business stakeholders to improve security compliance maturity.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Lead Runpod’s security organization and own the security posture of its cloud platform, infrastructure, and corporate environments. Responsibilities include security strategy, cloud and application security, SecOps, GRC, compliance certifications, secure software development, threat modeling, vulnerability management, incident response, vendor risk, security automation, and infrastructure security. Build and mentor a distributed security team while partnering with Engineering, Infrastructure, Product, GTM, and Legal to protect customer AI workloads and support scalable growth.

Build and lead product and application security efforts, partnering with Product and Engineering on secure design, development, code reviews, vulnerability discovery, and security guardrails. Develop AI-native security tooling and support incident response, vulnerability management, penetration testing, and security operations. Help establish secure development practices and scalable security systems across Headway’s platform.

Develop and improve Tailscale’s security and privacy features, identify and resolve technical vulnerabilities, conduct security audits, perform threat modeling, and guide engineering teams on secure coding. The role spends at least half its time writing software and requires knowledge of application security, web vulnerabilities, client-side security, API flaws, cryptography, and networking protocols.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Drive technical pre-sales engagements for Microsoft Security: build demos/PoCs, lead hands-on workshops, design secure cloud architectures, resolve technical blockers, and advise customers on improving security posture using Microsoft security products and AI-enabled solutions.

Own and improve network, firewall, cloud, endpoint, identity, email, and SaaS security controls. Responsibilities include firewall administration, VPNs, segmentation, secure architecture, traffic and log analysis, incident investigation, vulnerability remediation, security monitoring, technical project support, compliance evidence, and automation. The role collaborates with Infrastructure and DevOps teams, troubleshoots complex connectivity and security issues, and applies least-privilege, Zero Trust, and defense-in-depth principles.

Provides security architecture and enablement across SaaS platforms, APIs, custom applications, data integrations, cloud environments, and AI workflows. Partners with product, engineering, data, architecture, identity, infrastructure, enterprise, and procurement teams to conduct threat reviews, develop secure-by-design patterns, assess vendors, implement guardrails, and manage risks. Translates security requirements into practical solutions, supports enterprise data strategy and M&A integration, and mentors teams as a trusted security advisor.

Investigate and respond to sophisticated security threats across Microsoft’s ecosystem. Responsibilities include analyzing alerts and telemetry, determining incident scope and root cause, coordinating containment and remediation, improving detection logic and automation, and collaborating with threat intelligence, engineering, product, and research teams. The role also contributes to documentation, mentorship, operational excellence, and security strategy within a globally distributed 24/7 investigations team.

Leads technical security sales engagements for K-12 and community college customers through demonstrations, workshops, whiteboarding, hackathons, and proofs of concept. Designs secure cloud and hybrid architectures, resolves technical blockers, advises on Zero Trust, XDR, AI security, and compliance, and supports production deployments. Builds relationships with developers, platform leaders, partners, and customer success teams while promoting Microsoft security, cloud, and AI solutions.

Manages enterprise information assurance and cybersecurity support for DHS/TSA, including incident response, vulnerability management, risk and compliance services, RMF-based assessment and authorization, security audits, POA&M remediation, and security architecture. Coordinates cybersecurity teams, stakeholders, system owners, and government offices while monitoring performance, identifying risks, and recommending mitigation strategies.

Leads enterprise AI Security and GenAI data protection, owning the AI Gateway from evaluation through deployment and ongoing operations. Designs controls for prompts, uploads, browser traffic, copilots, agents, and integrations; implements monitoring, coaching, redaction, quarantine, and blocking. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures effectiveness, supports audit readiness, and partners with business and technology teams to enable responsible AI adoption.

Leads regional enterprise security sales by serving as a cloud security expert, shaping opportunities, advising account teams, managing executive relationships, and orchestrating technical teams and partners. Conducts architecture reviews, demos, proof-of-concepts, pilots, ROI/TCO analyses, and consultative engagements to promote Microsoft security solutions, Zero Trust adoption, and customer business outcomes.

Leads proactive cybersecurity consulting engagements from planning through delivery. Manages consulting teams, client relationships, budgets, timelines, and engagement outcomes; presents findings to technical and executive stakeholders; supports business development, capability building, and methodology development. Requires extensive client-facing cybersecurity experience, strong risk and governance knowledge, excellent communication skills, and international travel.

Provides technical pre-sales leadership for data security solutions, including demos, proofs of concept, architecture workshops, and secure cloud or hybrid deployments. Advises customers on data security posture, Microsoft Purview, AI application security, and scalable architectures. Builds developer and platform-lead relationships, resolves technical blockers, develops technical win strategies, and collaborates with product engineering. Represents Microsoft in customer and developer communities.

Leads major cyber incident response and command activities, performing digital forensics, threat hunting, containment, recovery, and malware triage across endpoint, cloud, network, identity, Windows, and Linux environments. Coordinates technical teams, mentors analysts, briefs executives, develops response playbooks and training, automates investigations with scripting, and partners with detection engineering and threat intelligence teams to improve SOC capabilities.

Assists the CISO in managing a bank’s information security program, including cybersecurity strategy, risk assessments, policy development, regulatory compliance, audits, incident response, business continuity, security metrics, employee training, and oversight of security technologies. The role coordinates with IT, security, and business teams to protect data and technology assets and meet banking, OCC, and FFIEC requirements.

Own and scale Komodo Health’s application and product security program across software repositories, CI/CD pipelines, cloud deployments, and AI features. Build security automation, configure SAST/SCA/DAST tooling, conduct threat modeling and penetration-test remediation, secure software supply chains, and establish AI security guardrails. Partner closely with Engineering and Forward Deployed Engineering teams, support customer security reviews, improve vulnerability management, and maintain SOC 2 readiness.

Leads a team of intelligence analysts and translates security priorities into threat intelligence requirements. Oversees intelligence production workflows, establishes standards, reviews finished intelligence products, tracks sophisticated adversaries and ransomware campaigns, and partners with engineering and external organizations to improve customer protection. The role also manages escalations, communicates technical findings and business impact, and supports security objectives across Microsoft and its customers.

Leads hypothesis-driven threat hunting, cloud vulnerability analysis, remediation, and incident response across AWS, Azure, GCP, and OCI. Administers Qualys and Tenable, analyzes SIEM and cloud telemetry, investigates threats, prioritizes vulnerabilities, remediates misconfigurations and IAM risks, develops detections and hunt playbooks, documents findings, briefs stakeholders, and mentors junior engineers.