Cyber Security Engineer

Cyber Security Engineer Location: Larkin Bldg @ Exchange StreetLocation of Job: US:NY:BuffaloWork Type: Full-TimeShift 1 Job Description The Cyber Security Engineer is responsible for engineering, optimizing, and evolving the organizations security platform stack across endpoint, email, identity, cloud, and network security controls. This role focuses on building and tuning security tooling, implementing bestpractice configurations, advancing zero trust enforcement, and integrating security capabilities across a multisite healthcare enterprise. The engineer works closely with application owners, project managers, infrastructure teams, and vendors to deliver secure, reliable, and compliant solutions.In addition to platform engineering responsibilities, this role includes daytoday operational and analyst duties such as handling securityrelated tickets, investigating alerts and incidents, and participating in oncall support. As security platforms, automation, and processes mature, the position is expected to shift toward a greater emphasis on engineering, optimization, and strategic initiatives. The engineer supports alignment with HIPAA and NIST CSF 2.0 and contributes to the ongoing maturity of programs such as DLP, endpoint hardening, secure remote access, and firewall and zerotrust application onboarding. Education And CredentialsBA/BS in Computer Sciences, Information, Cybersecurity, or a related field, or equivalent practical experience (typically 5-7 plus years of hands-on experience in IT, cybersecurity, or related technical roles.) required. Master's degree in computer science, information technology, cybersecurity, or a related field preferred. Experience 3 plus years of experience in cybersecurity roles that include a combination of security engineering, security operations, and analyst responsibilities, including experience in several of the following areas required. 3 years of experience in managed firewall and networksecurity workflowsincluding rule creation, application onboarding, access provisioning, and posture enforcementacross Firewall, VPN, proxy, IAM, and NIPS/WIPS platforms while partnering with PMs, application owners, and infrastructure teams to support secure builds and updates required. 3 years of experience in implemented and enforced zerotrust controls, including NAC, endpoint firewall policies, network segmentation, and secure remote access, with continuous refinement as organizational needs evolved required. . 3 years of experience in engineered and optimized SIEM, EDR, DLP, MDM, and endpointhardening platforms, applying bestpractice configurations to maintain a strong enterprise security posture required. 3 years of experience in developed and tuned detection logic, correlation rules, and alerting to improve signal fidelity and reduce noise across large, modern network environments required. 3 years of experience in built automation using scripting languages and developed SOAR playbooks to streamline response workflows and reduce manual effort required. 3 years of experience in secured Windows and Linux platforms through hardening, monitoring, and alignment with HIPAA, NIST CSF 2.0, and internal compliance requirements required. 3 years of experience in advanced cloudsecurity initiatives and evaluated emerging technologies to ensure secure adoption and integration into existing controls required. 3 years of experience in participated in oncall rotations for security incidents and fulfilled securitycentric service requests including access reviews, secure remote access setup, and network share provisioning required. 3 years of experience in maintained documentation of security controls, configurations, and procedures; identified opportunities to enhance the organizations overall security posture. Working ConditionsEssential: * Weight Requirement - Light (up to 20 lbs) * Job DetailsDepartment: KH Cyber Security * Standard Hours Bi-Weekly: 75.00 * Weekend/Holiday R