Principal Cybersecurity Infrastructure Engineer (AI)

Location: Buffalo, NY, United States; hybrid position with four days onsite at the Seneca One Buffalo location and the flexibility to work from home one day per week.

Salary: $139,700.00–$232,900.00 annual (USD).

Company

M&T Bank is a financial institution focused on enterprise banking operations and regulated cybersecurity, technology, risk, and data governance.

What you will do

• Design, implement, configure, and optimize enterprise Security Service Edge, Web/Cloud Proxy, CASB, DLP, ZTNA, Enterprise Browser, cloud security, and Zero Trust platforms.
• Develop data protection strategies covering endpoints, cloud services, SaaS applications, collaboration platforms, email, AI applications, data classification, labeling, insider risk, and lifecycle management.
• Lead complex security platform deployments, testing methodologies, validation frameworks, operational baselines, policy tuning, and security effectiveness metrics.
• Automate security operations through APIs, orchestration platforms, AI-driven capabilities, and security workflows.
• Partner with Cybersecurity, Technology, Legal, Risk, Compliance, Data Governance, business, and executive stakeholders on transformation initiatives and regulatory requirements.
• Advise leadership on security investments, vendor relationships, budgets, platform rationalization, roadmaps, risk management, and future-state architecture.

Requirements

• Bachelor’s degree and at least 7 years of relevant work experience, or a combined minimum of 11 years of higher education and/or work experience in lieu of a degree.
• Advanced understanding of Security Service Edge, Secure Web Gateway, CASB, ZTNA, Enterprise Browser, Data Protection, and Zero Trust Architecture principles.
• Expertise designing enterprise-scale cloud security architectures across hybrid and multi-cloud environments.
• Expert knowledge of security architecture, infrastructure lifecycle management, vendor best practices, and enterprise systems design.
• Ability to translate business, regulatory, and operational requirements into scalable security solutions and technical implementations.
• Advanced critical thinking, risk analysis, problem-solving, communication, interpersonal, dataset analysis, security telemetry, and operational metrics skills.
• Experience partnering with senior leaders, influencing stakeholders and executive leadership, collaborating cross-functionally, supporting organizational change, and driving enterprise-wide security initiatives through indirect leadership.
• Ability to develop multi-year technology roadmaps and strategic plans for security platforms.
• Ability to implement controls supporting NYS DFS, GLBA, FFIEC guidance, data privacy obligations, and internal risk management standards.

Nice to have

• Experience securing AI platforms, generative AI applications, and AI-enabled business processes through governance, monitoring, and AI security solutions.
• Industry certifications such as CISSP, CCSP, GIAC, Microsoft Security Certifications, or equivalent.

Culture & Benefits

• Hybrid work arrangement with four onsite days and one work-from-home day per week.
• Collaboration across Cybersecurity, Technology, Legal, Risk, Compliance, Data Governance, and business functions.
• Opportunity to serve as a trusted technical advisor and mentor for less experienced engineers.
• Work aligned with risk appetite, internal controls, audit findings, regulatory requirements, and continuous cybersecurity improvement.
• No supervisory responsibilities.