{"id":3479334,"url":"https://alion.io/job/mt-bank-principal-cybersecurity-infrastructure-engineer","title":"Principal Cybersecurity Infrastructure Engineer","company":{"id":4312,"name":"M&T Bank","domain":"mtb.com","url":"https://alion.io/company/mtb","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":82,"open_postings":65,"ghost_share":0,"stale_share":0.708,"repost_share":0.015,"time_to_fill_p50_days":36,"computed_at":"2026-11-03T05:54:40Z"}},"role":"DevOps","role_family":"DevOps","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Buffalo, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":139700,"max":232900,"currency":"USD","period":"year","gross":null,"usd_annual":232900},"salary_estimate":null,"experience_years_min":11,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-27T00:00:00Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-11-04T03:36:31Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"This role is four days onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per week\nOverview: \nResponsible for designing, implementing, and optimizing enterprise security architectures, platforms, and frameworks that protect the organization's users, applications, data, and cloud services. Leads the development and enhancement of Security Service Edge (SSE) capabilities including Web/Cloud Proxy, Data Loss Prevention (DLP), Cloud Access Security Broker (CASB), Zero Trust Network Access (ZTNA), and Enterprise Browser. Solves highly complex cybersecurity challenges while aligning security outcomes with business objectives, regulatory requirements, and evolving threat landscapes. Acts as a knowledge resource and mentor for less experienced engineers across multiple cybersecurity disciplines. Completes day-to-day engineering support activities and strategic transformation initiatives.\nPrimary Responsibilities:\nPartner with senior engineers and leadership to define enterprise SSE, Zero Trust, and data protection strategies that reduce organizational risk while supporting business transformation, cloud adoption, hybrid work, and AI enablement initiatives.\nLead architecture, engineering, configuration, and deployment of enterprise security platforms including Web/Cloud Proxy, CASB, DLP, ZTNA, Enterprise Browser, and other security controls supporting secure access and data protection.\nDefine testing methodologies, validation frameworks, and security effectiveness metrics to ensure comprehensive assessment of data protection technologies across the organization.\nLead deployment efforts for complex systems and technologies, coordinating with cross-functional teams and providing technical oversight to ensure successful implementation.\nEstablish tuning standards, operational baselines, and best practices for data protection policies, cloud access governance, email protection controls, browser security, and Zero Trust enforcement mechanisms.\nLead automation initiatives utilizing APIs, orchestration platforms, AI-driven capabilities, and security workflows to improve operational efficiency, accelerate response times, and reduce manual effort.\nDesign and implement comprehensive data protection strategies to identify, classify, govern, monitor, and protect sensitive data across endpoints, cloud services, collaboration platforms, email, and SaaS applications.\nArchitect and enhance Zero Trust Network Access solutions that replace legacy network-centric security models with identity, device, application, and risk-aware access controls.\nCollaborate with stakeholders across Cybersecurity, Technology, Legal, Risk, Compliance, Data Governance, and Business Units to integrate security controls seamlessly into business processes and digital transformation initiatives.\nDrive continuous improvement across security platforms and engineering teams by evaluating emerging technologies, threat intelligence, industry trends, and regulatory requirements to improve Cybersecurity effectiveness.\nMaintain strategic vendor relationships for key security technologies, providing oversight for issue resolution, product roadmaps, and operational optimization.\nAdvise leadership on security technology investments, budget planning, platform rationalization, and future-state architecture decisions supporting enterprise security objectives.\nLead adoption and governance of AI security capabilities, ensuring visibility, risk management, policy enforcement, and secure integration of AI applications and services throughout the enterprise.\nUnderstand and adhere to the Company's risk and regulatory standards, policies, and controls in accordance with the Company's Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues requiring escalation to management.\nPromote an environment that supports belonging and reflects the M&T Bank brand.\nMaintain M&T internal control standards, including timely implementation of internal and external audit findings together with any issues raised by external regulators, as applicable.\nComplete other related duties as assigned.\nScope of Responsibilities:\nDesigns and implements security architectures incorporating Web/Cloud Proxy, Data Loss Prevention, Cloud Access Security Broker (CASB), Zero Trust Network Access (ZTNA), Enterprise Browser, and related capabilities to secure user access to applications, internet resources, and organizational data regardless of location.\nDesigns and implements enterprise data protection strategies and technologies to prevent unauthorized access, transmission, exposure, or loss of sensitive information across endpoints, cloud environments, SaaS platforms, collaboration tools, email, and AI applications.\nArchitects and manages data classification, labeling, information protection, insider risk management, data lifecycle management, compliance, and governance capabilities.\nDevelops and implements enterprise Zero Trust strategies focused on continuous verification, least privilege access, segmentation, identity-based security, device trust, and risk-adaptive access control models.\nDesigns and implements security controls, governance frameworks, monitoring, and risk management practices for enterprise AI platforms and services, including AI application discovery, data protection, regulatory compliance, and AI risk visibility.\nDesigns and implements security controls and architectures protecting cloud infrastructure, SaaS applications, cloud workloads, and enterprise data from cybersecurity threats and malicious activities.\nPartners with leaders within Cybersecurity, Technology, Data Governance, Risk Management, and Executive Leadership across the organization.\nExercises judgment in selecting methods, technologies, architectural patterns, and implementation approaches to achieve strategic security objectives. Operates with significant autonomy and serves as a trusted technical advisor on complex enterprise security initiatives.\nRecognized subject matter expert across multiple cybersecurity domains including SSE, Data Protection, Zero Trust Architecture, Cloud Security, and AI Security\nManager Responsibilities:\nNo supervisory responsibilities\nEducation and Experience Required:\nBachelor's degree and a minimum of 7 years’ relevant work experience, or in lieu of a degree, a combined minimum of 11 years’ higher education and/or work experience\nBachelor's degree and a minimum of 7 years’ relevant work experience, or in lieu of a degree, a combined minimum of 11 years’ higher education and/or work experience\nAdvanced understanding of Security Service Edge (SSE), Secure Web Gateway (SWG), CASB, ZTNA, Enterprise Browser, Data Protection, and Zero Trust Architecture principles.\nExpertise in designing enterprise-scale cloud security architectures across hybrid and multi-cloud environments.\nEducation and Experience Preferred:\nExpert knowledge of security architecture, infrastructure lifecycle management, vendor best practices, and enterprise systems design.\nExcellent ability to translate business, regulatory, and operational requirements into scalable security solutions and technical implementations.\nAdvanced level of critical thinking, risk analysis, and problem solving.\nExcellent communication and interpersonal skills, effectively articulating complex technical concepts to executive, technical, risk, audit, and business audiences.\nExperience partnering with senior leaders to design and implement strategic cybersecurity solutions that support business objectives.\nExperience effectively collaborating with and influencing peers, stakeholders, and executive leadership.\nDemonstrated proficiency in cross-functional collaboration, decision-making, and organizational change management.\nAbility to effectively serve in an indirect leadership role while driving enterprise-wide security initiatives.\nAdvanced ability to analyze large datasets, security telemetry, and operational metrics to identify trends and drive informed decision-making.\nExperience securing AI platforms, generative AI applications, and AI-enabled business processes using governance, monitoring, and AI security solutions.\nDevelop and maintain multi-year technology roadmaps and strategic plans for assigned security platforms, ensuring alignment with enterprise architecture, cybersecurity strategy, and business priorities\nDesign and implement security controls supporting regulatory and compliance requirements including NYS DFS, GLBA, FFIEC guidance, data privacy obligations, and internal risk management standards.\nIndustry certifications such as CISSP, CCSP, GIAC, Microsoft Security Certifications, or equivalent preferred.\nM&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $139,700.00 - $232,900.00 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.\nLocation\nBuffalo, New York, United States of America","description_format":"text","description_chars":9103,"description_truncated":false,"requirements":{"experience_years_min":11,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Financial Services","Network Security"],"lifecycle":[{"event":"open","at":"2026-10-29T19:42:46Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 67 · green card filings: 29","filings_12m":67,"filings_prev_12m":118,"green_card_filings_12m":29,"median_offered_wage_usd":132031,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":47}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":7,"expected_fill_days":36,"reasons":["conf:0","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":{"stated_usd_annual":232900,"is_top_pay":true},"html_url":"https://alion.io/job/mt-bank-principal-cybersecurity-infrastructure-engineer","json_url":"https://alion.io/job/mt-bank-principal-cybersecurity-infrastructure-engineer.json","meta":{"generated_at":"2026-11-04T06:12:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9638,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4312},"rest":"https://alion.io/mcp/rest/get_company?id=4312"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmt-bank-principal-cybersecurity-infrastructure-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmt-bank-principal-cybersecurity-infrastructure-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmt-bank-principal-cybersecurity-infrastructure-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mt-bank-principal-cybersecurity-infrastructure-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmt-bank-principal-cybersecurity-infrastructure-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3479334}},{"tool":"search_jobs","arguments":{"company":"mtb.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3479334},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}