The Bank sponsors individuals for TN and H-1B transfers on a case by case basis. Please note that this position is not open to anyone on an F-1 student visa including those eligible for CPT/OPT or the Stem OPT extension.
This role offers a hybrid work schedule; offering the flexibility to work remotely two days a week, while providing the opportunity for in-person collaboration at our Buffalo, NY Tech Hub.
Overview:
We are seeking a highly skilled and experienced Senior Cloud Cybersecurity Engineer to join our dynamic and fast-paced cybersecurity team. In this role, you will act as a player-coach, working closely with application developers, architects, and security teams to ensure that applications are designed, developed, refactored, and re-engineered securely. The ideal candidate will have deep expertise in cloud provider environments (Azure (preferred), AWS, and GCP) and will play a critical role in guiding security best practices in a highly regulated banking organization.
You will be responsible for driving secure development practices within teams, while also acting as a mentor and coach to junior security team members and developers. This is a hands-on technical leadership role where you will collaborate daily with development teams, providing both strategic guidance and practical support to ensure the security of cloud-based applications.
Primary Responsibilities:
- Hands-on Development Support: Work day-to-day with developers and DevOps teams to integrate security into the application lifecycle, including design, refactoring, and re-engineering of applications in cloud environments.
- Security Best Practices: Lead the development and implementation of secure coding and development practices, including threat modeling, secure code reviews, and risk-based security assessments.
- Cloud Security Expertise: Provide deep technical guidance on cloud security, including identity and access management (IAM), encryption, network security, container security, and more.
- Leadership & Mentoring: Act as a player-coach by leading by example in technical engagements while mentoring junior security engineers and developers on secure coding and development practices.
- Compliance & Regulation: Ensure all application development meets the rigorous standards of the banking industry and adheres to regulatory requirements (e.g., FFIEC, NIST, GDPR, SOX).
- Risk Management: Identify, assess, and mitigate security risks throughout the application development lifecycle, ensuring proactive measures are in place to protect sensitive data and services.
- Collaboration: Work closely with cross-functional teams including product owners, system architects, and infrastructure teams to ensure security is built into the organization’s cloud solutions from the ground up.
- Security Automation: Champion the use of automation in security testing, secure CI/CD pipelines, and DevSecOps practices to enhance security posture and streamline processes.
- Incident Response: Be part of the team that develops response protocols for application security incidents and helps manage incident resolution, including root cause analysis and remediation.
- Continuous Improvement: Stay up-to-date on emerging security threats, security features across multiple cloud providers, and regulatory changes to continuously improve the security of applications and systems.
- Understand and adhere to the Company’s risk and regulatory standards, policies and controls in accordance with the Company’s Risk Appetite. Identify risk-related issues needing escalation to management.
- Promote an environment that supports diversity and reflects the M&T Bank brand.
- Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
- Complete other related duties as assigned.
Education and Experience Required:
Combined minimum of 10 years’ higher education and/or experience in systems design, management, and/or architecture
Thorough understanding of the system development and infrastructure lifecycle and architecture, vendor best practices, IT Service Management, and systems design
Education and Experience Preferred:
Bachelor’s degree in Computer Science or Computer Engineering
Minimum 10 years’ professional experience in a technical engineering position involving infrastructure design technologies, data management and interchange, system design and/or development for complex applications
Ability to translate complex business/functional requirements into structured high quality implementations using any variety of industry standard approaches
Demonstrated ability to develop alternative solutions to complex problems and recommend the best solution to the technology business, and project teams
Deep expertise in cloud provider environments (Azure (preferred), AWS, and GCP)
#LI-JB3 #Hybrid
M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $143,874.91 - $239,791.52 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.
LocationWilmington, Delaware, United States of America
Top Skills
What We Do
Waste Connections, Inc. is an integrated solid waste services company that provides waste collection, transfer, disposal and recycling services in mostly exclusive and secondary markets in the U.S. and Canada. Through its R360 Environmental Solutions subsidiary, the Company is also a leading provider of non-hazardous oilfield waste treatment, recovery and disposal services in several of the most active natural resource producing areas in the United States, including the Permian, Bakken and Eagle Ford Basins. Waste Connections serves more than six million residential, commercial, industrial, and exploration and production customers from a network of operations in 39 states, six provinces and the District of Columbia. The Company also provides intermodal services for the movement of cargo and solid waste containers in the Pacific Northwest.
Our corporate strategy targets secondary and suburban markets that have strong demographic growth trends and where competitive barriers to entry can be developed. We seek to avoid highly competitive, large urban markets and target markets where we can provide either non-integrated or integrated solid waste services under exclusive arrangements, or markets where we can be integrated and attain high market share. We are a leading provider of solid waste services in most of our markets, and approximately 50% of our revenues are derived from market areas where we have franchise or exclusive rights to provide our waste services.
