The Bank sponsors individuals for TN and H-1B transfers on a case by case basis. Please note that this position is not open to anyone on an F-1 student visa including those eligible for CPT/OPT or the Stem OPT extension.

This role offers a hybrid work schedule; offering the flexibility to work remotely two days a week, while providing the opportunity for in-person collaboration at our Buffalo, NY Tech Hub.

Overview:

We are seeking a highly skilled and experienced Azure Cloud Cybersecurity Product Security Specialist to join our dynamic and fast-paced cybersecurity team. In this role, you will act as a player-coach, working closely with application developers, architects, and security teams to ensure that applications are designed, developed, refactored, and re-engineered securely. The ideal candidate will have deep expertise in Azure cloud environments and will play a critical role in guiding security best practices in a highly regulated banking organization.

You will be responsible for driving secure development practices within teams, while also acting as a mentor and coach to junior security team members and developers. This is a hands-on technical leadership role where you will collaborate daily with development teams, providing both strategic guidance and practical support to ensure the security of cloud-based applications.

Primary Responsibilities:

• Hands-on Development Support: Work day-to-day with developers and DevOps teams to integrate security into the application lifecycle, including design, refactoring, and re-engineering of applications in Azure environments.

• Security Best Practices: Lead the development and implementation of secure coding and development practices, including threat modeling, secure code reviews, and risk-based security assessments.

• Cloud Security Expertise: Provide deep technical guidance on Azure cloud security, including identity and access management (IAM), encryption, network security, container security, and more.

• Leadership & Mentoring: Act as a player-coach by leading by example in technical engagements while mentoring junior security engineers and developers on secure coding and development practices.

• Compliance & Regulation: Ensure all application development meets the rigorous standards of the banking industry and adheres to regulatory requirements (e.g., FFIEC, NIST, GDPR, SOX).

• Risk Management: Identify, assess, and mitigate security risks throughout the application development lifecycle, ensuring proactive measures are in place to protect sensitive data and services.

• Collaboration: Work closely with cross-functional teams including product owners, system architects, and infrastructure teams to ensure security is built into the organization’s cloud solutions from the ground up.

• Security Automation: Champion the use of automation in security testing, secure CI/CD pipelines, and DevSecOps practices to enhance security posture and streamline processes.

• Incident Response: Be part of the team that develops response protocols for application security incidents and helps manage incident resolution, including root cause analysis and remediation.

• Continuous Improvement: Stay up-to-date on emerging security threats, Azure security features, and regulatory changes to continuously improve the security of applications and systems.

• Understand and adhere to the Company’s risk and regulatory standards, policies and controls in accordance with the Company’s Risk Appetite.  Identify risk-related issues needing escalation to management.

• Promote an environment that supports diversity and reflects the M&T Bank brand.

• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.

• Complete other related duties as assigned.

Scope of Responsibilities:

The position works under supervision of Technology management.  The jobholder is competent to work independently on all high level systems analysis and technical phases of development.  The position is capable of managing the activities of others on any scope project and often leads project activities.  The jobholder monitors staff performance on assigned projects related to their overall abilities and effectiveness in completing projects within schedules.  The position participates in the development of less experienced staff.  The position interacts with senior management, other technology personnel, clients and vendors.  The jobholder provides backup to highe