> Markdown version of [/jobs/ext/2548678-external-security-services-information-security-officer](https://www.wearedevelopers.com/jobs/ext/2548678-external-security-services-information-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # External Security Services Information Security Officer - **Company:** SUNY Buffalo State - **Location:** Buffalo, NY, United States - **Salary:** $77,346.0 - $143,611.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cyber Security, System Configuration, Linux, VMware ESX Servers, Hypervisor, Intrusion Detection Systems, Information Systems Security Architecture Professional, Windows Servers, Nmap, Zero Trust Network Access, Security Information and Event Management, Software Requirements Analysis, Wireshark, Snort (Software), Computer Networking Systems, Google Cloud, Metasploit, Vcenter - **Published:** August 10, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=ce8e25ee159abfa5 ## About the Role * A bachelor's degree in a security, computing, programming, networking or related field, and progressive relevant professional work experience.. * Good presentation skills, interpersonal skills, written and communication skills. * Demonstrated familiarity with compliance requirements (e.g., PCI, GLBA, FERPA) and NIST Cybersecurity Framework (CSF) or equivalents. * Demonstrated familiarity with creating and implementing security policies, risk assessments and tabletop exercises. * Demonstrated familiarity with Incident Response (IR) and creating IR Plans. Preferred Qualifications * Master's degree in information security or assurance, such as MSIA, or Certifications related to Security Operations/Architecture/Engineering: ISC2: CISM, CISSP or SSCP.(CISSP-ISSAP or ISSEPa plus); relevant SANS GIAC series; or others, like PNPT, OSCP, CEH, CISA, or CySA+. * Familiarity with Security Tools such as Zeek, Snort, Suricata, Nmap, Metasploit, Wireshark, OpenVAS, Autopsy, etc. * Working or managerial experience in a large organization, especially higher education. * Recent operational or administrative experience with EDR, SIEM, IDS/IPS Systems or Zero Trust Networks. * Experience responding to or advising the response to a security breach, such as notification, chain of custody, guiding forensics, or compliance reporting. * Experience in System Administration for Windows servers, vCenter/ESXi, Linux, Hypervisors, Networking Infrastructure a plus. * Cloud provider experience and/or certifications with any of Azure, AWS, Google Cloud. * Membership in REN-ISAC, MS-ISAC, or other industry ISAC. ## Description ITEC's External Security Services Information Security Officer (ESISO) provides strategic cybersecurity leadership and advisory services to higher education institutions. The role focuses on assessing and implementing security strategies, policies, and frameworks aligned with the unique needs of universities and colleges, while helping manage cyber risk, regulatory compliance, and protection of academic, research, and administrative data. The ESISO serves as a trusted security advisor and advocate to campus and ITEC senior management, clearly communicating risks, priorities, and recommendations in business-relevant terms. The position requires a strong understanding of information security programs within complex U.S. organizations, including higher education, SUNY, and New York State government environments. With team leadership and security program management as core responsibilities, the role also carries a strong project management focus, coordinating deliverables with the Security Services Service Delivery Manager. The ESISO helps define, oversee, and contribute to approved campus security projects. The role also supports campuses during security incidents and advises on security-focused software, system requirements, compliance (e.g., GLBA, PCI, FERPA, HIPAA) and appropriate hardware and software configurations. Please see https://www.itec.suny.edu/itec-vacancies for more information. The location for this position is in Buffalo, NY. An office location at a New York State or SUNY Institution may be possible. Multiple selections may be made from this posting. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)