Engineer/Sr Engineer, IT Cybersecurity Operations

Engineer/Sr Engineer, IT Cybersecurity Operations

Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you'll travel the world, grow your expertise, and become the best version of you. As you embark on a new journey, you'll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop onboard!

Why you'll love this job: As one diverse, high-performing team dedicated to technical excellence, you will focus relentlessly on delivering unrivaled digital products that drive a more reliable and profitable airline. In the Cybersecurity Operations domain, you will be responsible for the cyber defense of technology assets by managing daily activities, threat detection and incident response, security tool implementation, and team development. You will be expected to balance technical oversight, and business alignment to keep the organization's digital assets safe while ensuring the team is empowered, the systems are resilient, and the entire operation runs smoothly, effectively, and proactively.

Additional information about the skills needed for this position is listed in the Skills, Licenses & Certifications section below.

What you'll do: Work closely with senior leadership, project managers, and stakeholders to align cybersecurity initiatives with corporate objectives and ensure successful project delivery. Clearly convey project risks and strategies to senior management and stakeholders, ensuring transparency and informed decision-making. Ensure adherence to cybersecurity standards and regulations, providing regular reports on security practices and compliance to stakeholders. Oversee the integration of physical security measures with cybersecurity protocols to ensure comprehensive protection and monitoring of our infrastructure. Effectively coordinate resources and manage project progress, addressing issues and risks to ensure successful delivery. Develop and implement strategies for secure communication protocols to protect sensitive data and ensure the integrity cybersecurity systems. Oversee the operations of the SOC, ensuring it is equipped with the latest tools, technologies, and processes to effectively monitor and respond to security threats. Communicate critical security operations risks, strategies, and incident statuses to executive leadership, and prepare detailed performance reports with insights on compliance, effectiveness, and KPIs. Develop and implement strategies and governance frameworks for security operations, ensuring alignment with organizational goals and regulatory compliance. Mentor a team of cybersecurity professionals within the security operations domain, fostering a culture of excellence and continuous improvement through targeted training and development opportunities. Oversee and guide the planning, execution, and delivery of cybersecurity projects and initiatives, ensuring alignment with corporate objectives. Design and execute advanced threat detection and incident response protocols, ensuring rapid identification, containment, and remediation of security incidents.

All you'll need for success: Minimum Qualifications- Education & Prior Job Experience Bachelor's degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering, or a related technical discipline, or equivalent experience/training. 3+ Years experience in Cybersecurity engineering Preferred Qualifications- Education & Prior Job Experience Master's degree in Information Technology, Computer Science, Cybersecurity, or a related field; advanced degree preferred. 4+ years' experience in cloud security engineering or related cybersecurity roles. Experience designing and implementing cloud security solutions and architectures. Familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud) and their security features. Experience with regulatory compliance and industry standards (e.g., GDPR, PCI-DSS, ISO 27001).

Skills, Licenses & Certifications Relevant certifications including but not limited to Certified Information Systems Security Professional (CISSP); Certified Information Security Manager (CISM); Certified Information Systems Auditor (CISA); Certified in Risk and Information Systems Control (CRISC); Certified Incident Handler (GCIH); Certified Information Systems Security Professional - Information Systems Security Management Professional (CISSP-ISSMP); Certified Information Systems Security Professional - Information Systems Security Engineering Professional (CISSP-ISSEP); Certified Ethical Hacker (CEH); Certified SOC Analyst (CSA); SANS GIAC Security Essentials (GSEC); ISO 27001 Lead Implementer or Lead Auditor; Project Management Professional (PMP) or Certified ScrumMaster (CSM) In-depth knowledge of cybersecurity principles, practices, and technologies Expertise in Security Operations Center (SOC) management and incident response Proficiency in threat detection, monitoring, and analysis tools and methodologies Familiarity with relevant laws, regulations, and standards (e.g., GDPR, HIPAA, ISO 27001, NIST) Excellent written and verbal communication skills Strong analytical skills to identify and assess threats and vulnerabilities Experience in cybersecurity, security operations, and incident response roles, focusing on technical implementation and support Ability to collaborate effectively within a team and contribute to strategic planning and project execution Capability to assist in the development and implementation of cybersecurity strategies for security operations SOAR/XSOAR Engineering Expertise: Design, build, and maintain Cortex XSOAR playbooks, automations, and integrations; develop scalable, reusable workflows for incident response, triage, enrichment, and remediation; optimize performance and manage content packs, version control, and deployment pipelines in alignment with SOC objectives and SLAs. Python Development: Strong hands-on experience developing Python-based automations, integrations, and APIs; proficient in building maintainable, production-grade code with robust error handling and logging; experience with REST APIs, JSON, and security-focused scripting practices. Automation & AI Awareness: Solid understanding of automation and AI capabilities within cybersecurity; ability to identify and implement solutions that improve operational efficiency, accuracy, and scalability, including integrating intelligent features such as enrichment, prioritization, and pattern recognition into security workflows.

What you'll get: Feel free to take advantage of all that American Airlines has to offer: Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network. Health Benefits: On day one, you'll have access to your health, dental, prescription and vision benefits to help you stay well. And that's just the start, we also offer virtual doctor visits, flexible spending accounts and more. Wellness Programs: We want you to be the best version of yourself – that's why our wellness programs provide you with all the right tools, resources and support you need. 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year. Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more Feel free to be yourself at American From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Employee Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world.