Engineer - Cybersecurity

Why Work for Frontier Airlines? At Frontier, we believe the skies should be for everyone. We deliver on this promise through our commitment to Low Fares Done Right. This is more than our tagline - it’s our driving philosophy. Every member of Team Frontier has an important role to play in bringing this vision to life. Our successful business model allows travelers to take advantage of our fast-growing route network while our bundled and unbundled pricing options allow our customers to personalize their travel experience and only pay for the services they need – saving them money along the way. What We Stand For Low Fares Done Right is our mission and we strive to bring it to life every day. Our ‘Done Right’ promise means delivering not only affordable prices, but making travel friendly and easy for our customers. To do this, we put a great deal of care into every decision and action we take. We must be efficient with the use of our resources and make smart decisions about how we run our business. We must also innovate and be pioneers - we’re not afraid to try new things. While our business requires us to fly high in the air, we also consider ourselves down-to-earth in our approach, creating a warm and friendly experience that truly demonstrates Rocky Mountain Hospitality. Work Perks At Frontier, we like to think we’re creating something very special for our team members. Work is why we’re here, but the perks are nice too:

• Flight benefits for you and your family to fly on Frontier Airlines
• Buddy passes for your friends so they can experience what makes us so great
• Discounts throughout the travel industry on hotels, car rentals, cruises and

vacation packages * Discounts on cell phone plans, movie tickets, restaurants, luggage and over 2,000 other vendors

• Enjoy a ‘Dress for your Day’ business casual environment
• Flexible work schedules that support work/life balance
• Total Rewards program including a competitive base salary, short term

incentives, long-term incentives, paid holidays, 401(k) plan, vacation/sick time and medical/dental/vision insurance that begins the 1st of the month following your hire date. * We play our part to make a difference. The HOPE League, Frontier Airlines’ non-profit organization, is dedicated to providing employees financial assistance during catastrophic hardship Who We Are Frontier Airlines is a leading ultra-low cost carrier headquartered in Denver, Colorado. With a mission to deliver Low Fares Done Right, the company provides affordable, convenient and accessible air travel throughout the U.S., Caribbean, Mexico and Latin America. Frontier’s highly fuel-efficient, all-Airbus fleet is among the youngest and most modern of any carrier within the U.S. That, combined with the airline’s many weight-saving initiatives and focus on operational efficiencies, makes Frontier America’s Greenest Airline.* Each Frontier Airlines plane tail features a special animal with a unique name and backstory. Many of the featured species are endangered or threatened, part of the airline’s commitment to underscore and raise awareness for their plight. Frontier serves approximately 100 destinations throughout North America and operates 500-plus daily flights, on average. The airline employs more than 7,000 team members and has crew bases in more than a dozen U.S. cities. Frontier Airlines., Inc., is a subsidiary of Frontier Group Holdings, Inc. (NASDAQ: ULCC). * Frontier is the most fuel-efficient of all major U.S. carriers when measured by ASMs per fuel gallon consumed. What Will You Be Doing? The Cybersecurity Engineer will be part of a Cybersecurity team that assesses, designs, implements, troubleshoots, and supports the cybersecurity posture of Frontier’s network infrastructure. The Cybersecurity Engineer will report to the Manager of Cybersecurity Architecture & Engineering, enabling cybersecurity design and implementation efforts to protect Frontier’s network and systems against cyber-attacks and data breaches. The Cybersecurity Engineer is responsible for providing technical input on projects for Frontier’s on-prem and cloud environments. The Engineer is responsible for planning, implementing, maintaining, and supervising cybersecurity controls, practices, and infrastructure. Essential Functions * Research, design, and deploy resilient, reliable, and scalable security controls for IT/business projects. * Provide technical leadership in designing, implementing, testing, and rolling out of cybersecurity solutions and/or cyber controls in IT/Business projects. * Collaborate with the IT team to deliver a secure, resilient, and reliable infrastructure environment. * Participate in and contribute to identification of cybersecurity tools and systems, business continuity planning, and disaster recovery efforts. * Provide platform support for cybersecurity technologies include but are not limited to: Data Loss Prevention (DLP), Security Incident Event Management (SIEM), Brand Monitoring, Threat Intelligence, User Behavior Analytics, File Integrity Monitoring, Firewall Analyzer, DDoS Mitigation, Secure Internet Access/Web Content Filters, Endpoint Detection & Response, Vulnerability Management, Security Hardening, SOAR-Orchestration, Cloud Security Platforms, and Secure Email Gateway. * Ability to secure storage, web, application, networking components in Cloud environments (Azure and AWS). * Support cybersecurity service management request queue (incidents/service requests)

• Support and contribute to change control and change approval board functions.
• Support design, maintenance, and analysis of the network architecture to

protect against cybersecurity threats and exposed vectors. * Execute and improve core functions of incident response including threat detection/prevention, detection engineering, incident response, security monitoring, and digital forensics. * Support cybersecurity incident response efforts, handling escalations with Cybersecurity Operations and managed service providers. * Assess vulnerabilities and threats to the network, evaluate available security processes and technologies and make recommendations to management and business partners. * Support patch and vulnerability management program efforts (such as: vulnerability read-outs, solution analysis, technical direction in administrator breakout sessions) * Research latest security threats, cybersecurity standards/frameworks, and vulnerabilities to assess the organizations threat landscape. * Provide regular status updates to leadership on ongoing projects, maintenance, and systems support. * Assist in efforts to maintain compliance with PCI-DSS, TSA, SOX, and other external/internal compliance requirements. * Provide cybersecurity expertise in evaluation of 3rd party vendor risk management reviews. * Participate in "on-call" rotations requiring night and weekend availability as scheduled, provide additional availability 24/7, when necessary. Qualifications * Bachelor’s degree in computer science, technology, or equivalent combination of education and relevant experience (required).

• 6+ years cybersecurity operations and/or engineering experience required.
• 4+ years in security engineering with hands-on experience with enterprise

cybersecurity product type: EDR (SentinelOne, Crowdstrike, or Cylance) (required). * 4+ years in security engineering with hands-on experience with enterprise cybersecurity product type: Secure Email Gateway (Mimecast, Proofpoint, or Office365 Exchange) (required). * 4+ years in security engineering with hands-on experience with enterprise cybersecurity product type: Vulnerability Management (Nessus, Qualys, or Rapid7) (required). * 4+ years in security engineering with hands-on experience with enterprise cybersecurity product type: (SIEM (Splunk, Rapid7, or LogRhythm) (required). * 3+ years of enterprise firewall administration or auditing experience (required). * Industry cybersecurity certification: CompTIA: Security+ or Pentest+, CEH, CISSP, OCSP, SANS: GCIH or GSEC, CISSP, ISACA: CISA or CISM, Security+, SSCP, or CCNA (required, or willing to attain within 3 months of start date).

• Hands-on Cloud cybersecurity design and implementation (Azure/AWS) (required)
• Design and implementation of security controls including experience in

applying security framework methodologies; to include NIST, Cloud (CSA), wired, and wireless security principles (required)

• Experience with Wireshark and NMAP (required)
• Experience with URL Filtering/Web Proxy management and troubleshooting

(required) * PCI-DSS or other security compliance environment experience (highly desirable) Knowledge, Skills and Abilities * Proficient in troubleshooting network/system related issues and effectively manage components in a production environment. * Strong understanding of attack vectors, common intrusion techniques, threat intelligence, application/host/network security hardening, micro-segmentation, network access control, networking protocols, and enterprise risk management concepts. * Ability to troubleshoot security, networking, client server, Wi-Fi, and VPN issues. * Ability to maintain an understanding of industry trends and stay abreast of current vulnerabilities and security concerns, understanding their impact on the organization.

• Expert knowledge of enterprise firewall management and deployment.
• Broad and thorough knowledge of enterprise security systems and devices.
• Proficient in deploying and managing complex Cloud infrastructures

(Azure/AWS). * Knowledgeable in penetration testing and vulnerability assessments and remediation.

• Proficient in network traffic and packet analysis.
• Demonstrable experience working with configuration management/automation

tools. * Ability to remain organized and to elicit cooperation from a wide variety of internal team members and 3rd party providers.

• Work calmly and methodically under pressure and against tight deadlines.
• Able to accurately estimate level of effort and deliver projects within

scheduled commitments.

• Ability to quickly learn new systems, devices, and methodologies.
• Excellent written and verbal communication skills, including the ability to

write detailed technical documents.

• Willing to work more than 40 hours and some weekends.
• Willing to do On-Call rotation for after hours and weekend support.
• Communicates clearly and effectively.
• Manages time efficiently and multi-tasks effectively.
• Exceptional customer service skills.

Equipment Operated Laptop endpoint running Windows and a variety of cybersecurity applications and commercial tools. Work Environment Typical office environment, adequately heated and cooled Will require being on call for afterhours and weekend support Physical Effort Light physical effort required by handling objects up to 20 pounds occasionally and/or up to 10 pounds frequently. Supervision Received General Direction: The incumbent normally receives little instruction on day-to-day work and receives general instructions on new assignments. Salary Range: $100,104 - $132,870 - Please note: this role will close on or before 9/30/26. Positions Supervised * None Workplace Policies Disclaimer: The above statements are intended only to describe the general nature and level of work required of the referenced position; they are not intended to be an exhaustive list of all responsibilities, duties, and skills required of individuals in this position. Please be advised that duties and expectations of this position may be subject to change. Frontier Airlines, Inc. is an equal opportunity employer and, as such, is committed to providing equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, national origin, age, marital status, veteran status, sexual orientation, gender identity or expression, disability status, pregnancy, genetic information, citizenship status or any other basis protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. Frontier Airlines is a Zero Tolerance Drug-Free Workplace. All prospective DOT safety-sensitive employees are subject to pre-employment testing for the following drugs and their metabolites: Marijuana, Cocaine, Amphetamines, Opioids and Phencyclidine (PCP). Further, any DOT safety-sensitive job applicant who is found to have tested positive on any required drug or alcohol test at a former employer will be considered ineligible for employment with Frontier. Colorado Residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.