Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you’ll travel the world, grow your expertise and become the best version of you. As you embark on a new journey, you’ll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop on board!

• ​This job is a member of the Cybersecurity Team within the Information Technology Division.
• Responsible for building and supporting the underlying technologies that support the Cybersecurity Incident Response (CIR) groups as well as producing architecture, enforcing process governance, mentoring, and shepherding of teams seeking regulatory compliance. These technologies include Security Analytical platforms, SOAR, SIEM, EDR, and other detection and incident response technologies.

• Manages or assists in the management of the CIR event and information platform
• Develops playbook and process automation utilizing the SOAR technologies
• Assists external teams in the proper configuration of security infrastructure that CIR relies on (IDS/IPS, Phish technologies, Firewalls, etc.)
• Aides application teams seeking to comsume threat intel into the appropriate tools and services
• Tuning of alerts generated from all Cybersecurity tooling
• Supports and maintains the endpoint detection and response tooling
• Ensures appropriate configuration and rollout of the File Integrity Monitoring solution
• Aides external teams in ingestion of asset data into CIR systems
• Available if needed during an immediate incident to manage tools (24/7)
• Maintains and monitorsplatforms to ensure 24/7 readiness and operability of CIRE services
• Presents technical documentation to enterprise architecture and standardization boards
• Creates processes that allow non-security minded teams the ability to achieve regulatory compliance
• Consistently work with CIR and Application team in an iterative fashion to ensure that all security logs are monitored, complete, and accounted for

Minimum Qualifications- Education & Prior Job Experience

• Bachelors degree in Computer Science, Information Systems, Engineering, Technology, or related field or equivalent experience/training
• 3 years of Information Technology related experience

Preferred Qualifications- Education & Prior Job Experience

• Cloud experience (IBM and/or Azure)
• 3+ years of Software development experience
• 3+ years of Information Technology related experience
• 3+ years of scripting and automation experience
• 3+ years of building and using APIs
• 3+ years of networking experience
• 3+ years of Windows/Linux experience
• 3+ years of data engineering experience
• 3+ years of container technology experience
  

Skills, Licenses & Certifications

• Information Security Certification
  • Security+
  • CISSP
• Ability to script in languages like Python or JavaScript
• Knowledge of Linux/Unix, Powershell, Basic Windows Administration, Git
• Knowledge of Security Concepts, Mitre ATT&CK Framework, PCI Compliance Requirements
• Knowledge of Networking concepts, services, and protocols
• Knowledge of basic cloud security controls and architecture
• Knowledge of SIEM, EDR, SOAR Platforms, Big Data Platforms
• Experience with Agile methodologies and tools
• A solid understanding of networking, cyber security concepts, vulnerability identification and cyber threat intelligence
• Must be detail oriented, well organized, thrive in a sense-of-urgency environment, leverage best practices, and most importantly, innovate through any problem with a can-do attitude
• Aptitude in solving problems independently while also having the openness to work collaboratively
• Demonstrated problem-solving skills
• Availability to work a flexible schedule and support the incident response teams during triage
• Ability to lead a small squad of engineers to deliver sustainable, scalable, and staff tolerant enterprise services
  

Feel free to take advantage of all that American Airlines has to offer:

• Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network.
• Health Benefits: On day one, you’ll have access to your health, dental, prescription and vision benefits to help you stay well. And that’s just the start, we also offer virtual doctor visits, flexible spending accounts and more.
• Wellness Programs: We want you to be the best version of yourself – that’s why our wellness programs provide you with all the right tools, resources and support you need.
• 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year.
• Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more

From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Employee Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world.

Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life’s journey? Feel free to be yourself at American.