Analyst/Sr Analyst, IT Cybersecurity Operations

Intro Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you’ll travel the world, grow your expertise and become the best version of you. As you embark on a new journey, you’ll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop on board!

Why you'll love this job

• As one diverse, high-performing team dedicated to technical excellence, you will focus relentlessly on delivering unrivaled digital products that drive a more reliable and profitable airline.
• In the Cybersecurity Operations domain, you will be responsible for the cyber defense of technology assets by managing daily activities, threat detection and incident response, security tool implementation, and team development. You will be expected to balance technical oversight, and business alignment to keep the organization’s digital assets safe while ensuring the team is empowered, the systems are resilient, and the entire operation runs smoothly, effectively, and proactively.

As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations

• As one diverse, high-performing team dedicated to technical excellence, you will focus relentlessly on delivering unrivaled digital products that drive a more reliable and profitable airline.
• In the Cybersecurity Operations domain, you will be responsible for the cyber defense of technology assets by managing daily activities, threat detection and incident response, security tool implementation, and team development. You will be expected to balance technical oversight, and business alignment to keep the organization’s digital assets safe while ensuring the team is empowered, the systems are resilient, and the entire operation runs smoothly, effectively, and proactively.

• Bachelor's degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering, or a related technical discipline, or equivalent experience/training.
• 3+ years of experience in a similar role

• Master's degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering or related technical discipline, or equivalent experience/training.
• 3+ years experience in Security Operations Centers
• Airline industry experience.

• Advanced understanding of security frameworks and protocols across cybersecurity testing, intelligence, ASM, and threat management
• Advanced understanding of physical and cyber security integration, including access control systems and surveillance technologies
• Understanding and ability to identify cryptographic weaknesses, TLS misconfigurations, and insecure transmissions
• Passion and dedication for improving security across cybersecurity testing, intelligence, ASM, and threat management
• Experience with vulnerability assessment tools, penetration testing tools, threat intelligence platforms, SIEM systems, and secure communication networks
• Hands-on experience with Burp Suite, Nmap, Responder, Hashcat, Metasploit, BloodHound, Cobalt Strike or equivalent
• Active Directory / Kerberos attack paths, privilege escalation, lateral movement, and EDR evasion tradecraft
• Cloud pentesting (Azure/AWS/M365) and container/Kubernetes security
• Project management experience highly preferred
• Relevant certifications highly desirable, including: CISSP, CEH, GIAC, SANS, CISM, OSCP, GPEN, GCIA, CSSP-A, and CISA
• Superior verbal and written communication skills with technical and non-technical audiences at all organizational levels