Engineer - Application Cybersecurity (Remote)

United Airlines•Chicago, IL

2d•$89,965 - $117,212•Remote

About The Position

The Engineer - Application Cybersecurity helps validate that United’s services, applications, and websites are designed and implemented according to secure development standards. The engineer works with development, product, and other organizational teams to integrate security into the product lifecycle from design through deployment. The role supports enforcement of security requirements, performs application security assessments, and provides developers with remediation guidance. It includes manual and tool-assisted code analysis, mobile application security testing, vulnerability analysis, and support for vulnerability remediation. The engineer also improves access to security through automation and CI/CD pipelines, researches and communicates security best practices, and supports security architecture reviews and threat modeling. This remote role is part of United Airlines’ Cybersecurity and Digital Risk team, which works to protect operations by enabling secure, resilient systems, managing threats and vulnerabilities, and supporting response and recovery.

Requirements

Bachelor’s degree required; a STEM field is preferred.
At least 2 years of relevant experience or ECDLP.
Working knowledge of OWASP Top 10 and CWE 25.
Experience designing, developing, or integrating AI-powered security agents and automated workflows to enhance vulnerability triage, exploitability analysis, secure code review, remediation, or continuous security assurance across the SDLC.
Basic understanding of threat modeling.
Basic understanding of DevSecOps, such as CI/CD.
Working knowledge of application testing, such as SAST, DAST, MAST, RAST, and IAST.
Working knowledge of programming languages and scripting.
Basic understanding of the SDLC process.
Basic understanding of web and application security, including API security.
Basic understanding of cloud technologies and security.
Basic understanding of vulnerability management processes and proficiency in providing remediation guidance.
Basic technical understanding of authentication and authorization flows in web applications.
Ability to work independently and self-motivate.
Excellent problem-solving, critical-thinking, interpersonal, collaboration, written, and verbal communication skills.
Must be legally authorized to work in the United States for any employer without sponsorship.
Successful completion of an interview is required to meet job qualifications.
Reliable, punctual attendance is an essential function of the position.

Nice To Haves

AWS Certified Solutions Architect – Associate.
Certified Application Security Engineer.
Experience with any combination of threat modeling, AI-powered security agents, secure coding, identity management and authentication, software development, cryptography, system administration and network security, or cloud computing.
Experience with AWS technologies.
Working knowledge of C#, Java, Python, Swift, JavaScript, generative AI/LLMs, agent orchestration frameworks, and API integrations for scalable security automation.
Familiarity with Model Context Protocol (MCP), AI agent frameworks, and AI-assisted code analysis and remediation.
Basic understanding of compliance frameworks and processes, such as NIST 800-53.
Working knowledge of technical documentation and Standard Operating Procedures (SOPs) creation.
Basic understanding of cryptography.
Basic understanding of networks and network security, such as WAF and micro-segmentation.

Responsibilities

Validate that services, applications, and websites meet United’s secure development standards.
Work with development teams, product teams, and other teams to integrate security throughout the product lifecycle, from design through deployment.
Support enforcement of security requirements and perform application security assessments.
Perform manual and tool-assisted application code analysis, including mobile application security testing and manual vulnerability analysis.
Assist product teams with vulnerability remediation and provide developers with remediation guidance and advice.
Improve security accessibility through automation and continuous integration pipelines, including developing and maintaining CI/CD templates.
Research, define, and communicate security best practices and standards to product development teams.
Support security architecture design reviews and threat modeling of products.