Engineer - Cybersecurity

Frontier Airlines • Denver, CO

35d • $100,104 - $132,870 • Hybrid

About The Position

The Cybersecurity Engineer will be part of a Cybersecurity team that assesses, designs, implements, troubleshoots, and supports the cybersecurity posture of Frontier’s network infrastructure. The Cybersecurity Engineer will report to the Manager of Cybersecurity Architecture & Engineering, enabling cybersecurity design and implementation efforts to protect Frontier’s network and systems against cyber-attacks and data breaches. The Cybersecurity Engineer is responsible for providing technical input on projects for Frontier’s on-prem and cloud environments. The Engineer is responsible for planning, implementing, maintaining, and supervising cybersecurity controls, practices, and infrastructure.

Requirements

• Bachelor’s degree in computer science, technology, or equivalent combination of education and relevant experience (required).
• 6+ years cybersecurity operations and/or engineering experience required.
• 4+ years in security engineering with hands-on experience with enterprise cybersecurity product type: EDR (SentinelOne, Crowdstrike, or Cylance) (required).
• 4+ years in security engineering with hands-on experience with enterprise cybersecurity product type: Secure Email Gateway (Mimecast, Proofpoint, or Office365 Exchange) (required).
• 4+ years in security engineering with hands-on experience with enterprise cybersecurity product type: Vulnerability Management (Nessus, Qualys, or Rapid7) (required).
• 4+ years in security engineering with hands-on experience with enterprise cybersecurity product type: (SIEM (Splunk, Rapid7, or LogRhythm) (required).
• 3+ years of enterprise firewall administration or auditing experience (required).
• Industry cybersecurity certification: CompTIA: Security+ or Pentest+, CEH, CISSP, OCSP, SANS: GCIH or GSEC, CISSP, ISACA: CISA or CISM, Security+, SSCP, or CCNA (required, or willing to attain within 3 months of start date).
• Hands-on Cloud cybersecurity design and implementation (Azure/AWS) (required)
• Design and implementation of security controls including experience in applying security framework methodologies; to include NIST, Cloud (CSA), wired, and wireless security principles (required)
• Experience with Wireshark and NMAP (required)
• Experience with URL Filtering/Web Proxy management and troubleshooting (required)
• Proficient in troubleshooting network/system related issues and effectively manage components in a production environment.
• Strong understanding of attack vectors, common intrusion techniques, threat intelligence, application/host/network security hardening, micro-segmentation, network access control, networking protocols, and enterprise risk management concepts.
• Ability to troubleshoot security, networking, client server, Wi-Fi, and VPN issues.
• Ability to maintain an understanding of industry trends and stay abreast of current vulnerabilities and security concerns, understanding their impact on the organization.
• Expert knowledge of enterprise firewall management and deployment.
• Broad and thorough knowledge of enterprise security systems and devices.
• Proficient in deploying and managing complex Cloud infrastructures (Azure/AWS).
• Knowledgeable in penetration testing and vulnerability assessments and remediation.
• Proficient in network traffic and packet analysis.
• Demonstrable experience working with configuration management/automation tools.
• Ability to remain organized and to elicit cooperation from a wide variety of internal team members and 3rd party providers.
• Work calmly and methodically under pressure and against tight deadlines.
• Able to accurately estimate level of effort and deliver projects within scheduled commitments.
• Ability to quickly learn new systems, devices, and methodologies.
• Excellent written and verbal communication skills, including the ability to write detailed technical documents.
• Willing to work more than 40 hours and some weekends.
• Willing to do On-Call rotation for after hours and weekend support.
• Communicates clearly and effectively.
• Manages time efficiently and multi-tasks effectively.
• Exceptional customer service skills.

Nice To Haves

• PCI-DSS or other security compliance environment experience (highly desirable)

Responsibilities

• Research, design, and deploy resilient, reliable, and scalable security controls for IT/business projects.
• Provide technical leadership in designing, implementing, testing, and rolling out of cybersecurity solutions and/or cyber controls in IT/Business projects.
• Collaborate with the IT team to deliver a secure, resilient, and reliable infrastructure environment.
• Participate in and contribute to identification of cybersecurity tools and systems, business continuity planning, and disaster recovery efforts.
• Provide platform support for cybersecurity technologies include but are not limited to: Data Loss Prevention (DLP), Security Incident Event Management (SIEM), Brand Monitoring, Threat Intelligence, User Behavior Analytics, File Integrity Monitoring, Firewall Analyzer, DDoS Mitigation, Secure Internet Access/Web Content Filters, Endpoint Detection & Response, Vulnerability Management, Security Hardening, SOAR-Orchestration, Cloud Security Platforms, and Secure Email Gateway.
• Ability to secure storage, web, application, networking components in Cloud environments (Azure and AWS).
• Support cybersecurity service management request queue (incidents/service requests)
• Support and contribute to change control and change approval board functions.
• Support design, maintenance, and analysis of the network architecture to protect against cybersecurity threats and exposed vectors.
• Execute and improve core functions of incident response including threat detection/prevention, detection engineering, incident response, security monitoring, and digital forensics.
• Support cybersecurity incident response efforts, handling escalations with Cybersecurity Operations and managed service providers.
• Assess vulnerabilities and threats to the network, evaluate available security processes and technologies and make recommendations to management and business partners.
• Support patch and vulnerability management program efforts (such as: vulnerability read-outs, solution analysis, technical direction in administrator breakout sessions)
• Research latest security threats, cybersecurity standards/frameworks, and vulnerabilities to assess the organizations threat landscape.
• Provide regular status updates to leadership on ongoing projects, maintenance, and systems support.
• Assist in efforts to maintain compliance with PCI-DSS, TSA, SOX, and other external/internal compliance requirements.
• Provide cybersecurity expertise in evaluation of 3rd party vendor risk management reviews.
• Participate in "on-call" rotations requiring night and weekend availability as scheduled, provide additional availability 24/7, when necessary.

Benefits

• Flight benefits for you and your family to fly on Frontier Airlines
• Buddy passes for your friends so they can experience what makes us so great
• Discounts throughout the travel industry on hotels, car rentals, cruises and vacation packages
• Discounts on cell phone plans, movie tickets, restaurants, luggage and over 2,000 other vendors
• Enjoy a ‘Dress for your Day’ business casual environment
• Flexible work schedules that support work/life balance
• Total Rewards program including a competitive base salary, short term incentives, long-term incentives, paid holidays, 401(k) plan, vacation/sick time and medical/dental/vision insurance that begins the 1st of the month following your hire date.
• The HOPE League, Frontier Airlines’ non-profit organization, is dedicated to providing employees financial assistance during catastrophic hardship

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level