Sr Cybersecurity Analyst

Southwest Airlines • Dallas, TX

1d • $119,900 - $133,200 • Remote

About The Position

Southwest is seeking a Sr Cybersecurity Analyst to protect its digital infrastructure and strengthen its cloud vulnerability management program. The role identifies, assesses, and prioritizes vulnerabilities across cloud environments and drives remediation strategies aligned with business priorities. Working with Infrastructure, Engineering, DevOps, and Security Teams, the analyst helps reduce cyber risk, improve the security posture, support cloud modernization, safeguard sensitive data, and ensure compliance with evolving regulations. The position also mentors cybersecurity professionals and contributes to advanced strategies and tools to address emerging threats.

The role provides advanced technical expertise and leadership across cybersecurity domains, including incident response, threat intelligence, governance, risk and compliance, privacy, vulnerability management, and engineering operations. It leads complex security initiatives, develops security strategies and controls, guides compliance and privacy programs, and collaborates with senior leaders, internal teams, and external stakeholders.

This is a remote workplace position, with possible travel for training, meetings, conferences, and other necessary visits. Employees may work primarily from an approved remote location, but certain states and localities are ineligible for regular off-site work. U.S. citizenship or current U.S. work authorization is required; work authorization sponsorship is unavailable. The listed salary range is $119,900 to $133,200 per year, depending on qualifications and experience. Eligible roles may also receive discretionary bonus opportunities.

Requirements

• High School Diploma or GED.
• Bachelor's degree in Computer Science, Engineering, Information Systems, or a similar field, or equivalent advanced-level experience.
• Advanced-level experience and seasoned, specialized knowledge in cybersecurity principles and concepts, with developing skills and knowledge in IT operations, programming, systems/software development, or another IT-related field.
• Knowledge of advanced cybersecurity concepts, including threat intelligence, penetration testing, and advanced attack techniques.
• Knowledge of cybersecurity regulations and standards, including GDPR, HIPAA, and industry-specific compliance requirements.
• Skill in advanced threat detection methods and tools, and the ability to analyze and respond to complex threats.
• Skill in guiding incident response, managing complex investigations, and coordinating teams.
• Skill in conducting in-depth vulnerability assessments and penetration testing to identify and address security weaknesses.
• Ability to provide strategic insights on emerging threats, technologies, and best practices and shape cybersecurity strategy.
• Ability to lead risk management efforts and develop strategies to identify, assess, and mitigate cybersecurity risks.
• Ability to collaborate and communicate effectively with cross-functional teams, stakeholders, and external partners.
• Ability to develop and enforce security policies, standards, and procedures and ensure compliance and comprehensive security controls.
• Ability to foster security awareness and knowledge-sharing among team members and stakeholders.
• Must be a U.S. citizen or have authorization to work in the United States; no current or future work authorization sponsorship is available.
• Must be at least 18 years of age and comply with Company appearance and attendance standards.
• Must be able to travel to or attend Company and non-Company facilities and remote locations as necessary.
• Ability to communicate and interact with others in English.

Nice To Haves

• Expertise in cloud security tools, vulnerability management platforms, and risk-based vulnerability management practices.
• Experience partnering with infrastructure, engineering, DevOps, and security teams to reduce cyber risk, improve security posture, and align vulnerability remediation with business priorities.
• Experience leading vulnerability management activities across cloud platforms such as AWS, Azure, and CrowdStrike.
• Experience with vulnerability management platforms such as Tenable, Qualys, Rapid7, Wiz, Prisma Cloud, Lacework, or similar tools.
• Strong understanding of CVE, CVSS, exploitability, threat intelligence, MITRE ATT&CK, and remediation strategies.
• Knowledge of containers, Kubernetes, CI/CD pipelines, Infrastructure as Code (Terraform, CloudFormation), and DevSecOps practices.
• Experience with scripting and automation using Python, PowerShell, Bash, or APIs.
• Experience with ServiceNow, Jira, or ticketing/workflow platforms.
• Familiarity with regulatory frameworks such as NIST, CIS, ISO 27001, PCI DSS, or SOX.

Responsibilities

• Provide advanced technical expertise and leadership in cybersecurity, contributing to the identification and resolution of complex issues across incident response, threat intelligence, GRC, privacy, vulnerability management, and engineering operations.
• Lead and coordinate complex incident response efforts, including identification, containment, and resolution of sophisticated security incidents, while mentoring junior and mid-level analysts.
• Develop threat-hunting strategies, identify emerging threats proactively, and implement solutions to improve the organization's security posture.
• Own the vulnerability management program by developing and implementing strategies to identify, prioritize, and mitigate vulnerabilities, and provide guidance to analysts.
• Architect and optimize security infrastructure, implement cybersecurity controls and practices, and provide strategic direction for security architecture.
• Advance GRC initiatives, guide compliance matters, shape policies and procedures, and promote a proactive approach to governance, risk, and compliance.
• Oversee the privacy program and support the implementation and continuous improvement of privacy controls in line with evolving regulations.
• Lead cybersecurity research and development, monitor emerging technologies, and drive innovation in security practices.
• Mentor and coach junior and mid-level cybersecurity analysts and contribute to their professional development.
• Collaborate across the organization with senior leadership, cross-functional teams, and external stakeholders, and represent cybersecurity at a strategic level.
• Perform other job duties as directed by Employee's Leaders.

Benefits

• Free travel on any open seat on Southwest flights for the employee and eligible dependents.
• Retirement Savings Plan with a dollar-for-dollar 401(k) Company match of up to 9.3% of eligible earnings, subject to plan terms and vesting.
• Potential annual profit-sharing contribution to the Southwest Retirement Savings Plan, subject to plan terms, vesting, and Company discretion.
• Competitive health insurance for the employee and eligible dependents, with coverage options beginning on the first day of employment.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior