Note: The job is a remote job and is open to candidates in USA. Southwest Airlines is seeking a Cybersecurity Analyst to strengthen and defend its cybersecurity posture. The role focuses on monitoring, analyzing, and responding to security events, translating threat intelligence into actionable outcomes, supporting Threat Hunting, Red Team, and Purple Team activities, and improving cybersecurity policies, procedures, asset protection, awareness, and compliance.
Responsibilities
- Demonstrate advanced analytical skills across diverse cybersecurity domains, leading the identification and resolution of complex cybersecurity issues in areas such as Incident Response, Threat Intelligence, Governance, Risk, and Compliance (GRC), Privacy, Vulnerability Management, and Engineering Operations
- Lead and actively participate in high-priority incident response efforts, taking ownership of critical activities related to the identification, containment, and resolution of security incidents, and providing mentorship to junior analysts
- Drive advanced threat intelligence initiatives, including the development of threat hunting strategies, proactive identification of emerging threats, and the implementation of innovative solutions to enhance the organization's security posture
- Take a lead role in vulnerability management, overseeing and improving the vulnerability assessments and scanning processes, and providing mentorship to junior and mid-level analysts
- Architect and lead the optimization of the organization's security infrastructure, overseeing the implementation of advanced cybersecurity controls, and ensuring the organization is prepared to address evolving cyber threats
- Take a leadership role in maturing GRC initiatives, ensuring comprehensive understanding, and proactively shaping cybersecurity regulations, standards, and best practices within the organization
- Lead privacy initiatives, overseeing the implementation and enforcement of privacy controls and practices, and ensuring the protection of sensitive information in compliance with relevant regulations
- Drive the continual improvement of cybersecurity practices and resilience, staying at the forefront of industry trends and emerging technologies to shape and enhance the organization’s advanced security posture
- Lead the development and execution of comprehensive cybersecurity training and awareness initiatives, tailoring programs to different audiences and providing mentorship to junior team members
- Play a key role in fostering collaboration across the organization, engaging with senior leadership, cross-functional teams, and external stakeholders, and representing the cybersecurity function at a strategic level
- May perform other job duties as directed by Employee's Leaders
Skills
- U.S. citizenship or current authorization to work in the U.S. required and no current or future work authorization sponsorship available
- Knowledge of various cybersecurity frameworks and standards (e.g., NIST, ISO 27001) to guide security initiatives
- Knowledge of data protection and privacy regulations (e.g., GDPR, CCPA) to ensure the safeguarding of sensitive information
- Knowledge of incident response procedures and methodologies for effective response to security incidents
- Skilled in conducting risk assessments and developing risk mitigation strategies
- Skilled in using security monitoring tools, SIEM systems, and intrusion detection systems for threat detection and analysis
- Skilled in written and verbal communication skills for reporting and conveying technical information to non-technical stakeholders
- Ability to proactively identify and assess risks, and implement mitigation strategies to protect the organization's assets
- Ability to monitor program risks, issues, and scope related to cybersecurity initiatives with the appropriate level of priority and escalation
- Skilled in collaborating with cross-functional teams and stakeholders to drive cybersecurity initiatives and risk management
- Ability to adapt to evolving threats, technologies, and best practices in the dynamic field of cybersecurity
- Required: High School Diploma or GED
- Required: Intermediate-level experience, fully functioning broad knowledge in cybersecurity principles and concepts, developing skills and knowledge in information technology (IT) operations, programming, systems/software development or another IT related field
- Ability to perform work duties from [limited space work station/desk/office area] for extended periods of time
- Ability to communicate and interact with others in the English language to meet the demands of the job
- Ability to use a computer and other office productivity tools with sufficient speed and accuracy to meet the demands of the job
- Must maintain a well-groomed appearance per Company appearance standards as described in established guidelines
- Must be a U.S. citizen or have authorization to work in the United States as defined by the Immigration Reform Act of 1986
- Must be at least 18 years of age
- Must be able to comply with Company attendance standards as described in established guidelines
- Must be able to travel and /or attend Company and non-Company facilities and remote locations such as remote-based offices as necessary
- Preferred: Experience as a specialized Threat Intelligence and Threat Operations individual contributor responsible for providing actionable, intelligence driven support to Threat Hunting, Red Team, and Purple Team operations
- Preferred: Experience in translating adversary intelligence into operational outcomes, ensuring that threat hunting, detection engineering, and adversary emulations are grounded in real world threat actor behavior
- Preferred: Experience in deep threat actor analysis and tracking of adversary behaviors and TTP evolution
- Preferred: Experience in mapping intelligence findings to MITRE ATT&CK to support detection and emulation
- Preferred: Experience producing intelligence reports and technical packages for Red, Purple, and Hunt teams
- Preferred: Experience supporting threat hunting operations with actionable intelligence and hunt hypotheses
- Preferred: Experience developing and operationalizing IOC driven hunting workflows
- Preferred: Experience partnering with engineering and hunting teams to mature and automate threat informed processes
- Preferred: Experience delivering intelligence briefings to technical teams and leadership
- Preferred: GIAC Cyber Threat Intelligence (GCTI)
- Preferred: Certified Threat Intelligence Handler (CTIH)
- Preferred: CompTIA Cybersecurity Analyst (CySA+)
- Preferred: CISSP (ISC2 Certified Information Systems Security Professional)
Benefits
- Remote workplace position, with the majority of working time potentially spent in an approved remote location
- For eligible leadership and individual contributor roles, additional bonus opportunities are available and awarded at the discretion of the company.
- Fly for free, as a privilege, on any open seat on all Southwest flights (your eligible dependents too)
- Southwest will help fund your Retirement Savings Plan with Company contributions up to 9.3% of your eligible earnings
- Potential for annual ProfitSharing contribution in the Southwest Retirement Savings Plan—when Southwest profits, you profit
- Competitive health insurance for you and your eligible dependents (including pets)
- Health plan coverage options that start from the very first day of employment, with coverage retroactively available to your first day of employment
- Equal opportunity for learning and personal growth
Company Overview