Principal Architect, IT Security Strategy

Intro

Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you’ll travel the world, grow your expertise and become the best version of you. As you embark on a new journey, you’ll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop on board!

Why you'll love this job

 

• Responsible for supporting the cross-functional team responsible for detecting and responding to cybersecurity threats both internal and external to American Airlines.

What you'll do

As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced.  Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations.

 

The CIR (Cyber Security Incident Response) Principal Architect is responsible for building and supporting the underlying technologies that support the CIR Operations groups as well as producing architecture, enforcing process governance, mentoring peers, and shepherding of teams seeking regulatory compliance.  These technologies include TIP, SOAR, SIEM, EDR, and many other detection and incident response technologies.  This role will heavily require mature scripting and automation skillsets.

 

• Manage or assist in the management of the CIR event and information platform
• Aid in the management of alerts and configurations of technologies that CIR relies on (IDS/IPS, Email Security technologies, Firewalls, etc.)
• Help with the ingestion of threat intel into the appropriate tools and groups
• Assist in the tuning of alerts generated from all Cybersecurity tooling
• Support and maintain the endpoint detection and response tooling
• Aid in ingestion of asset data into the functions and systems of the CIR
• Assist in tool management during an immediate incident (24/7)
• Consistently work with CIR and Application teams in an iterative fashion to ensure that all security events are monitored, complete, and accounted for.
   

All you'll need for success

Minimum Qualifications- Education & Prior Job Experience

• Bachelor’s Degree in Computer Science, Information Systems, Engineering, Technology, or related field or equivalent experience/training
• 8 years of Information Technology related experienc
• 8 years of networking experience
• 8 years Windows/Linux experience
• 5 years of Security or SecOps experience

Preferred Qualifications- Education & Prior Job Experience

• Master’s Degree in Computer Science, Information Systems, Engineering, Technology, or related field or equivalent experience/training
• Airline industry experience
• Cloud experience (IBM and/or Azure)
• Scripting experience

Skills, Licenses & Certifications

• Knowledge of Linux/Unix, Powershell, Basic Windows Administration, Git, Scripting
• Knowledge of Security Concepts, Mitre ATT&CK Framework, PCI Compliance Requirements
• Knowledge of SIEM, SOAR Platforms, Big Data Platforms, EDR/EPP
• Understanding of the OSI model
• Ability to work independently and effectively cooperate with others
• A solid understanding of networking, cyber security concepts, vulnerability identification and cyber threat intelligence is necessary
• Excellent communications skills, that includes the ability to provide formal documentation of analysis and/or research results to include briefings, reports, writing, training of lower level analysts, and editing at a technical/professional level

What you'll get

Feel free to take advantage of all that American Airlines has to offer: 

• Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network.
• Health Benefits: On day one, you’ll have access to your health, dental, prescription and vision benefits to help you stay well. And that’s just the start, we also offer virtual doctor visits, flexible spending accounts and more. 
• Wellness Programs: We want you to be the best version of yourself – that’s why our wellness programs provide you with all the right tools, resources and support you need.
• 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after