Engineer/Sr Engineer, IT Aviation Cybersecurity

Intro

Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you’ll travel the world, grow your expertise and become the best version of you. As you embark on a new journey, you’ll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop on board!

Why you'll love this job

• ​This job is a member of the Information Technology team within the Information Technology Division.
• This role provides support to the Cybersecurity (CS) Aviation Cybersecurity team and is responsible for building and maintaining key relationships throughout the organization and with cybersecurity aviation industry partners. This includes key internal partners such as Avionics Engineering, Cabin Experience, Maintenance Technology, Government Affairs, Corporate Security, and Corporate Safety. In addition, this person will be coordinating our involvement with external industry partners to ensure we are up to date on the latest developments in aviation cybersecurity. This role provides strong aviation cybersecurity experience to assist with risk analysis and recommending mitigation possibilities, and promotes cybersecurity practices as part of our digital aircraft . 

What you'll do

• Leverages cybersecurity expertise to drive the technical research, planning, and architectural design of systems related to digital aircraft to ensure confidentiality, integrity, and high availability of corporate, vendor, and customer data
• Defines, develops, and delivers technical solutions, security requirements and standards that incorporate both industry and company technology standards spanning multiple security domains
• Provides internal security consultations for teams supporting digital aircraft, ground, and communication systems
• Supports standards, regulations, and compliance activities from cybersecurity perspective for FAA & other governing bodies
• Interfaces with industry counterparts like Aviation-ISAC, IATA Cybersecurity Task Force, and oneworld partners
• Assists with cyber-incidents related to AA's aviation technologies · Delivers and maintains key artifacts and work products in support of the system review, software development, and quality assurance of airline operations
• Ensures digital aircraft systems and endpoints are scanned using Vulnerability Management tools and practices
• Coordinates with business, IT teams, and IS Risk to remediate compliance findings in a timely manner while addressing risk reduction objectives
• Demonstrates continuous improvement mindset
• Maintains an effective approach to problem solving, multi-tasking, coordinating, and scheduling in accordance with stated goals to ensure visibility and predictability
• Works extended hours occasionally, based on the needs of the project and the operation and may require travel periodically, but planned well in advance

All you'll need for success

Minimum Qualifications- Education & Prior Job Experience

• Bachelor's degree in Information Technology, IT Security, Network Systems Technology or related technical discipline, or equivalent experience/training
• 5 years of experience in security technology design
• 5 years of network, server, and application systems development experience
   

Preferred Qualifications- Education & Prior Job Experience

• 5 years designing, deploying, and managing PKI and cryptographic solutions
• 5 years hands-on experience with Identity and Access solutions
• 3 years experience on Network Security and VPN solutions
• 4 + years' experience in NIST 800 series frameworks
• Application coding and scripting via Python, SQL, BASH, or PowerShell
• Preferred Certifications
• CISSP - Certified Information Systems Security Professional
• CISM - Certified Information Security Manager
• CISA - Certified Information Systems Auditor
• CEH – Certified Ethical Hacker · GIAC aviation-aligned certs: GCIA, GCFA, GMON, GCTI
• Microsoft / Azure security certs (AZ-500, SC-100)
• Zero Trust-related GIAC certs (GDAT)

Skills, Licenses & Certifications

• Understanding of airworthiness cybersecurity concepts, including regulatory compliance and governance norms.
• Familiarity with industry standards development and governing bodies (e.g., RTCA, IATA, ARINC, and FAA) in relation to aviation cybersecurity.
• Exper