$153,800 - $160,200 Year
Monday to Friday
Day shift
Health insurance
Paid time off
401(k)
401(k) matching
R-2023-30314
Southwest Airlines is an Equal Opportunity Employer. We continue to look for opportunities to reflect the communities we serve, and welcome applicants with diverse thoughts, backgrounds, and experiences.
Job Summary
Deliver Cybersecurity solutions that protect Southwest Airlines. Work in a focused group adhering to Agile principles. Create and refresh of solutions that happen in AWS and utilize a maturing common platform. Expect a mix of Enterprise integration and platform development.
Responsibilities
Provide security guidance to application and Partner Teams to remediate security vulnerabilities, risk items, and policy exceptions
Deliver training for clients in use of the key Cybersecurity systems and automated environments
Identify Cybersecurity problems, plan solutions, recommend software and systems, and coordinate developments in an orderly manner to meet business requirements
Act as an agent for change to reflect the latest Cybersecurity standards and practices
Serve as an enterprise subject matter expert (SME) and advocate of IT Security standards and reference architectures
Act as a Mentor to both Co-Hearts in Cybersecurity and Partner Teams
Remain abreast of industry trends and develop business cases for changes
Lead team to find best solution and offering thought leadership while ideating and challenging group think
Oversee immediate response and maintenance to production program issues
Partner with production testers to identify defects and complete testing
May perform other job duties as directed by Employee's Leaders
Knowledge, Skills, and Abilities
At least 5 years of extensive software development for distributed, highly available, active/active systems (i.e. zero RTO)
Preferred skills in security related software - authentication, authorization, TLS, network segmentation (e.g. AWS NACLs, route tables, security groups, Kubernetes network policies)
Skilled in Agile best practices and continuous improvement
Skilled in at least one or more cloud computing technology and its concepts such as AWS
Skilled in infrastructure-as-code (IaC) development (Terraform, CloudFormation or similar) and automated configuration management using configuration-as-code (CaC) development (Chef, Puppet, Ansible or similar)
Skilled in implementing Cybersecurity specific Integration Tests providing Identity, Security Policy, and Cryptography
Skilled in at least one or more performance, logging and monitoring tools such as Prometheus, ELK Stack, AppD and their integration into platform tools such as AWS CloudWatch
Skilled in at least one or more credential management tools and solutions like AWS Secrets Manager, CyberArk or Hashicorp Vault
Skilled in creating parameterized build jobs for Continuous Integration of Security and environmental variables
Knowledge of at least one or more existing elements in value pipeline, such as PingFederate, eDirectory, Active Directory, CyberArk, or Micro Focus IDM
Skilled in at least two or more scripting and development languages such as Java, TypeScript, Python, Go, Rust, and Lua
Knowledge of Secure Proxy and/or API Gateway - Envoy Proxy, F5 APM, PingAccess, Layer 7 API Gateway, AWS API Gateway
Skilled in Authorization such as XACML, OPA (Open Policy Agent), or Cedar
Skilled in at least one or more Distributed Systems such as REST, gRPC, SOAP and CORBA
Skilled in Data Protection - PCI tokenization, pseudonymization, x.509 certificates, and/or mutual TLS
Skilled in excellent communication, collaboration, organization, problem solving, and prioritization skills
Familiarity with identity federation protocols - OAuth2, OIDC, SAML and WS-Federation
Education
Required: High School Diploma or GED
Required: Bachelor's Degree in Business, Engineering, Computer Science, Information Systems, Cybersecurity, or related field; or equivalent formal training
Experience
Required: Advanced-level experience, seasoned and specialized knowledge in developing, implementing, or integrating technologies for Enterprise security
Licensing/Certification
N/A
Physical Abilities
Ability to perform work duties from [limited space work station/desk/office area] for extended periods of time
Ability to communicate and interact with others in the English language to meet the demands of the job
Ability to use a computer and other office productivity tools with sufficient speed and accuracy to meet the demands of the job
Other Qualifications
Must maintain a well-groomed appearance per Company appearance standards as described in established guidelines
Must be a U.S. citizen or have authorization to work in the United States as defined by the Immigration Reform Act of 1986
Must be at least 18 years of age
Must be able to comply with Company attendance standards as described in established guidelines
Communication
Organizational
Computer
Problem solving
technology
10+ years
Others
Technology
On going position
General Location, within a limited area