> Markdown version of [/jobs/ext/4142524-principal-solution-architect-it-cybersecurity-business-engagement](https://www.wearedevelopers.com/jobs/ext/4142524-principal-solution-architect-it-cybersecurity-business-engagement). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Solution Architect, IT Cybersecurity Business Engagement - **Company:** American Airlines Inc - **Location:** Fort Worth, TX, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Engineering, CompTIA Security+, Cyber Security, Information Systems, Identity and Access Management, Network Security, Open Web Application Security, Cloud Services, Zero Trust Network Access, Security Information and Event Management, Software Engineering, Software Vulnerability Management, Enterprise Software Applications, Cloud Platform System, IT Architecture, Software Security, Information Technology, CIS Benchmarks, Devsecops - **Published:** October 17, 2026 - **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=3024717874-2 ## About the Role * Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Business, Risk Management, Compliance, Audit, or a related discipline, or equivalent experience/training. * Experience conducting security assessments, architecture reviews, threat modeling, risk evaluations, vulnerability analysis, or security control reviews for technology solutions and business initiatives., * Additional education, coursework, or training in cybersecurity, information security, computer science, information systems, engineering, cloud computing, security architecture, or a related technical field preferred. * 7+ years of experience in cybersecurity, security engineering, security architecture, technology risk management, application security, cloud security, infrastructure security, or related information security disciplines. * Experience conducting security architecture reviews, technology risk assessments, threat modeling, security design reviews, vulnerability management, or cybersecurity consulting activities preferred. Skills, Licenses, and Certifications * Experience partnering with business, engineering, architecture, infrastructure, cloud, and application development teams to integrate security requirements into enterprise technology initiatives preferred. * Experience with cloud platforms, security tools, vulnerability management solutions, SIEM technologies, identity and access management, endpoint security, network security, application security, or related cybersecurity technologies preferred. * Experience applying industry cybersecurity frameworks and best practices, including NIST Cybersecurity Framework (CSF), NIST 800-53, CIS Controls, Zero Trust, Secure-by-Design principles, OWASP, ISO 27001, or similar standards preferred. * Experience assessing and communicating cybersecurity risks associated with enterprise applications, cloud environments, infrastructure platforms, third-party solutions, and emerging technologies preferred. * Experience translating complex technical risks, vulnerabilities, and security requirements into actionable recommendations for technology and business stakeholders preferred. * Knowledge of secure software development, DevSecOps, cloud-native architectures, network security, Zero Trust principles, and security-by-design practices. * Ability to conduct security architecture reviews, threat modeling exercises, technical risk assessments, and security control evaluations. * Ability to assess cybersecurity implications of business and technology initiatives and provide practical, risk-informed security recommendations. * Strong stakeholder management and influencing skills, with the ability to build trusted relationships across executive leadership, technology teams, architects, engineers, and business partners. * Professional cybersecurity certifications preferred, such as CISSP, CISM, CCSP, GIAC, Security+, Azure Security Engineer, AWS Security Specialty, CRISC or comparable certifications. ## Description * As one diverse, high-performing team dedicated to technical excellence, you will focus relentlessly on delivering unrivaled digital products that drive a more reliable and profitable airline. * As a Technical Information Security Officer for American Airlines, this role offers the opportunity to lead cybersecurity engagement across assigned business and technology portfolios, providing security strategy, architecture guidance, risk management oversight, and consultative leadership to reduce cyber risk while enabling innovation, transformation, and business growth. What you'll do This list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. * Lead Cybersecurity Engagement Across Business and Technology Portfolios: Serve as the primary cybersecurity advisor for assigned business and technology areas, building trusted relationships, understanding strategic priorities, and integrating security into enterprise initiatives and decision-making. * Provide Security Strategy, Architecture, and Risk Guidance: Partner with stakeholders to deliver security oversight, architecture guidance, and risk-informed recommendations that enable secure innovation, transformation, and business growth. * Conduct Security Reviews and Assess Technology Risk: Lead security reviews for applications, systems, cloud services, infrastructure, and technology initiatives to identify risks, recommend mitigations, and ensure alignment with cybersecurity requirements and standards. * Drive Security by Design: Engage early in project lifecycles to embed cybersecurity requirements into business and technology initiatives, ensuring security considerations are incorporated from planning through implementation. * Partner with Business and Technology Leadership: Collaborate with executives, business leaders, technology teams, architects, and cybersecurity partners to balance business objectives with security requirements while promoting shared accountability for risk management. * Manage Portfolio Cyber Risk: Identify, assess, communicate, and track cybersecurity risks, vulnerabilities, control gaps, and remediation activities across assigned portfolios, ensuring risks are understood and managed appropriately. * Provide Consultative Security Leadership: Translate complex cybersecurity concepts, threats, vulnerabilities, and regulatory requirements into practical business guidance that supports informed decision-making and operational resilience. * Analyze and Report Cybersecurity Posture: Monitor and communicate cybersecurity metrics, risk trends, assessment results, and remediation progress to stakeholders and leadership, providing actionable insights that strengthen security outcomes. * Influence Cybersecurity Awareness and Culture: Advocate for secure behaviors, cybersecurity best practices, and risk awareness within business and technology organizations, helping strengthen the organization's overall security culture. * Drive Continuous Improvement: Identify opportunities to enhance security processes, governance, architecture standards, risk management practices, and stakeholder engagement models to improve the effectiveness and maturity of cybersecurity programs.