Engineer - Cybersecurity

The Cybersecurity Engineer will be part of a Cybersecurity team that assesses, designs, implements, troubleshoots, and supports the cybersecurity posture of Frontier’s network infrastructure. The Cybersecurity Engineer will report to the Manager of Cybersecurity Architecture & Engineering, enabling cybersecurity design and implementation efforts to protect Frontier’s network and systems against cyber-attacks and data breaches. The Cybersecurity Engineer is responsible for providing technical input on projects for Frontier’s on-prem and cloud environments. The Engineer is responsible for planning, implementing, maintaining, and supervising cybersecurity controls, practices, and infrastructure., * Research, design, and deploy resilient, reliable, and scalable security controls for IT/business projects.

• Provide technical leadership in designing, implementing, testing, and rolling out of cybersecurity solutions and/or cyber controls in IT/Business projects.
• Collaborate with the IT team to deliver a secure, resilient, and reliable infrastructure environment.
• Participate in and contribute to identification of cybersecurity tools and systems, business continuity planning, and disaster recovery efforts.
• Provide platform support for cybersecurity technologies include but are not limited to: Data Loss Prevention (DLP), Security Incident Event Management (SIEM), Brand Monitoring, Threat Intelligence, User Behavior Analytics, File Integrity Monitoring, Firewall Analyzer, DDoS Mitigation, Secure Internet Access/Web Content Filters, Endpoint Detection & Response, Vulnerability Management, Security Hardening, SOAR-Orchestration, Cloud Security Platforms, and Secure Email Gateway.
• Ability to secure storage, web, application, networking components in Cloud environments (Azure and AWS).
• Support cybersecurity service management request queue (incidents/service requests)
• Support and contribute to change control and change approval board functions.
• Support design, maintenance, and analysis of the network architecture to protect against cybersecurity threats and exposed vectors.
• Execute and improve core functions of incident response including threat detection/prevention, detection engineering, incident response, security monitoring, and digital forensics.
• Support cybersecurity incident response efforts, handling escalations with Cybersecurity Operations and managed service providers.
• Assess vulnerabilities and threats to the network, evaluate available security processes and technologies and make recommendations to management and business partners.
• Support patch and vulnerability management program efforts (such as: vulnerability read-outs, solution analysis, technical direction in administrator breakout sessions)
• Research latest security threats, cybersecurity standards/frameworks, and vulnerabilities to assess the organizations threat landscape.
• Provide regular status updates to leadership on ongoing projects, maintenance, and systems support.
• Assist in efforts to maintain compliance with PCI-DSS, TSA, SOX, and other external/internal compliance requirements.
• Provide cybersecurity expertise in evaluation of 3rd party vendor risk management reviews.
• Participate in “on-call” rotations requiring night and weekend availability as scheduled, provide additional availability 24/7, when necessary., General Direction: The incumbent normally receives little instruction on day-to-day work and receives general instructions on new assignments.

Internet Security, Customer Support/Service, Aircraft Maintenance, Team Lead/Manager, Nonprofit, Software Engineering, Network Administration/Management, Cloud Computing, Identify Issues, Internet Security, * Bachelor’s degree in computer science, technology, or equivalent combination of education and relevant experience (required).

• 6+ years cybersecurity operations and/or engineering experience required.
• 4+ years in security engineering with hands-on experience with enterprise cybersecurity product type: EDR (SentinelOne, Crowdstrike, or Cylance) (required).
• 4+ years in security engineering with hands-on experience with enterprise cybersecurity product type: Secure Email Gateway (Mimecast, Proofpoint, or Office365 Exchange) (required).
• 4+ years in security engineering with hands-on experience with enterprise cybersecurity product type: Vulnerability Management (Nessus, Qualys, or Rapid7) (required).
• 4+ years in security engineering with hands-on experience with enterprise cybersecurity product type: (SIEM (Splunk, Rapid7, or LogRhythm) (required).
• 3+ years of enterprise firewall administration or auditing experience (required).
• Industry cybersecurity certification: CompTIA: Security+ or Pentest+, CEH, CISSP, OCSP, SANS: GCIH or GSEC, CISSP, ISACA: CISA or CISM, Security+, SSCP, or CCNA (required, or willing to attain within 3 months of start date).
• Hands-on Cloud cybersecurity design and implementation (Azure/AWS) (required)
• Design and implementation of security controls including experience in applying security framework methodologies; to include NIST, Cloud (CSA), wired, and wireless security principles (required)
• Experience with Wireshark and NMAP (required)
• Experience with URL Filtering/Web Proxy management and troubleshooting (required)
• PCI-DSS or other security compliance environment experience (highly desirable)

Knowledge, Skills and Abilities

• Proficient in troubleshooting network/system related issues and effectively manage components in a production environment.
• Strong understanding of attack vectors, common intrusion techniques, threat intelligence, application/host/network security hardening, micro-segmentation, network access control, networking protocols, and enterprise risk management concepts.
• Ability to troubleshoot security, networking, client server, Wi-Fi, and VPN issues.
• Ability to maintain an understanding of industry trends and stay abreast of current vulnerabilities and security concerns, understanding their impact on the organization.
• Expert knowledge of enterprise firewall management and deployment.
• Broad and thorough knowledge of enterprise security systems and devices.
• Proficient in deploying and managing complex Cloud infrastructures (Azure/AWS).
• Knowledgeable in penetration testing and vulnerability assessments and remediation.
• Proficient in network traffic and packet analysis.
• Demonstrable experience working with configuration management/automation tools.
• Ability to remain organized and to elicit cooperation from a wide variety of internal team members and 3rd party providers.
• Work calmly and methodically under pressure and against tight deadlines.
• Able to accurately estimate level of effort and deliver projects within scheduled commitments.
• Ability to quickly learn new systems, devices, and methodologies.
• Excellent written and verbal communication skills, including the ability to write detailed technical documents.
• Willing to work more than 40 hours and some weekends.
• Willing to do On-Call rotation for after hours and weekend support.
• Communicates clearly and effectively.
• Manages time efficiently and multi-tasks effectively.
• Exceptional customer service skills.

Equipment Operated

Laptop endpoint running Windows and a variety of cybersecurity applications and commercial tools., Light physical effort required by handling objects up to 20 pounds occasionally and/or up to 10 pounds frequently.

Depending on role and eligibility, available benefits and programs may include:

• Medical, dental and vision coverage
• 401(k) retirement savings options
• Paid holidays, vacation time and sick time
• Travel privileges on Frontier Airlines and participating partner airlines, based on current program rules and availability
• Buddy passes, based on eligibility and program rules
• Travel-related discounts and employee discounts on select products, services and vendors
• A hybrid schedule for eligible headquarters roles based in Denver, Colorado
• Business casual dress options for eligible corporate and support roles
• Employee support programs and resources, including the HOPE League, Frontier Airlines’ nonprofit organization

About Frontier Airlines

Frontier Airlines is a Denver-based airline serving destinations across the United States and select international markets. Our people support every part of the travel journey, from airport operations and flight crews to aircraft maintenance, customer support, corporate teams and more.

We’re focused on delivering meaningful value by making travel more accessible, practical and easy to personalize for our customers. Across the airline, our teams help support a safe, reliable and efficient operation while continuing to strengthen the experience for the people who choose Frontier.

Working at Frontier Airlines

At Frontier, our mission is to Make Every Flight Count. That mission guides how we support our customers, our people and the operation every day.

As a Frontier employee, your work connects to more than a single role. Whether you’re supporting flights, helping customers, maintaining aircraft, leading teams or working behind the scenes, you help create a travel experience that is safe, reliable and built around value.

Our work is guided by our core values: customer first, safety always, operational excellence and one team. These values shape how we make decisions, support each other and deliver for the people who count on us.