Get the chrome extension Supervisor Flight Attendants Southwest Airlines Baltimore
Flying Seekers
Tech Lead Cybersecurity Engineer - Governance Risk & Compliance (GRC)
Southwest Airlines
Department:
TechnologyOur Company Promise
We are committed to provide our Employees a stable work environment with equal opportunity for learning and personal growth. Creativity and innovation are encouraged for improving the effectiveness of Southwest Airlines. Above all, Employees will be provided the same concern, respect, and caring attitude within the organization that they are expected to share externally with every Southwest Customer.
Job Description:
As a Tech Lead Cybersecurity Engineer on the Governance, Risk & Compliance (GRC) Team, you’ll shape the technology that helps Southwest manage cyber risk, meet evolving regulatory requirements, and protect its Customers, Employees, and operation. Working at the intersection of cybersecurity, compliance, data, and engineering, you’ll lead the design and integration of scalable solutions that automate evidence collection, control testing, continuous monitoring, reporting, and other critical compliance activities. You’ll partner across Cybersecurity, Engineering, Digital Technology, Audit, Legal, and Compliance to translate complex requirements into secure, well-integrated technology capabilities, including AWS-based solutions and a maturing common platform. As an enterprise subject matter expert, you’ll guide Partner Teams, mentor Engineers, strengthen security standards, and help embed compliance into technology solutions from the start. Through technical leadership, automation, and data-driven insights, you’ll reduce manual effort, improve audit readiness, strengthen Southwest’s security posture, and enable the Company to innovate with greater speed, confidence, and resilience.
Additional Details
- This role is offered as a remote workplace position, which may require travel for training, meetings, conferences, etc. Outside of those required visits, the majority of your working time may be spent in a remote location, away from our Corporate Campus. Please note, while this is a remote position, there is a limited group of states or localities ineligible for Employees to regularly perform their work. Those ineligible locations are: Alaska, California, Colorado, Delaware, Illinois, Iowa, Maryland, Massachusetts, Montana, New Hampshire, New Jersey, New York, North Dakota, Oregon, Pennsylvania, South Dakota, Vermont, West Virginia, Washington, Wyoming, and Puerto Rico.
- U.S. citizenship or current authorization to work in the U.S. required and no current or future work authorization sponsorship available.
We’re committed to fair hiring practices and to making employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, military or veteran status, disability, genetic information, or other legally protected characteristics.
Responsibilities
- Provide security guidance to application and Partner Teams to remediate security vulnerabilities, risk items, and policy exceptions
- Deliver training for clients in use of the key Cybersecurity systems, and automated environments
- Identify Cybersecurity problems, plan solutions, recommend software and systems, and coordinate developments in an orderly manner to meet business requirements
- Act as an agent for change to reflect the latest Cybersecurity standards and practices
- Serves as an enterprise subject matter expert (SME) and advocate of IT Security standards and reference architectures
- Act as a Mentor to both Co-Hearts on responding to production program issues and coaches on resolutions in Cybersecurity and Partner Teams
- Lead testing and implement system enhancements using techniques that preserve system integrity and drives a results-oriented environment
- Develop, test and operate end-to-end software solutions using machine learning, related optimization, and knowledge systems
- Ensure that systems are functionally appropriate, technically sound, and well-integrated
- May perform other job duties as directed by Employee's Leaders
Knowledge, Skills and Abilities
- Knowledge of existing elements in value pipeline, including: PingFederate, eDirectory, Active Directory, CyberArk, and Micro Focus IDM
- Skilled in cloud computing technology and its concepts (AWS)
- Skilled in infrastructure-as-code (IaC) development (Terraform, CloudFormation or similar) and automated configuration management using configuration-as-code (CaC) development (Chef, Puppet, Ansible or similar)
- Skilled in implementing Cybersecurity specific Integration Tests for integrations providing Identity, Security Policy, and Cryptography utilizing tools such as Terragrunt and Gradle
- Skilled in performance, logging and monitoring tools such as Prometheus, ELK Stack, AppD and their integration into platform tools such as AWS CloudWatch
- Skilled in credential management tools and solutions like AWS Secrets Manager, CyberArk or Hashicorp Vault
- Skilled in creating parameterized build jobs via GitLab or Jenkins for Continuous Integration of Security and environmental variables
- Knowledge of architectural principles, design patterns and common methodologies across a variety of technologies
- Ability to mentor and guide technical resources, with a focus on growth of the technical bench
Education
- Required: High School Diploma or GED
- Required: Bachelor's degree in Computer Science, Engineering, Information systems or similar fields of study or equivalent advanced level experience
Experience
- Required: Expert-level experience, expansive and far-reaching knowledge in developing, implementing, or integrating technologies for Enterprise security
- Preferred: Experience designing and implementing automated compliance controls, continuous controls monitoring, evidence collection solutions, and compliance-by-design principles supporting PCI DSS, NIST, SOX, CMMC, and other regulatory frameworks.
- Preferred: Experience developing compliance analytics, dashboards, executive reporting, key performance indicators (KPIs), and data-driven insights that improve audit readiness, control effectiveness, and risk visibility.
- Preferred: Demonstrated ability to communicate complex technical and compliance concepts to both technical and non-technical audiences, including executive leadership, auditors, regulators, and business stakeholders.
- Preferred: Deep expertise supporting PCI DSS compliance programs within a Level 1 merchant environment, including PCI scoping, control implementation, evidence management, audit testing, assessment readiness, remediation planning, and direct engagement with QSAs, Internal Audit, and technology stakeholders.
- Preferred: Previous QSA, ISA, PCI Professional (PCIP), or related compliance certification experience.
Licensing/Certification
- N/A
Physical Abilities
- Ability to perform work duties from [limited space work station/desk/office area] for extended periods of time
- Ability to communicate and interact with others in the English language to meet the demands of the job
- Ability to use a computer and other office productivity tools with sufficient speed and accuracy to meet the demands of the job
Other Qualifications
- Must maintain a well-groomed appearance per Company appearance standards as described in established guidelines
- Must be a U.S. citizen or have authorization to work in the United States as defined by the Immigration Reform Act of 1986
- Must be at least 18 years of age
- Must be able to comply with Company attendance standards as described in established guidelines
- Must be able to travel and /or attend Company and non-Company facilities and remote locations such as remote-based offices as necessary
Pay & Benefits
Competitive market salary from $168,650 per year to $187,400 per year* depending on qualifications and experience. For eligible Leadership and individual contributor roles, additional bonus opportunities are available and awarded at the discretion of the company.
Benefits you’ll love:
- Fly for free, as a privilege, on any open seat on all Southwest flights (your eligible dependents too)
- Southwest will help fund your 401(k) retirement savings with Company contributions up to 9.3% of your eligible earnings**
- Potential for annual ProfitSharing contribution in the Southwest Retirement Savings Plan- when Southwest profits, you profit***
- Competitive health insurance for you and your eligible dependents (including pets)
- Southwest offers health plan coverage options that start from the very first day of employment. You will have 30 days to select and enroll in your health plan with coverage retroactively available to your first day of employment.
- Explore more Benefits you’ll love:
*Pay amount does not guarantee employment for any particular period of time.
**401(k) match contributions are subject to Retirement Savings Plan vesting schedule and applicable IRS limits ***ProfitSharing contributions are subject to Retirement Savings Plan vesting schedule and are made at the discretion of the Company.
Southwest Airlines is an Equal Opportunity Employer.
Please print/save this job description because it won't be available after you apply.
Originally posted on Himalayas
Cybersecurity Analyst - Cyber Risk Management
Southwest Airlines
Department:
TechnologyOur Company Promise
We are committed to provide our Employees a stable work environment with equal opportunity for learning and personal growth. Creativity and innovation are encouraged for improving the effectiveness of Southwest Airlines. Above all, Employees will be provided the same concern, respect, and caring attitude within the organization that they are expected to share externally with every Southwest Customer.
Job Description:
The Cybersecurity Analyst supports the Cyber Risk Management Team by advancing cybersecurity governance practices that strengthen compliance, reduce risk, and enhance the organization’s overall security posture. They’ll support cybersecurity policy management, exception governance, regulatory alignment, audit readiness, and governance reporting while partnering across Cybersecurity, Technology, and business Teams. They’ll contribute to the development and maintenance of policies, standards, risk documentation, compliance tracking, and security metrics that support internal and external requirements. The Cybersecurity Analyst leverages strong analytical, organizational, communication, and problem‑solving skills to manage multiple priorities, translate governance requirements into actionable processes, and promote a culture of security, compliance, and continuous improvement across the organization.
Additional Details:
- This role is offered as a remote workplace position, which may require travel for trainings, meetings, conferences, etc. Outside of those required visits, the majority of your working time may be spent in an approved remote location, away from our Corporate Campus. Please note, while this is a remote position, there is limited group of states or localities ineligible for Employees to regularly perform their work off-site. Those ineligible locations are: Alaska, California, Colorado, Delaware, Illinois, Iowa, Massachusetts, Maryland, Montana, New Jersey, New Hampshire New York, North Dakota, South Dakota, Oregon, Pennsylvania, Vermont, Washington, West Virginia, and Wyoming, and Puerto Rico.
- U.S. citizenship or current authorization to work in the U.S. required and no current or future work authorization sponsorship available.
We’re committed to fair hiring practices and to making employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, military or veteran status, disability, genetic information, or other legally protected characteristics.
Responsibilities
- Demonstrate advanced analytical skills across diverse cybersecurity domains, leading the identification and resolution of complex cybersecurity issues in areas such as Incident Response, Threat Intelligence, Governance, Risk, and Compliance (GRC), Privacy, Vulnerability Management, and Engineering Operations
- Lead and actively participate in high-priority incident response efforts, taking ownership of critical activities related to the identification, containment, and resolution of security incidents, and providing mentorship to junior analysts
- Drive advanced threat intelligence initiatives, including the development of threat hunting strategies, proactive identification of emerging threats, and the implementation of innovative solutions to enhance the organization's security posture
- Take a lead role in vulnerability management, overseeing and improving the vulnerability assessments and scanning processes, and providing mentorship to junior and mid-level analysts
- Architect and lead the optimization of the organization's security infrastructure, overseeing the implementation of advanced cybersecurity controls, and ensuring the organization is prepared to address evolving cyber threats
- Take a leadership role in maturing GRC initiatives, ensuring comprehensive understanding, and proactively shaping cybersecurity regulations, standards, and best practices within the organization
- Lead privacy initiatives, overseeing the implementation and enforcement of privacy controls and practices, and ensuring the protection of sensitive information in compliance with relevant regulations
- Drive the continual improvement of cybersecurity practices and resilience, staying at the forefront of industry trends and emerging technologies to shape and enhance the organization’s advanced security posture
- Lead the development and execution of comprehensive cybersecurity training and awareness initiatives, tailoring programs to different audiences and providing mentorship to junior team members
- Play a key role in fostering collaboration across the organization, engaging with senior leadership, cross-functional teams, and external stakeholders, and representing the cybersecurity function at a strategic level
- May perform other job duties as directed by Employee's Leaders
Knowledge, Skills and Abilities
- Knowledge of various cybersecurity frameworks and standards (e.g., NIST, ISO 27001) to guide security initiatives
- Knowledge of data protection and privacy regulations (e.g., GDPR, CCPA) to ensure the safeguarding of sensitive information
- Knowledge of incident response procedures and methodologies for effective response to security incidents
- Skilled in conducting risk assessments and developing risk mitigation strategies
- Skilled in using security monitoring tools, SIEM systems, and intrusion detection systems for threat detection and analysis
- Skilled in written and verbal communication skills for reporting and conveying technical information to non-technical stakeholders
- Ability to proactively identify and assess risks, and implement mitigation strategies to protect the organization's assets
- Ability to monitor program risks, issues, and scope related to cybersecurity initiatives with the appropriate level of priority and escalation
- Skilled in collaborating with cross-functional teams and stakeholders to drive cybersecurity initiatives and risk management
- Ability to adapt to evolving threats, technologies, and best practices in the dynamic field of cybersecurity
Education
- Required: High School Diploma or GED
- Preferred: Bachelor’s degree in Cybersecurity, Information Technology, or a related field
Experience
- Required: Intermediate-level experience, fully functioning broad knowledge in cybersecurity principles and concepts, developing skills and knowledge in information technology (IT) operations, programming, systems/software development or another IT related field
- Preferred:
- Experience in Cybersecurity, IT Governance, Risk Management, and Compliance or Information Technology
- Familiarity with cybersecurity frameworks such as NIST 800-053, ISO 27001, or PCI-DSS
- Knowledge of privacy best practices
- Exposure to GRC platforms (e.g., ServiceNow, Archer, or OneTrust)
Licensing/Certification
- N/A
Physical Abilities
- Ability to perform work duties from [limited space work station/desk/office area] for extended periods of time
- Ability to communicate and interact with others in the English language to meet the demands of the job
- Ability to use a computer and other office productivity tools with sufficient speed and accuracy to meet the demands of the job
Other Qualifications
- Must maintain a well-groomed appearance per Company appearance standards as described in established guidelines
- Must be a U.S. citizen or have authorization to work in the United States as defined by the Immigration Reform Act of 1986
- Must be at least 18 years of age
- Must be able to comply with Company attendance standards as described in established guidelines
- Must be able to travel and /or attend Company and non-Company facilities and remote locations such as remote-based offices as necessary
Pay & Benefits
- Competitive market salary from $98,650 to $109,600 per year* depending on qualifications and experience. For eligible Leadership and individual contributor roles, additional bonus opportunities are available and awarded at the discretion of the company.
Benefits you’ll love
- Fly for free, as a privilege, on any open seat on all Southwest flights (your eligible dependents too)
- Southwest will help fund your Retirement Savings Plan with Company contributions up to 9.3% of your eligible earnings**
- Potential for annual ProfitSharing contribution in the Southwest Retirement Savings Plan- when Southwest profits, you profit***
- Competitive health insurance for you and your eligible dependents (including pets)
- Southwest offers health plan coverage options that start from the very first day of employment. You will have 30 days to select and enroll in your health plan with coverage retroactively available to your first day of employment.
- Explore more Benefits you’ll love:
*Pay amount does not guarantee employment for any particular period of time.
**401(k) match contributions are subject to the plan’s vesting schedule and applicable IRS limits
***ProfitSharing contributions are subject to plan’s vesting schedule and are made at the discretion of the Company
Southwest Airlines is an Equal Opportunity Employer.
Please print/save this job description because it won't be available after you apply.
Originally posted on Himalayas
Summer 2027 Cybersecurity Engineer Internship
Southwest Airlines
Department:
TechnologyOur Company Promise
We are committed to provide our Employees a stable work environment with equal opportunity for learning and personal growth. Creativity and innovation are encouraged for improving the effectiveness of Southwest Airlines. Above all, Employees will be provided the same concern, respect, and caring attitude within the organization that they are expected to share externally with every Southwest Customer.
Job Description:
Summer 2027 Cybersecurity Engineering Internships
Please print/save the job description because it won’t be available after you apply.
To be considered, please ensure that you attach a resume to your application.
We ask that you apply with your personal email address rather than your school email (.edu) so we can stay connected about future roles at Southwest.
Southwest Airlines is committed to providing Employees with equal opportunities for learning and personal growth. As a Technology Intern, you’ll contribute to real-time projects, collaborate with fellow interns and cross-functional teams, help advance Company initiatives, and support Southwest’s Purpose of connecting People to what’s important in their lives through friendly, reliable, and low-cost air travel. Throughout the internship, you’ll have the opportunity to learn, grow, and develop as a future professional while making a meaningful impact. The Cybersecurity Engineering Intern should be a strong communicator and collaborator, capable of presenting ideas in both technical and user-friendly terms while helping shape the future of Southwest’s Technology Team.If hired, Interns may be selected to support one of the following Teams:
Identity and Access Management
The Identity and Access Management (IAM) Team develops and supports the solutions that manage digital identities and secure access to applications, systems, and data across Southwest. As a Cybersecurity Engineer Intern, you will gain hands-on experience supporting modern identity governance and administration initiatives while working with enterprise identity platforms, automation, and access management technologies. You'll collaborate with Cybersecurity Engineers and Technology Teams to help improve identity lifecycle management, streamline legacy processes, and enhance security through automation and AI-driven capabilities. This internship provides valuable exposure to identity and access management practices and demonstrates how secure, efficient access enables and protects enterprise technology operations.
Cloud Cyber Security
The Cloud Cyber Security Team engineers and secures the cloud platforms and services that support Southwest's technology ecosystem. As a Cybersecurity Engineer Intern, you will gain hands-on experience helping design, implement, and support cloud security solutions that enable secure and scalable technology delivery. You'll collaborate with Cybersecurity Engineers and Technology Teams while gaining exposure to cloud security controls, infrastructure security, automation, secure development practices, threat detection, and security monitoring. This internship provides valuable exposure to modern cloud security engineering and demonstrates how technology enables the secure delivery of critical business and operational capabilities across Southwest.
Additional Details
- Receive free, unlimited space available travel privileges for yourself (taxes and fees may apply on international travel).
- Interns will be provided any required equipment, such as a laptop, for the internship.
- Stipends may be offered based on eligibility and program criteria.
- The Intern will work full-time as a Cybersecurity Engineering Intern within the Technology Department. This role is offered as a remote workplace position, which may require travel for trainings, meetings, conferences, etc. Outside of those required visits, the majority of your working time may be spent in an approved remote location, away from our Corporate Campus. Please note, while this is a remote position, there is limited group of states or localities ineligible for Employees to regularly perform their work off-site. Those ineligible locations are: Alaska, California, Colorado, Delaware, Illinois, Iowa, Massachusetts, Maryland, Montana, New Jersey, New Hampshire New York, North Dakota, South Dakota, Oregon, Pennsylvania, Vermont, Washington, West Virginia, and Wyoming, and Puerto Rico.
- U.S. citizenship or current authorization to work in the U.S. required and no current or future work authorization sponsorship available.
We are committed to fair hiring practices and to making employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, military or veteran status, disability, genetic information, or other legally protected characteristics.
Duties and Responsibilities
The duties and responsibilities of the Cybersecurity Engineering Intern may include but are not limited to:
- Under supervision, may be responsible for vendor management, partner governance, and system oversight to deploy, monitor, and maintain secure solutions throughout their lifecycle.
- Work with a Team to research issues, plan and recommend solutions, and support the coordination of system and software developments. This includes monitoring performance, identifying bottlenecks, and collaborating with partners to implement fixes.
- Help ensure high system and infrastructure availability levels by addressing and resolving low-to-medium complexity escalations.
- Support the implementation and ongoing updates of platform strategies and roadmaps to strengthen security posture.
- Stay informed of emerging technology trends and best practices relevant to cybersecurity and system operations.
- Contribute to team projects by meeting deadlines, fulfilling commitments, and delivering quality results.
Knowledge, Skills, and Abilities
- Coursework or experience with AWS Cloud services and infrastructure, including S3, Lambdas, Dynamo, Event Bridge, ECS, and Kinesis
- Coursework or experience with IAM framework
- Coursework or experience with SailPoint Identity Security Cloud (ISC)
- Coursework or experience with Agile or Scaled Agile (SAFe) methodologies
- Ability to stay organized and manage multiple and concurrent assignments under tight deadlines preferred
- Previous internship or work experience as a Cybersecurity Engineer Intern within the past 12 months preferred
- Ability to work effectively in a fast-paced, team-based, Customer service-oriented environment with a high regard for hospitality
- Demonstrate programming aptitude and ability for logical and abstract thinking
- Problem solving ability and strong written/verbal communications skills preferred
- Works well in a culture that is open, direct, respectful, courteous, and compassionate preferred
Time Commitment and Pay
- Join Southwest as a Summer 2027 Intern, with a 12-week internship lasting from May 18 – August 8, 2027.
- Required: Full-time 40hrs a week.
- Must maintain a consistent weekly schedule during normal business hours at a max of 8hrs per day.
- $26 - $30 /hour, corresponding with progress towards degree completion.
Education
- High School Diploma, GED or equivalent education required.
- Progress towards degree, major, or minor in MIS, Business, Computer Science, Computer Engineering, Information Systems or Information Technology, Data Analytics, Statistics, Economics, Finance, Business Administration or similar degree.
- Progress towards a 4-year undergraduate degree or graduate degree is required.
- To be eligible, you must be currently enrolled as a full-time student (as defined by your university) at the time of application and during the internship.
- 1-2 semesters remaining at the time the internship ends is preferred.
- Minimum 2.5 cumulative GPA at the time of application is required.
Basic Qualifications
- Must be at least 18 years of age.
- Must have authorization to work in the United States as defined by the Immigration Reform Act of 1986.
- You must have a valid U.S. Social Security Number to complete the full hiring process
Southwest Airlines is an Equal Opportunity Employer.
Please print/save this job description because it won't be available after you apply.
Originally posted on Himalayas