Director of Cybersecurity Product & AI Risk

United Airlines; Chicago (IL); Remote; USD 141,000 - 183,000; Full time

Benefits offered by this job

Flight privileges

Medical, dental and vision benefits

Parental leave

Paid time off & holidays

Job summary

United Airlines is seeking a senior Cybersecurity and Digital Risk leader to drive secure design and risk management across AI/ML platforms. You will lead talent development, define security programs, and align with compliance standards while coordinating remediation with partners.

The role emphasizes SDLC security, cloud-native tools, and DevSecOps maturity in a fast-paced environment, with a focus on AI security testing and strategic workforce transformation.

Qualifications

• Requires strong knowledge of OWASP Top 10 and threat modeling.
• Experience with risk management processes and secure AI lifecycle reviews.
• Experience applying security/testing across SDLC for AI/ML or generative AI.
• Hands-on with multiple app security testing tools and DevSecOps stacks.
• Ability to lead people and manage internal/ external partners.

Responsibilities

• Lead recruiting and talent development for the cyber safety team.
• Define, prioritize, allocate resources, and report on projects and programs.
• Monitor legislation and compliance; update standards and architectures accordingly.
• Coordinate remediation of non-compliant items to meet standards.
• Assist with annual budgeting and monthly forecasting.

Skills

OWASP Top 10

Threat modeling

Risk management

AI/ML security

AI lifecycle security

Application security testing

DevSecOps

Cloud security (AWS)

Leadership

Stakeholder management

Education

Bachelor's degree

Master's degree

Tools

SAST tooling

DAST tooling

MAST/IAST tooling

RAST tooling

Penetration testing tooling

AWS

GitHub

TeamCity

CloudWatch

Artifactory

CHEF

Job description

United Airlines is seeking a senior Cybersecurity and Digital Risk leader to drive secure design and risk management across AI/ML platforms. You will lead talent development, define security programs, and align with compliance standards while coordinating remediation with partners.

The role emphasizes SDLC security, cloud-native tools, and DevSecOps maturity in a fast-paced environment, with a focus on AI security testing and strategic workforce transformation.