Engineer - Cybersecurity

Frontier Airlines; Denver (CO); On-site; USD 100,104 - 132,870; Full time

Benefits offered by this job

Flight benefits

Buddy passes

Travel discounts

Cell plan discounts

Dress for your Day

Flexible schedules

Total Rewards program

HOPE League

Job summary

Frontier Airlines is seeking a Cybersecurity Engineer to join a dedicated team protecting its network infrastructure. You will design and implement security controls across on‑prem and cloud environments, lead incident response efforts, and collaborate with IT to ensure a secure, resilient platform.

The role requires extensive hands-on experience with EDR, email gateways, vulnerability management, and SIEM, along with cloud security design in Azure and AWS.

Qualifications

• Bachelor’s degree in computer science/tech or equivalent.
• 6+ years cybersecurity operations/engineering experience.
• 4+ years in security engineering with enterprise product experience (EDR).
• 4+ years with Secure Email Gateway products.
• 4+ years with Vulnerability Management tools.
• 4+ years with SIEM platforms.
• 3+ years firewall administration.
• Security certifications required or willing to attain within 3 months.
• Hands-on cloud security design (Azure/AWS) and risk assessment.
• Familiarity with NIST/CSA security frameworks.

Responsibilities

• Design, implement, test, and deploy cybersecurity controls.
• Provide technical leadership for cybersecurity solutions across projects.
• Collaborate with IT to deliver secure infrastructure.
• Support incident response, threat detection, and forensics activities.
• Maintain compliance with PCI-DSS, TSA, SOX, and internal policies.
• Participate in on-call rotations and after-hours support.

Skills

Cybersecurity operations

Security engineering

Cloud security design

Incident response

Threat detection

Network security

Communication skills

Education

Bachelor’s degree

Tools

SentinelOne

CrowdStrike

Cylance

Mimecast

Proofpoint

Office365 Exchange

Nessus

Qualys

Rapid7

Splunk

Wireshark

NMAP

Job description

Work Perks

• Flight benefits for you and your family to fly on Frontier Airlines
• Buddy passes for your friends so they can experience what makes us so great
• Discounts throughout the travel industry on hotels, car rentals, cruises and vacation packages
• Discounts on cell phone plans, movie tickets, restaurants, luggage and over 2,000 other vendors
• Enjoy a ‘Dress for your Day’ business casual environment
• Flexible work schedules that support work/life balance
• Total Rewards program including a competitive base salary, short term incentives, long-term incentives, paid holidays, 401(k) plan, vacation/sick time and medical/dental/vision insurance that begins the 1st of the month following your hire date.
• We play our part to make a difference. The HOPE League, Frontier Airlines’ non-profit organization, is dedicated to providing employees financial assistance during catastrophic hardship

What Will You Be Doing?

The Cybersecurity Engineer will be part of a Cybersecurity team that assesses, designs, implements, troubleshoots, and supports the cybersecurity posture of Frontier’s network infrastructure. The Cybersecurity Engineer will report to the Manager of Cybersecurity Architecture & Engineering, enabling cybersecurity design and implementation efforts to protect Frontier’s network and systems against cyber-attacks and data breaches. The Cybersecurity Engineer is responsible for providing technical input on projects for Frontier’s on-prem and cloud environments. The Engineer is responsible for planning, implementing, maintaining, and supervising cybersecurity controls, practices, and infrastructure.

Essential Functions

• Research, design, and deploy resilient, reliable, and scalable security controls for IT/business projects.
• Provide technical leadership in designing, implementing, testing, and rolling out of cybersecurity solutions and/or cyber controls in IT/Business projects.
• Collaborate with the IT team to deliver a secure, resilient, and reliable infrastructure environment.
• Participate in and contribute to identification of cybersecurity tools and systems, business continuity planning, and disaster recovery efforts.
• Provide platform support for cybersecurity technologies include but are not limited to: Data Loss Prevention (DLP), Security Incident Event Management (SIEM), Brand Monitoring, Threat Intelligence, User Behavior Analytics, File Integrity Monitoring, Firewall Analyzer, DDoS Mitigation, Secure Internet Access/Web Content Filters, Endpoint Detection & Response, Vulnerability Management, Security Hardening, SOAR-Orchestration, Cloud Security Platforms, and Secure Email Gateway.
• Ability to secure storage, web, application, networking components in Cloud environments (Azure and AWS).
• Support cybersecurity service management request queue (incidents/service requests)
• Support and contribute to change control and change approval board functions.
• Support design, maintenance, and analysis of the network architecture to protect against cybersecurity threats and exposed vectors.
• Execute and improve core functions of incident response including threat detection/prevention, detection engineering, incident response, security monitoring, and digital forensics.
• Support cybersecurity incident response efforts, handling escalations with Cybersecurity Operations and managed service providers.
• Assess vulnerabilities and threats to the network, evaluate available security processes and technologies and make recommendations to management and business partners.
• Support patch and vulnerability management program efforts (such as: vulnerability read-outs, solution analysis, technical direction in administrator breakout sessions)
• Research latest security threats, cybersecurity standards/frameworks, and vulnerabilities to assess the organizations threat landscape.
• Provide regular status updates to leadership on ongoing projects, maintenance, and systems support.
• Assist in efforts to maintain compliance with PCI-DSS, TSA, SOX, and other external/internal compliance requirements.
• Provide cybersecurity expertise in evaluation of 3rd party vendor risk management reviews.
• Participate in on-call rotations requiring night and weekend availability as scheduled, provide additional availability 24/7, when necessary.

Qualifications

• Bachelor’s degree in computer science, technology, or equivalent combination of education and relevant experience (required).
• 6+ years cybersecurity operations and/or engineering experience required.
• 4+ years in security engineering with hands‑on experience with enterprise cybersecurity product type: EDR (SentinelOne, Crowdstrike, or Cylance) (required).
• 4+ years in security engineering with hands‑on experience with enterprise cybersecurity product type: Secure Email Gateway (Mimecast, Proofpoint, or Office365 Exchange) (required).
• 4+ years in security engineering with hands‑on experience with enterprise cybersecurity product type: Vulnerability Management (Nessus, Qualys, or Rapid7) (required).
• 4+ years in security engineering with hands‑on experience with enterprise cybersecurity product type: SIEM (Splunk, Rapid7, or LogRhythm) (required).
• 3+ years of enterprise firewall administration or auditing experience (required).
• Industry cybersecurity certification: CompTIA: Security+ or Pentest+, CEH, CISSP, OCSP, SANS: GCIH or GSEC, CISSP, ISACA: CISA or CISM, Security+, SSCP, or CCNA (required, or willing to attain within 3 months of start date).
• Hands‑on Cloud cybersecurity design and implementation (Azure/AWS) (required)
• Design and implementation of security controls including experience in applying security framework methodologies; to include NIST, Cloud (CSA), wired, and wireless security principles (required)
• Experience with Wireshark and NMAP (required)
• Experience with URL Filtering/Web Proxy management and troubleshooting (required)
• PCI-DSS or other security compliance environment experience (highly desirable)

Knowledge, Skills And Abilities

• Proficient in troubleshooting network/system related issues and effectively manage components in a production environment.
• Strong understanding of attack vectors, common intrusion techniques, threat intelligence, application/host/network security hardening, micro‑segmentation, network access control, networking protocols, and enterprise risk management concepts.
• Ability to troubleshoot security, networking, client server, Wi‑Fi, and VPN issues.
• Ability to maintain an understanding of industry trends and stay abreast of current vulnerabilities and security concerns, understanding their impact on the organization.
• Expert knowledge of enterprise firewall management and deployment.
• Broad and thorough knowledge of enterprise security systems and devices.
• Proficient in deploying and managing complex Cloud infrastructures (Azure/AWS).Knowledgeable in penetration testing and vulnerability assessments and remediation.
• Proficient in network traffic and packet analysis.
• Demonstrable experience working with configuration management/automation tools.
• Ability to remain organized and to elicit cooperation from a wide variety of internal team members and 3rd party providers.
• Work calmly and methodically under pressure and against tight deadlines.
• Able to accurately estimate level of effort and deliver projects within scheduled commitments.
• Ability to quickly learn new systems, devices, and methodologies.
• Excellent written and verbal communication skills, including the ability to write detailed technical documents.
• Willing to work more than 40 hours and some weekends.
• Willing to do On-Call rotation for after hours and weekend support.
• Communicates clearly and effectively.
• Manages time efficiently and multi‑tasks effectively.
• Exceptional customer service skills.

Equipment Operated

Laptop endpoint running Windows and a variety of cybersecurity applications and commercial tools.

Work Environment

Typical office environment, adequately heated and cooled

Physical Effort

Light physical effort required by handling objects up to 20 pounds occasionally and/or up to 10 pounds frequently.

Supervision Received

General Direction: The incumbent normally receives little instruction on day‑to‑day work and receives general instructions on new assignments.

Salary Range

$100,104 - $132,870 - Please note: this role will close on or before 9/30/26.

Positions Supervised

• None

Workplace Policies

Disclaimer: The above statements are intended only to describe the general nature and level of work required of the referenced position; they are not intended to be an exhaustive list of all responsibilities, duties, and skills required of individuals in this position. Please be advised that duties and expectations of this position may be subject to change.

Frontier Airlines, Inc. is an equal opportunity employer and, as such, is committed to providing equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, national origin, age, marital status, veteran status, sexual orientation, gender identity or expression, disability status, pregnancy, genetic information, citizenship status or any other basis protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Frontier Airlines is a Zero Tolerance Drug-Free Workplace. All prospective DOT safety-sensitive employees are subject to pre-employment testing for the following drugs and their metabolites: Marijuana, Cocaine, Amphetamines, Opioids and Phencyclidine (PCP). Further, any DOT safety-sensitive job applicant who is found to have tested positive on any required drug or alcohol test at a former employer will be considered ineligible for employment with Frontier.

Colorado Residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.