Manager, IT Vulnerability Management

American Airlines; Fort Worth (TX); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Travel Perks

Health Benefits

Wellness Programs

401(k) Program

Discounts on hotels, cars, cruises

Job summary

American Airlines is seeking a senior leader to manage the Vulnerability Management program within the Information Technology team in Fort Worth, TX. You will design strategy, drive the program roadmap, and oversee operations to detect and remediate vulnerabilities across infrastructure and applications.

You will mentor up to 25 engineers, collaborate with Application and Cloud Security, and ensure SLAs and security policy compliance while aligning with our cybersecurity vision.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Systems, or related field.
• 5+ years IT experience and 4 years information security experience.
• 2 years of management/leadership experience.
• Experience with vulnerability management tools and security frameworks.

Responsibilities

• Lead and manage Vulnerability Management programs.
• Develop strategy and roadmaps according to security vision and policies.
• Design, deploy, maintain, and tune vulnerability solutions; collaborate with Application and Cloud Security.
• Manage team goals, activities, and scheduling.
• Ensure effective vulnerability detection and remediation.
• Identify and address chronic security issues and escalations.
• Oversee collaboration with cross-functional teams and vendors.
• Oversee a team of up to 25 members.

Skills

Vulnerability Mgmt

Tanium

Tenable

Qualys

Nucleus

Scripting

PowerShell

Python

CISSP

CISM

CISA

PCI DSS

NIST 800-53

Agile

Communication

Education

Bachelor’s degree in CS/CE/Tech

Master’s degree preferred

Job description

Location:DFW Reservations Office (DFW-SV01)
Cities:Fort Worth - TX
Requisition ID:88766

Job Description

Intro

Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you’ll travel the world, grow your expertise and become the best version of you. As you embark on a new journey, you’ll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop on board!

Why you'll love this job

• This job is a member of the Information Technology Team, within the Information Technology Division.
• The Manager of the Vulnerability Management team is responsible for achieving goals of American Airlines’ Cybersecurity program through the implementation of processes, procedures, and performance indicators related to infrastructure and application testing, identification and tracking open vulnerabilities, and incorporation of the latest threat intelligence. The Manager will be responsible for maintaining smooth operations, ensuring Service Level Agreements are met, and following policies and procedures.

What you'll do

This list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations.

• Leads and manages the Vulnerability Management programs
• Develops and drives the program strategy and roadmap according to American Airlines’ Cybersecurity vision, frameworks, and policies
• Designs, deploys, maintains, and fine-tunes Vulnerability Management solutionsDevelops workflows with external teams: Application Security, and Cloud Security
• Manages the team’s goals, activities, and scheduling
• Ensures effective vulnerability detection and remediation
• Identifies chronic operational and security issues and ensures that they are managed appropriately
• Manages and escalates roadblocks that may jeopardize security operations or increase risk to the company
• Creates and maintains technical security policies, standards, , benchmarks, guidelines, and SOPs
• Builds and manages a professional, creative, and collaborative team. Hires, coaches, and develops staff by serving as a senior mentor to the team.
• Interfaces and collaborates with cross-functional teams and organizations, esp. to identify and engineer improvements, and remediate security vulnerabilities and mitigate risks
• Conducts new technology/product evaluations through Proof of Concept (PoC) with other engineers and architects
• Ensures team members follow proper procedures and that all procedures are documented in accordance with local guidelines
• Oversees a team of up to 25 team members

All you'll need for success

Minimum Qualifications- Education & Prior Job Experience

• Bachelor’s degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering or related technical discipline, or equivalent experience/training
• 5+ years of Information Technology related experience
• 4 years of Information Security related experience
• 2 years of management/leadership experience

Preferred Qualifications- Education & Prior Job Experience

• Master’s degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering or related technical discipline, or equivalent experience/training
• 10 years of Information Technology related experience
• 5+ years of Information Security related experience

Skills, Licenses & Certifications

• Hands-on experience with Vulnerability Management solutions like Tanium, Tenable, Defender, Qualys, and Nucleus
• Working experience with scripting or programming (shell scripting, PowerShell, Python, etc.)
• Information Security Certification such as: CISSP, CISM, CISA, CEH, GCIH, GCIA, GCFA, GREM
• Familiarity with NIST Special Publications (e.g. 800-53, 800-37)
• Familiarity with PCI DSS Compliance standards and scanning practices
• Experience managing work using Agile principles for planning and delivery
• Strong technical aptitude, attention to detail and high commitment to quality
• Strong analytical and problem-solving skills
• Solution oriented, can define various pragmatic alternatives leading to appropriate Cybersecurity outcomes
• Ability to work independently with a high degree of initiative

What you'll get

Feel free to take advantage of all that American Airlines has to offer:

• Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network.
• Health Benefits: On day one, you’ll have access to your health, dental, prescription and vision benefits to help you stay well. And that’s just the start, we also offer virtual doctor visits, flexible spending accounts and more.
• Wellness Programs: We want you to be the best version of yourself – that’s why our wellness programs provide you with all the right tools, resources and support you need.
• 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year.
• Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more

Feel free to be yourself at American

From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Team Member Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world.
Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life’s journey? Feel free to be yourself at American.

Cities:Fort Worth - TX
Requisition ID:88766