Remote Threat Intelligence & Security Operations Analyst

Relha LLC; Dallas, Northern (TX, KY); Hybrid; USD 99,000 - 110,000; Full time

Benefits offered by this job

Flight benefits

Retirement plan contributions

Profit sharing

Health insurance

Job summary

Southwest Airlines is seeking a Cybersecurity Analyst focused on Threat Intelligence and Threat Operations to monitor, analyze, and respond to security events. You will support Threat Hunting, Red Team, and Purple Team activities and translate adversary intelligence into actionable outcomes.

This remote role requires occasional travel for trainings and meetings, and a limited group of states or localities are ineligible for off-site work.

Qualifications

• Advanced analytical skills across diverse cybersecurity domains (IR, Threat Intel, GRC).
• Experience in incident response and threat intelligence activities.
• Ability to translate intelligence into actionable security outcomes.
• Knowledge of NIST, ISO 27001 and privacy regulations.
• Strong written and verbal communication for technical and non-technical stakeholders.

Responsibilities

• Lead high-priority incident response efforts and mentor junior analysts.
• Develop and drive threat hunting strategies and identifying emerging threats.
• Oversee vulnerability management and scanning processes, improving workflows.
• Architect and optimize security infrastructure and controls.
• Mature GRC initiatives and ensure regulatory best practices.
• Lead privacy initiatives and enforce data protection measures.
• Deliver cybersecurity training and awareness programs for diverse audiences.

Skills

Advanced analytical skills

Threat intelligence

Security incident response

Effective communication

Education

High School Diploma or GED

Tools

SIEM

Threat intelligence platform

Job description

Southwest Airlines is seeking a Cybersecurity Analyst focused on Threat Intelligence and Threat Operations to monitor, analyze, and respond to security events. You will support Threat Hunting, Red Team, and Purple Team activities and translate adversary intelligence into actionable outcomes.

This remote role requires occasional travel for trainings and meetings, and a limited group of states or localities are ineligible for off-site work.