Security Engineer – Automation, IR & Threat Detection

Skywest; St. George (VT); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

401(k) match

Performance Rewards and Profit Sharing

Health care - medical, dental, and viz

Discounted worldwide flight benefits,

Job summary

SkyWest is seeking an Information Security Engineer to implement, maintain, and improve cybersecurity across the organization. The role focuses on security engineering, security operations support, automation, incident response, and runbooks.

The successful candidate is self-motivated, curious, and driven to identify opportunities to improve security effectiveness, reduce manual effort, and strengthen organizational defenses.

Qualifications

• Minimum 3 years of related information security experience.
• Working knowledge of security operations, incident response, and security monitoring concepts.
• Experience administering, supporting, or integrating enterprise security technologies.
• Experience with scripting, automation, APIs, or workflow orchestration.
• Understanding of endpoint, network, email, web application, and infrastructure security concepts.
• Ability to troubleshoot complex technical issues and communicate findings clearly.
• Ability to work independently, manage priorities, and collaborate across technical teams.

Responsibilities

• Implement, maintain, and improve cybersecurity controls and technologies.
• Participate in the evaluation, testing, deployment, and ongoing support of security solutions.
• Assist with security reviews of infrastructure, network, and application projects.
• Develop and maintain security standards, procedures, technical documentation, and operational runbooks.
• Identify opportunities to strengthen security posture through technology and process improvements.
• Investigate security alerts, suspicious activity, and potential security incidents.
• Participate in incident containment, response, recovery, and lessons-learned activities.
• Assist with forensic analysis, evidence collection, and documentation when required.
• Develop and maintain incident response procedures and operational playbooks.
• Collaborate with technical teams to resolve security issues and improve response readiness.
• Design, implement, and maintain automation that improves security operational efficiency.
• Develop and support integrations between security and operational platforms.
• Build and maintain Security Orchestration, Automation, and Response (SOAR) workflows and playbooks.
• Automate repetitive security tasks, alert enrichment, ticket creation, and response actions where appropriate.
• Measure the value and effectiveness of automation and recommend further improvements.
• Evaluate and use approved AI capabilities to improve security analysis, investigation, and response activities.
• Develop responsible AI-assisted workflows for relevant security use cases.
• Validate AI-generated findings and recommendations before operational use.
• Monitor emerging AI-related threats, risks, and defensive capabilities.
• Identify practical applications of AI that improve quality, consistency, speed, or visibility.
• Assist with monitoring and analysis of security events and telemetry.
• Tune security alerts and controls to improve effectiveness and reduce unnecessary noise.
• Develop operational dashboards, reporting, and documentation as needed.
• Contribute to threat hunting, detection improvement, and security tool optimization.
• Proactively identify and pursue opportunities to improve security operations, processes, and technologies.
• Research emerging threats, security trends, and industry practices.
• Recommend practical solutions that improve efficiency, visibility, resilience, and security outcomes.
• Take ownership of assigned initiatives and drive them through completion.
• Share knowledge and contribute to team documentation and operational maturity.

Skills

Security engineering

Incident response

Automation

SOAR

AI-assisted security

Security monitoring

Threat hunting

Tools

SentinelOne

Illumio

Cloudflare

ServiceNow

Job description

SkyWest is seeking an Information Security Engineer to implement, maintain, and improve cybersecurity across the organization. The role focuses on security engineering, security operations support, automation, incident response, and runbooks.

The successful candidate is self-motivated, curious, and driven to identify opportunities to improve security effectiveness, reduce manual effort, and strengthen organizational defenses.