Sr Cybersecurity Analyst

Southwest Airlines Co.; Dallas (TX); Remote; USD 120,000 - 133,000; Full time

Benefits offered by this job

Fly for free on Southwest flights for你

401(k) with company match

Profit-sharing opportunities

Comprehensive health insurance

Career development and training

Job summary

Southwest Airlines Co. is seeking a Senior Cybersecurity Analyst to lead the protection of our digital infrastructure and strengthen cloud vulnerability management.

You will identify, assess, and prioritize vulnerabilities, drive remediation with Infrastructure, Engineering, DevOps, and Security teams, and help guide the modernization and cloud transformation journey. You will mentor other cybersecurity professionals, contribute to advanced strategies and tools, and ensure compliance with

Qualifications

• Advanced cybersecurity concepts across domains like Incident Response, Threat Intelligence, Governance, Risk and Compliance (GRC).
• Experience coordinating vulnerability management across cloud platforms and reducing cyber risk.
• Strong knowledge of CVE, CVSS, MITRE ATT&CK and remediation strategies.
• Familiarity with containers, Kubernetes, CI/CD, IaC and DevSecOps practices.
• Experience with scripting/automation using Python, PowerShell, Bash or APIs.

Responsibilities

• Provide advanced technical leadership in cybersecurity across Incident Response, Threat Intelligence, GRC, Privacy, and Vulnerability Management.
• Lead and coordinate complex incident response efforts and mentor junior analysts.
• Champion threat intelligence initiatives and threat hunting strategies to improve security posture.
• Own the vulnerability management program and guide remediation across cloud environments.
• Architect and optimize the security infrastructure and evolving security controls.
• Drive governance, risk, and compliance initiatives and policy development.
• Oversee privacy program implementation and privacy controls in line with regulations.
• Lead R&D efforts in cybersecurity to stay ahead of threats.
• Mentor and coach cybersecurity team members and collaborate with senior leadership.
• Represent cybersecurity in cross-functional discussions and strategic initiatives.

Skills

Threat intelligence

Vulnerability management

Incident response

GRC

Cloud security

Regulatory compliance

Kubernetes

CI/CD pipelines

Python scripting

Education

Bachelor's degree in Computer Science, Engineering, Information systems or similar fields

High School Diploma or GED

Tools

Tenable

Qualys

Rapid7

Wiz

Prisma Cloud

Lacework

Job description

Our Company Promise

We are committed to provide our Employees a stable work environment with equal opportunity for learning and personal growth. Creativity and innovation are encouraged for improving the effectiveness of Southwest Airlines. Above all, Employees will be provided the same concern, respect, and caring attitude within the organization that they are expected to share externally with every Southwest Customer.

Department

Technology

Job Description

Southwest is looking for a Sr Cybersecurity Analyst to lead efforts that protect our digital infrastructure and strengthen our cloud vulnerability management program. This position plays a key role in identifying, assessing, and prioritizing vulnerabilities across cloud environments, driving remediation strategies that align with business priorities. By partnering with Infrastructure, Engineering, DevOps, and Security Teams, this position helps reduce cyber risk, enhance our security posture, and support Southwest’s modernization and cloud transformation journey. The work influences critical decisions, safeguards sensitive data, and ensures compliance with evolving regulations—all while fostering a culture of Safety, Reliability, and innovation. This position also provides mentorship to other Cybersecurity professionals and contributes to the development of advanced strategies and tools that keep Southwest ahead of emerging threats.

Additional Details

• This role is offered as a remote workplace position, which may require travel for trainings, meetings, conferences, etc. Outside of those required visits, the majority of your working time may be spent in an approved remote location, away from our Corporate Campus. Please note, while this is a remote position, there is limited group of states or localities ineligible for Employees to regularly perform their work off-site. Those ineligible locations are: Alaska, California, Colorado, Delaware, Illinois, Iowa, Massachusetts, Maryland, Montana, New Jersey, New Hampshire New York, North Dakota, South Dakota, Oregon, Pennsylvania, Vermont, Washington, West Virginia, and Wyoming, and Puerto Rico.
• U.S. citizenship or current authorization to work in the U.S. required and no current or future work authorization sponsorship available.

We’re committed to fair hiring practices and to making employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, military or veteran status, disability, genetic information, or other legally protected characteristics.

Responsibilities

• Provide advanced technical expertise and leadership in cybersecurity, contributing to the identification and resolution of complex cybersecurity issues across various domains such as Incident Response, Threat Intelligence, Governance, Risk, and Compliance (GRC), Privacy, Vulnerability Management, and Engineering Operations
• Lead and coordinate complex incident response efforts, overseeing the identification, containment, and resolution of sophisticated security incidents, and providing mentorship to junior and mid-level analysts
• Champion advanced threat intelligence initiatives, including the development of threat hunting strategies, proactive identification of emerging threats, and the implementation of innovative solutions to enhance the organization's security posture
• Take ownership of the organization's vulnerability management program, developing and implementing advanced strategies for identifying, prioritizing, and mitigating vulnerabilities, and providing expert guidance to analysts at all levels
• Architect and lead the optimization of the organization's security infrastructure, ensuring the implementation of cutting-edge cybersecurity controls and practices, and providing strategic direction for the organization's evolving security architecture
• Drive the maturity of GRC initiatives, providing expert guidance on compliance matters, shaping policies and procedures, and ensuring a proactive and comprehensive approach to governance, risk, and compliance
• Serve as the primary authority on privacy matters, overseeing the organization's privacy program, and ensuring the effective implementation and continuous improvement of privacy controls in line with evolving regulations
• Lead advanced research and development efforts in cybersecurity, staying at the forefront of emerging technologies, and driving innovation in security practices to stay ahead of evolving cyber threats
• Mentor and coach junior and mid-level cybersecurity analysts, providing guidance on complex technical and strategic challenges, and contributing to the professional development of the cybersecurity team
• Foster strong collaboration across the organization, engaging with senior leadership, cross-functional teams, and external stakeholders, and representing the cybersecurity function at a strategic level
• May perform other job duties as directed by Employee's Leaders

Knowledge, Skills And Abilities

• Knowledge of advanced cybersecurity concepts, including threat intelligence, penetration testing, and advanced attack techniques
• Skilled in cybersecurity regulations and standards, such as GDPR, HIPAA, and industry-specific compliance requirements
• Skilled in advanced threat detection methods and tools, as well as the ability to analyze and respond to complex threats
• Skilled in guiding incident response efforts, including managing complex incident investigations and coordinating teams
• Skilled in conducting in-depth vulnerability assessments and penetration testing to identify and address security weaknesses
• Ability to provide strategic insights into emerging threats, technologies, and best practices and shape the organization's cybersecurity strategy
• Ability to lead risk management efforts and develop effective strategies for identifying, assessing, and mitigating cybersecurity risks
• Skilled in effective collaboration and communication to work effectively with cross-functional teams, stakeholders, and external partners
• Ability to develop and enforce security policies, standards, and procedures, ensuring compliance and comprehensive security controls
• Ability to foster a security-aware culture within the organization, promoting cybersecurity awareness and knowledge-sharing among team members and stakeholders

Education

• Required: High School Diploma or GED
• Required: Bachelor's degree in Computer Science, Engineering, Information systems or similar fields of study or equivalent advanced level experience

Experience

• Required: Advanced-level experience, seasoned and specialized knowledge in cybersecurity principles and concepts, developing skills and knowledge in information technology (IT) operations, programming, systems/software development or another IT related field
• Preferred: Expertise in cloud security tools, vulnerability management platforms, and risk-based vulnerability management practices
• Preferred: Experience partnering closely with infrastructure, engineering, DevOps, and security teams to reduce cyber risk, improve security posture, and ensure vulnerabilities are remediated in alignment with business priorities
• Preferred: Experience leading vulnerability management activities across cloud platforms such as AWS, Azure, CrowdStrike
• Preferred: Experience with vulnerability management platforms such as Tenable, Qualys, Rapid7, Wiz, Prisma Cloud, Lacework, or similar tools
• Preferred: Strong understanding of CVE, CVSS, exploitability, threat intelligence, MITRE ATT&CK, and remediation strategies
• Preferred: Knowledge of containers, Kubernetes, CI/CD pipelines, Infrastructure as Code (Terraform, CloudFormation), and DevSecOps practices
• Preferred: Experience with scripting/automation using Python, PowerShell, Bash, or APIs
• Preferred: Experience with ServiceNow, Jira, or ticketing/workflow platforms
• Preferred: Familiarity with regulatory frameworks such as NIST, CIS, ISO 27001, PCI DSS, or SOX

Licensing/Certification

• N/A

Physical Abilities

• Ability to perform work duties from [limited space work station/desk/office area] for extended periods of time
• Ability to communicate and interact with others in the English language to meet the demands of the job
• Ability to use a computer and other office productivity tools with sufficient speed and accuracy to meet the demands of the job

Other Qualifications

• Must maintain a well-groomed appearance per Company appearance standards as described in established guidelines
• Must be a U.S. citizen or have authorization to work in the United States as defined by the Immigration Reform Act of 1986
• Must be at least 18 years of age
• Must be able to comply with Company attendance standards as described in established guidelines
• Must be able to travel and /or attend Company and non-Company facilities and remote locations such as remote-based offices as necessary

Pay & Benefits

• Competitive market salary from $119,900 per year to $133,200 per year* depending on qualifications and experience. For eligible Leadership and individual contributor roles, additional bonus opportunities are available and awarded at the discretion of the Company.

Benefits you’ll love

• Fly for free, as a privilege, on any open seat on all Southwest flights (your eligible dependents too)
• Southwest will help fund your Retirement Savings Plan, which includes a dollar-for-dollar 401(k) Company match contribution of up to 9.3% of your eligible earnings**
• Potential for annual profit-sharing contribution in the Southwest Retirement Savings Plan—when Southwest profits, you profit***
• Competitive health insurance for you and your eligible dependents
• Southwest offers health plan coverage options that start from the very first day of employment. You'll have 30 days to select and enroll in your health plan, and coverage will be retroactively available to your first day of employment.
• Explore more benefits you’ll love: https://careers.southwestair.com/benefits
• Pay amount doesn’t guarantee employment for any particular period.
• 401(k) Company match contributions are subject to the plan’s vesting schedule. Match contributions may vary based on the position.
• Profit-sharing contributions are subject to the Retirement Savings Plan vesting schedule and are made at the discretion of the Company.

Southwest Airlines is an Equal Opportunity Employer. Please print/save this job description because it won't be available after you apply.

Job Posting End Date

10/27/2026