Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you’ll travel the world, grow your expertise and become the best version of you. As you embark on a new journey, you’ll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop on board!

• ​This job is a member of the Information Technology team within the Information Technology Division.
• This role provides support to the Cybersecurity (CS) Aviation Cybersecurity team and is responsible for building and maintaining key relationships throughout the organization and with cybersecurity aviation industry partners. This includes key internal partners such as Avionics Engineering, Cabin Experience, Maintenance Technology, Government Affairs, Corporate Security, and Corporate Safety. In addition, this person will be coordinating our involvement with external industry partners to ensure we are up to date on the latest developments in aviation cybersecurity. This role provides strong aviation cybersecurity experience to assist with risk analysis and recommending mitigation possibilities, and promotes cybersecurity practices as part of our digital aircraft .

• Leverages cybersecurity expertise to drive the technical research, planning, and architectural design of systems related to digital aircraft to ensure confidentiality, integrity, and high availability of corporate, vendor, and customer data
• Defines, develops, and delivers technical solutions, security requirements and standards that incorporate both industry and company technology standards spanning multiple security domains
• Provides internal security consultations for teams supporting digital aircraft, ground, and communication systems
• Supports standards, regulations, and compliance activities from cybersecurity perspective for FAA & other governing bodies
• Interfaces with industry counterparts like Aviation-ISAC, IATA Cybersecurity Task Force, and oneworld partners
• Assists with cyber-incidents related to AAs aviation technologies Delivers and maintains key artifacts and work products in support of the system review, software development, and quality assurance of airline operations
• Ensures digital aircraft systems and endpoints are scanned using Vulnerability Management tools and practices
• Coordinates with business, IT teams, and IS Risk to remediate compliance findings in a timely manner while addressing risk reduction objectives
• Demonstrates continuous improvement mindset
• Maintains an effective approach to problem solving, multi-tasking, coordinating, and scheduling in accordance with stated goals to ensure visibility and predictability
• Works extended hours occasionally, based on the needs of the project and the operation and may require travel periodically, but planned well in advance

Minimum Qualifications- Education & Prior Job Experience

• Bachelors degree in Information Technology, IT Security, Network Systems Technology or related technical discipline, or equivalent experience/training
• 5 years of experience in security technology design
• 5 years of network, server, and application systems development experience
  

Preferred Qualifications- Education & Prior Job Experience

• 5 years designing, deploying, and managing PKI and cryptographic solutions
• 5 years hands-on experience with Identity and Access solutions
• 3 years experience on Network Security and VPN solutions
• 4 + years experience in NIST 800 series frameworks
• Application coding and scripting via Python, SQL, BASH, or PowerShell
• Preferred Certifications
  • CISSP - Certified Information Systems Security Professional
  • CISM - Certified Information Security Manager
  • CISA - Certified Information Systems Auditor
  • CEH – Certified Ethical Hacker GIAC aviation-aligned certs: GCIA, GCFA, GMON, GCTI
  • Microsoft / Azure security certs (AZ-500, SC-100)
  • Zero Trust-related GIAC certs (GDAT)

Skills, Licenses & Certifications

• Understanding of airworthiness cybersecurity concepts, including regulatory compliance and governance norms.
• Familiarity with industry standards development and governing bodies (e.g., RTCA, IATA, ARINC, and FAA) in relation to aviation cybersecurity.
• Experience analyzing cybersecurity for avionics, ground systems, networks, tooling, 3rd parties, and other aviation-adjacent systems.
• Awareness of aviation cyber threat vectors (airborne software manipulation, GPS spoofing, ADS-B misuse, datalink manipulation, avionics tampering).
• Experience working alongside SIEM platforms (Microsoft Sentinel, Splunk) for log collection, enrichment, detection engineering, or triage.
• Familiarity with UEBA, anomaly detection, KQL, Sigma-to-KQL translation (even at a basic level).
• Understanding of Public Key Infrastructure (PKI) concepts as used in aviation contexts: X.509, OCSP, CRL, certificate chain validation.
• Awareness of cryptographic workflows for loadable software parts, avionics signing, or aircraft-to-ground authentication.
• Experience integrating certificate-based identity into network security or Zero Trust architectures.
• Familiar with NIST Special Publications (e.g., 800-171, 800-30)
• Ability to perform vulnerability testing, risk analyses and security assessments
• Knowledge of secure integration of cybersecurity into the aircraft software lifecycle, including maintenance workflows and part-loading processes.
• Ability to coordinate security reviews with TechOps, Avionics Engineering, EFB Engineering, and Connectivity teams.
• Familiarity with aircraft operational telemetry, uptime considerations, and failure-mode assessment.
• Ability to support aviation-specific incident response, including log preservation, chain-of-custody, and cross-domain triage.
• Significant experience with virtualization architectures (Citrix, VMWare, Hyper-V)
• Experience collaborating successfully with project managers, engineers, architects, administrators, and customers to deliver projects on time and within budget
• Experience presenting to senior leadership including corporate architecture review boards and governance committees
• Experience with designing, developing, and integrating Active Directory Group Policy, Local Security Policy, and Windows scripts
• Knowledge of cloud technologies and risk assessment criteria (IaaS/PaaS/SaaS)
• Proficient in Agile and SDLC methodologies

Feel free to take advantage of all that American Airlines has to offer:

• Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network.
• Health Benefits: On day one, you’ll have access to your health, dental, prescription and vision benefits to help you stay well. And that’s just the start, we also offer virtual doctor visits, flexible spending accounts and more.
• Wellness Programs: We want you to be the best version of yourself – that’s why our wellness programs provide you with all the right tools, resources and support you need.
• 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year.
• Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more

From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Employee Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world.

Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life’s journey? Feel free to be yourself at American.