Senior Manager - Cybersecurity

Achieving our goals starts with supporting yours. Grow your career, access top-tier health and wellness benefits, build lasting connections with your team and our customers, and travel the world using our extensive route network.

Come join us to create what’s next. Let’s define tomorrow, together.

Description

Uniteds Digital Technology team is comprised of many talented individuals all working together with cutting-edge technology to build the best airline in the history of aviation. Our team designs, develops and maintains massively scaling technology solutions brought to life with innovative architectures, data analytics, and digital solutions.

Job Overview And Responsibilities

The Senior Manager - Product Cybersecurity is a technical leader responsible for managing a team of highly innovative cybersecurity engineers responsible for developing and maintaining end-to-end security architecture of United’s product(s)/application(s)/service(s).  This person will create and implement a vision for security across all products within the United portfolio. 

• Define, prioritize, allocate resources, track, and provide status reporting of work assignments, projects, and programs. Provides overall resource/project management for department, including matching people to projects, obtaining needed resources, etc. 
• Monitors changes in legislation and compliance standards that affect assigned areas of responsibility and proactively acts to update standards, best practices and architectures based on this information.
• Manages, coordinates, and evaluates the work of assigned cybersecurity department to ensure the security, confidentiality, integrity & availability of United’s systems, products, and services. 
• Works with cross functional teams to develop, document and implement cybersecurity standards, best practices, and architectures. 
• Coordinates remediation of non-compliant items to meet applicable compliance standards and best practices. 
• Manages the development and implementation of cybersecurity strategies. 
• Maintains relationships with internal and external audit agencies to facilitate execution of audits. 
  
  

• Bachelors degree in Computer Science, Engineering or Business Administration
• 9+ years of IT and business/industry work experience
• Strong and proven ability to communicate technical concepts to a non-technical audience and stakeholders 
• Experience with threat modeling or other risk identification techniques, and risk management 
• Experience managing teams to identify strategic and tactical risk 
• Experience partnering and influencing cross functional teams to drive security improvements 
• Experience driving prioritization of security risks/vulnerabilities and ensuring that they are properly understood by the business and fixed and/or mitigated 
• Strong analytical and quantitative skills with the ability to use data and metrics to back up assumptions and recommendations and drive actions 
• Excellent oral and written communication skills 
• Demonstrated ability to convey complex technical subjects in a concise and direct manner 
• Demonstrated problem solving, critical thinking, logical structuring skills and a willingness to learn and stretch outside of your comfort zone 
• Demonstrated knowledge on threat landscape, security threat and vulnerability management, and security monitoring and analytics
• Must be legally authorized to work in India for any employer without sponsorship
• Must be fluent in English (written and spoken)
• Successful completion of interview required to meet job qualification
• Reliable, punctual attendance is an essential function of the position
  
  

• MS in Computer Science, Mathematics, Information Systems, or other related field
• One or more of the following: 
• Certified Ethical Hacker (CEH) 
• GIAC Security Essentials (GSEC) 
• Certified Information Security Manager (CISM) 
• Comp TIA Security + 
• Certified Information Systems Security Professional (CISSP) 
• Certified Information Systems Auditor (CISA) 
• Systems Security Certified Practitioner (SSCP) 
• CompTIA Advanced Security Practitioner (CASP+) 
• Offensive Security Certified Professional (OSCP) 
• AWS Solution Architect Pro., Networking, and Security Specializations 
• Working knowledge and/or hands on experience with as many as possible of the following areas:  
• Operating system & platform security  
• Networking Security and an understanding of network and web related protocols  
• Voice over IP and unified communication security 
• Strong subject matter expertise in the fields of IT security and risk management 
• Strong knowledge of IT infrastructure security best practices, procedures, and standards 
• Experience with cloud native products and in-depth understanding microservice topologies and implementations 
• Expertise in application development and dev-ops security technologies and integration  
• Demonstrated ability to think strategically about business, product, and technical challenges 
• Experience within the transformation of traditional data center security measures into industry adopted cloud technologies  
• Proven ability to work with compliance frameworks and requirements  
• Ability to work in a fast-paced and Agile development environment  
• Experience providing training and mentorship 
• Ability to perform manual security code reviews 
• Ability to interpret dynamic/static analysis tools, and penetration test results