Breeze Airways is looking for a Senior Cybersecurity Engineer to help protect our digital assets, ensure compliance with security best practices, and enhance the security of our airline operations. This role involves securing critical systems, designing and implementing security controls, and proactively mitigating cybersecurity threats. You’ll work with cross-functional teams to protect Breeze’s proprietary and confidential data while ensuring seamless airline operations.

1. Security Architecture & Engineering

• Design and implement security solutions to protect Breeze’s infrastructure and data.
• Assist in the design and development of cybersecurity architecture for new technologies.
• Recommend and deploy security infrastructure solutions aligned with industry best practices.

2. Threat Detection & Incident Response

• Conduct forensic investigations and ensure security controls align with business needs.
• Perform continuous monitoring, testing, and remediation of security threats.
• Administer and configure security tools to enhance protection against evolving threats.

3. Risk Management & Compliance

• Conduct impact analysis, threat modeling, and risk assessments.
• Ensure compliance with security regulations, policies, and industry standards.
• Communicate known risks to Team Members and Management.

4. Security Awareness & Training

• Support Breeze’s business, security, and technical staff by deploying effective security controls.
• Promote security best practices across teams and mentor junior cybersecurity professionals.
• Foster a culture of cybersecurity awareness across the airline.

• Threat Mitigation: Proactively identify and address security risks to ensure the protection of Breeze’s operations.
• Incident Response: Rapid and effective response to cybersecurity threats with minimal impact on airline systems.
• Security Innovation: Enhance security tools, frameworks, and processes to strengthen Breeze’s security posture.
• Collaboration & Leadership: Work effectively with internal teams, vendors, and partners to drive security initiatives.

• 6+ years of professional experience within Information Security.
• 3+ years of experience working with Cloud Providers (AWS, Azure).
• 2+ years of experience in Identity and Access Management (IAM) principles.
• Strong knowledge of firewall and intrusion detection/prevention protocols.
• Experience with Cloud Protection Security Monitoring (CPSM).
• Proficiency in security tools such as Wiz, Acunetix, Checkmarx, Snyk, and Burp Suite.
• Experience with Windows, MacOS, UNIX, and/or Linux operating systems.

• Experience in security architecture review and threat modeling.
• Knowledge of identity and access management technologies (LDAP, Active Directory, OKTA, SAML, OIDC, etc.).
• Understanding of advanced persistent threats, phishing, social engineering, and network access control.
• Familiarity with government & security industry principles, procedures, and standards.
• Industry certifications (CISSP, CISM, CEH, etc.) are a plus.

• Proficiency in programming languages such as Python, C++, Java, Ruby, Node, Go, and/or PowerShell.
• Strong understanding of networking concepts including subnetting, DNS, encryption, VPNs, VLANs, and VoIP.
• High level of integrity, confidentiality, and ethical responsibility.
• Strong problem-solving skills and ability to work in a fast-paced environment.
• Team-oriented with excellent communication and collaboration skills.
• Embodies Breeze’s safety culture, values, and mission.

• Health, Vision and Dental
• Health Savings Account with Breeze Employee Match
• 401K with Breeze Employee Match
• PTO
• Travel on Breeze and other Airlines too!