ai sr. principal cybersecurity architect

senior data analyst

senior financial analyst

assistant professor (tenure track) - cybersecurity (26-27) Jobs in Chicago

associate fraud risk analyst Jobs in Chicago

associate fraud risk analyst

senior cyber security analyst

Blue Cross Blue Shield

<div>Lead the creation and deployment of defined and structured processes to support evolving and maintaining the cyber risk management program. Work across the BCBSA organization to align cyber risk management with the organization's goals and outcomes. Utilize both analytical and qualitative assessment approaches to identify, assess, and develop appropriate mitigation plans and strategies. Apply experience to effectively manage cyber risk at technical and non-technical levels to help the organization understand where and how to maintain target business risk tolerance. Support IT and information security leadership in making risk informed decisions and shaping the future direction of BCBSA's cybersecurity program. Assess internal and third-party supplier risks, realistically translate them for both technical and non-technical audiences, and clearly articulate recommended actions and organizational impact.<p></p><p>
Responsible for providing Cyber Risk leadership and subject matter expertise on all assigned projects. Responsible for identifying day-to-day task assignments and providing technology and project management guidance on deliverables. Validates and ensures Cyber Risk requirements are thorough, testable, detailed, concise and traceable. Accountable for project deliverables, estimates, project team-structures, technical artifacts, and engagement of all project stakeholders.<br>
Responsible for project planning, budget approvals, estimation and management for all project deliverables, collaborates with Service Delivery managers as appropriate. Proficient in implementing cyber risk processes, leads teams to attain goals, pursue excellence and establish discipline specific best-practices. Responsible for driving all project decisions, strong ability to make timely decisions and establish project governance. Collaborates with other team-members, peers and builds trust, exhibits sense of urgency, biased for action and possesses good follow-up skills. Customer focused with ability to persuade and drive consensus to resolve conflict and facilitate timely decision making.<br>
Reviews and approves team progress reports, expenses, invoices and contracts in a thorough and timely manner. Reviews the status reports of team members and addresses issues as appropriate. Complies with and helps to enforce standard policies and procedures. Provides and seeks timely feedback to IT partners, peers and team-members.<br>
Provides leadership as a product champion for cyber risk in the Governance, Risk and Compliance technology platform and Cyber Risk direction to business by establishing a vision and risk strategy to meet established project goals and objectives, while focused on continuous improvement. Provides project team(s) business/technical leadership and guidance on day to day tasks. Responsible for driving change for implementing process improvements and ensuring long term compliance. Leads the creation and maintenance of methodologies and processes for the department. Expected to lead multiple, simultaneous projects and time-critical deliverables.<br>
This role is dedicated to utilizing strong leadership and communication skills to motivate and inspire team members, ensuring they are aligned with and committed to achieving the organization&rsquo;s goals.<br>
Maintains a formal risk register that drives security, governance and ensures security findings are aligned with business objectives.<br>
Responsible for maintaining positive working relationships with all groups, cross-functional teams, including technical. Identifies opportunities/needs and works with team-leads and other directors to enhance relationships and influence decisions outside of direct functional reporting structure.<br>
Provides budget forecasts and estimates for Cyber Risk activities on a continuous basis. Responsible for variance analysis and justifications and following the established BCBSA processes/procedures.<br>
Responsible for providing status updates to Senior/Executive management. Responsible for escalating risks/issues with customer issues appropriately and in a timely manner. Ensures design, development, testing and investigative activities lead to appropriate resolution.<br>
Effectively and tactfully communicates relevant and potentially difficult/sensitive information to senior management.<br>
Responsible for engaging, understanding and effectively communicating needs of business to IT teams/partners<br>
Resolves and/or escalates issues, proposes alternatives, and sets or manages expectations in a timely fashion.<br>
Responsible for leading and managing delivery on multiple projects and responsible for all project related resource management, task-prioritization and development. Frequent Plan interactions via System Advisory Group or project communications to ensure business solutions meet Plan needs and implementation/budget concerns are understood. Frequent project participation/collaboration to ensure technical solutions meet business needs.</p><p></p><b>
The posting range for this position is:</b><br>
$144,110.00-$207,288.75<br>
<br>
<b>Qualifications:</b><br>
<br>
<b>Education
</b><ul><li>Required Bachelor's Degree IT, information Security, Risk or IT Management, Computer Science, or a related field; or equivalent work experience</li>
</ul><b>Experience
</b><ul><li>Required 10+ Years career experience in IT or a closely related field
</li></ul><br>
<b>Knowledge Skills and Abilities
</b><ul><li>Knowledge of national and international regulatory and compliance frameworks such as NIST Cybersecurity Framework, ISO 27001, EU DPD, HIPAA/HITECH.
</li><li>Extensive knowledge in the use of Project Management methodologies and tools, and change management techniques. Demonstrated leadership, mentoring, and project management skills.
</li><li>Understanding of current application cyber risk development methodologies and risks, researching emerging technologies and possible application to the business.</li></ul><br>
<b>
Extra Posting Information:</b>
<p>
Minimum 10 years of IT career experience in a similar or closely related field Practical application of cybersecurity risk management frameworks (FAIR, OCTAVE, COBIT, NIST RMF) Minimum of 7 years' PC experience using spreadsheets and word processing tools, including all components of MS Office. Experience with health care components such as Claims, and Enrollment in mainframe and client/server technology environments. Possesses strong technology project management skills. Relationship management skills and the ability to develop and maintain Cyber Risk relationships. Advanced analytical and problem solving skills. Experience in organizing, planning, and executing large-scale projects from vision through implementation, involving internal staff, contractors and vendors.Experience analyzing project needs and determine resources needed to meet objectives and within budget. Experience completing risk assessments for vendors</p><p></p><div><p>
The posted salary range is the lowest to highest salary we, in good faith, believe we would pay for this role at the time of this posting. We may ultimately pay more or less than the hiring range and this hiring range may also be modified in the future. A candidate&rsquo;s position within the hiring range may be based on several factors including, but not limited to, specific competencies, relevant education, qualifications, certifications, relevant experience, skills, seniority, performance, shift, travel requirements, and business or organizational needs. This job is also eligible for <i>annual </i><i>bonus</i><i> </i><i>incentive</i><i> </i>pay.</p></div><div><p>
We offer a comprehensive package of benefits <i>including paid</i><i> time off,</i><i> 11 holidays,</i><i> </i><i>medical/dental/vision</i><i> insurance, </i><i>generous </i><i>401(k)</i><i> matching</i><i>,</i><i> lifestyle spending account</i><i> and </i><i>m</i><i>any other benefits </i>to eligible employees.</p></div><p></p><div><p>
Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, or any other form of compensation that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company&rsquo;s sole discretion, consistent with the law.</p></div></div><p></p>

Senior Cybersecurity Risk Lead Consultant

Bank of America

<div><p><b>Job Description:</b></p><p></p><p>
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.<br>
<br>
Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates&rsquo; physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.<br>
<br>
Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.<br>
<br>
At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!</p><p></p><div><div><div><p><b>
Role Description</b>:</p><p></p><p>
Seeking a Cybersecurity Analyst with strong Unix/Linux expertise to support configuration security monitoring across the enterprise environments. This role focuses on implementing configuration monitoring controls aligned with internal security standards, regulatory requirements, and industry best practices; operating scanning tools, analyzing results, and partnering with technical teams to ensure Unix/Linux products are securely configured, continuously monitored and is able to support timely remediation of security findings.</p><p></p><p><b>
Key Responsibilities</b></p><ul><li><p>
Implement and maintain configuration monitoring controls for Unix/Linux systems using scanning tools.</p></li><li><p>
Participate and provide input (as needed) to help define, implement, and maintain secure configuration baselines and control requirements.</p></li><li><p>
Enable and optimize scanning, monitoring, and alerting capabilities for Unix/Linux configurations.</p></li><li><p>
Analyze scan results, understand misconfigurations, and support remediation efforts.</p></li><li><p>
Partner with Unix/Linux infrastructure, and engineering teams to embed security controls into build and operational processes (shift-left mindset).</p></li><li><p>
Support risk assessments, audits, and regulatory inquiries related to Unix/Linux security posture.</p></li><li><p>
Ensure assigned support tickets are dispositioned timely and effectively.</p></li></ul></div></div></div><p></p><div><p><b>
Required Qualifications</b></p><p></p><div><ul><li><p>
3+ years experience with strong knowledge and conceptual understanding of Unix/Linux OS products, platforms, security architecture, hardening standards, and configuration requirements (e.g., RHEL, Ubuntu, Debian, AIX, Solaris, SUSE, CentOS, Oracle)</p></li><li><p>
Experience with configuration management, scanning, and monitoring tools (e.g. Qualys, TrustGuardian, Tanium, Ansible, Tenable)</p></li><li><p>
Ability to identify, assess, prioritize, mitigate and escalate risk.</p></li><li><p>
Effective verbal/written communication to technical, non-technical and Senior-level audiences.</p></li><li><p>
Critical and analytical skills, leveraging Microsoft suite and other tools.</p></li><li><p>
Self-starter, with ability to adapt, and work under pressure and timelines.</p></li></ul></div></div><p></p><div><p><b>
Desired Qualifications:</b></p><div><ul><li><p>
Familiarity with regulatory and security frameworks (e.g., NIST, CIS, ISO).</p></li><li><p>
Experience automating or streamlining security monitoring processes</p></li><li><p>
Knowledge of SQL Queries, coding/scripting, Infrastructure, Systems and Application.</p></li></ul><p></p><p>
This job will be open and accepting applications for a minimum of seven days from the date it was posted</p></div></div><p></p><p><b>
Shift:</b></p>
1st shift (United States of America)<p></p><p><b>
Hours Per Week:</b></p>
40</div><p></p>

Cyber Security Analyst (Unix/Linux Configuration Monitoring required)

JPMorganChase

<div><b>JOB DESCRIPTION</b><p><br>
Come on board with an iconic financial institution and take your career to the next level. You have found the perfect place to thrive, develop, and make a real difference.</p><p>
As a Senior Principal Cybersecurity Architect at JPMorganChase within the Cybersecurity and Technology Controls - Consumer &amp; Community Banking (CTC CCB) line of business, you provide deep cybersecurity expertise and work across teams to identify, create, and communicate risk, mitigation options, and solutions. Leverage your deep cross-domain expertise to bring together talent that will consistently create AI-enabled solutions, processes, and reusable proof-of-concept models for cybersecurity while remaining at the forefront of best practices for cybersecurity policy and technological advances.</p><div><p><b>
Job responsibilities</b></p><ul><li>
Advises and leads the cybersecurity strategy and development of multiple AI-enabled products, applications, and technologies across the CCB portfolio</li><li>
Translates highly complex technical issues, trends, and approaches to leadership to drive the firm&rsquo;s innovation and enable leaders to make strategic, well-informed decisions about target state architecture</li><li>
Drives the adoption and implementation of new technical methods in cybersecurity in line with the latest product development methodologies</li><li>
Creates durable, reusable cybersecurity frameworks that improve velocity and quality of output across teams and functions</li><li>
Develops architectures that have applicability across businesses and functions</li><li>
Champions the firm&rsquo;s culture of diversity, opportunity, inclusion, and respect</li></ul><p>
</p></div><p></p><div><p><b>Required qualifications, capabilities, and skills</b></p><ul><li>
10+ years of cybersecurity architecture experience</li><li>
Extensive experience in security assessment, threat modeling, and secure design for cloud-native applications, including Agent-to-Agent and application interactions</li><li>
Strong expertise in A2A (Agent-to-Agent) security, covering certificate management, API security, and service mesh architectures</li><li>
Proficient in working with cloud platforms such as AWS and container orchestration tools like Kubernetes</li><li>
Proficiency in MCP and its application on how it can be used to secure agentic systems</li><li>
Practical experience delivering cybersecurity architecture that can be applied and reused across businesses, functions, and systems</li><li>
Fluent in one or more programming languages or applications</li><li>
Demonstrated prior experience influencing across functions and teams to deliver modern cybersecurity architecture</li><li>
Experience applying expertise and new methods to determine solutions for new and complex cybersecurity problems across various disciplines</li><li>
Extensive practical cloud-native experience</li><li>
Ability to evaluate current and emerging technologies to recommend the best technology solutions or approach to achieve the future state cybersecurity architecture</li></ul><p>
</p><div><b>#CTC</b>
</div></div><b>ABOUT US</b><br>
<div>
<div>JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world&rsquo;s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
</div><p></p><div><p>We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
</p><div><p>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants&rsquo; and employees&rsquo; religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.</p>
<p>JPMorgan Chase &amp; Co. is an Equal Opportunity Employer, including Disability/Veterans</p><br>
</div></div></div><br>
<br>
<b>ABOUT THE TEAM</b><br>
<br>
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we&rsquo;re setting our businesses, clients, customers and employees up for success.</div>

AI Sr. Principal Cybersecurity Architect

Grant Thornton

<div><p>We are looking for an experienced ServiceNow Architect to join our ServiceNow Risk and Security Operations practice to support client implementation projects. The ideal candidate will have a strong background in Integrated Risk Management and/or Security Operations, as well as experience in designing and implementing ServiceNow solutions. Our team brings technical expertise, real-world experience, strong executive engagement skills, and an inspirational mindset to help our customers understand the opportunities of the &ldquo;platform of platforms&rdquo; vision. We act as Trusted Partners for our customer's most complex solutions, designed to ensure that they can rapidly realize the value they need. We do this by leveraging best practices and industry standards to build customer trust and architect best-in-class solutions.
</p><p>While collaborating with customers, and the wider ServiceNow Risk and Security Operations delivery team, the right candidate will be able to develop and present clear architectural guidance in terms that non-technical client resources can understand. This individual will be able to elegantly articulate the advantages of ServiceNow being built on a single cloud platform consisting of a single user interface, one code base, and one data model as the core for realizing value for Risk and Security Operations processes. The candidate will also lead and participate in the delivery of demonstrations, workshops, best practice overviews, and educational sessions to customers. This individual will be expected to be the lead technical resource on client delivery engagements and must be willing to be a hands-on to implement complex technical solutions and to ensure delivery quality standards are met. The ideal candidate should be able to review client functional processes and recommend future state designs that align to industry best practices and ServiceNow native architecture.
</p><p><b>Your day-to-day may include:
</b></p><ul><li>Be a technical delivery leader, ensuring delivery excellence, aligned to ServiceNow Risk and Security Operations practice expectations
</li><li>Work with clients to understand their business requirements and design solutions that meet those requirements
</li><li>Facilitate architecture and design discussions to demonstrate how ServiceNow meets the needs of strategic customers, including Risk and Security Operations solutions
</li><li>Engage with customers to identify pain points and opportunities to deliver value and then translate them into solutions from ServiceNow
</li><li>Understand the business strategy of the customer and articulate how ServiceNow can enable and deliver value to their organization, seamlessly integrating into their current and future technology landscape
</li><li>Stay current with new developments in the ServiceNow platform and apply that knowledge to client solutions
</li><li>Provide guidance and mentorship to junior team members
</li></ul><p><b>You have the following technical skills and qualifications:
</b></p><ul><li>Minimum of 3+ years of experience in ServiceNow solutions architecture, with at least 2 years of focus on ServiceNow Risk and/or Security Operations solutions
</li><li>ServiceNow Certified Master Architect, Certified Technical Architect, and/or ServiceNow Certified Application Developer, Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), and/or Certified Information Security Manager (CISM) certifications preferred
</li><li>Experience working in a consulting environment
</li><li>Experience in working with an integrated global practice preferred
</li><li>Strong understanding of ServiceNow platform, including experience with custom development, integrations, and workflows
</li><li>Experience leading the design and implementation of ServiceNow solutions for clients
</li><li>Strong problem-solving and analytical skills
</li><li>Excellent communication and leadership skills
</li><li>Strong understanding of security and compliance regulations and best practices
</li><li>ServiceNow Certified System Administrator certification
</li><li>ServiceNow Certified Implementation Specialist certification in one or more of the following:
<ul><li>Risk and Compliance
</li><li>Vendor Risk Management (VRM)
</li><li>Security Incident Response (SIR)
</li><li>Vulnerability Response (VR)
</li></ul></li><li>Experience working with industry-leading security operations tools (e.g., Rapid7, Qualys, Tenable, Prisma, Snyk, Veracode, Wiz, Orca, Tanium, Splunk, QRadar. Carbon Black, CrowdStrike, ProofPoint, Cisco, etc.) preferred
</li></ul><p><b><i>The base salary range for this position is between $121,400 and $154,836. Placement within the pay range is at Grant Thornton&rsquo;s discretion, and it is based on multiple factors, including but not limited to, job -related knowledge/skills, experience, business needs, progression within the role, geographic location, and internal equity. At Grant Thornton, compensation decisions are dependent upon the facts and circumstances of each position and candidate.
</i></b></p><p>#LI-LG1
</p><p>#Hybrid</p></div>

Cyber ServiceNow Senior Associate

DePaul University

<div><div><div><div><div><div><div><div><div><div><div><div><div><div><p><b>Full-time Faculty Positions</b></p><br>
<p>Full-time faculty positions will be posted on a per-opening basis. Postings are organized by college/school and department. Applicants will be evaluated at the college/school level for the position which they are submitting an application. Unless noted by a close date, positions will remain open until they are filled. Qualified applicants are encouraged to apply.</p>
<p></p><p>Below you will find the details for the posting including any supplementary documentation and questions you should review before applying for the opening or submitting your interest in teaching. To apply for the position, please click the link/button.</p><br>
<p></p>
<p>Posting Details</p>
<p><b>Job ID:</b> 170896</p>
<b>Rank:</b> Assistant Professor
<p><b>College/School:</b> Chicago, IL - Jarvis College of Computing &amp; Digital Media</p>
<b>Position Description:</b>
<div><p>The School of Computing at DePaul University invites applications for a tenure-track assistant professor position. We are particularly seeking candidates with expertise in <b>Cybersecurity.</b></p>
<p>
The School of Computing houses a robust Cybersecurity Center with state-of-the-art facilities including a newly developed Cybersecurity Lab featuring dedicated server infrastructure for advanced security and privacy research, multi-user attack/defense hands-on experimentation, and extensive AI/ML integration for studying emerging cybersecurity threats. Our cybersecurity program is supported by specialized research labs including the Secure Design Lab and the Actionable Cybersecurity &amp; Accessibility Lab (ACAL), focused on exploring, designing, and developing human-centered, accessible solutions driven towards resilience against any form of deception in cyberspace.</p>
<p>
The School of Computing includes over 70 full-time faculty and more than 3,600 undergraduate and graduate students. We offer a PhD program, 17 master's degrees, and 10 bachelor&rsquo;s degrees as well as a growing number of multidisciplinary CS plus X degrees. The School of Computing is committed to providing a flexible and supportive environment for its faculty, promoting a rewarding academic career with a balance between teaching and research. Located in the heart of Chicago&rsquo;s vibrant downtown, it offers vast opportunities to forge relationships with industry, national laboratories, universities, and other organizations in the Chicago area.</p>
<p>
The School of Computing has several centers of excellence, including Big Data, Cloud Infrastructure, and High-Performance Computing; Visual Computing, Medical Informatics, and Bioinformatics; Web Intelligence and Recommender Systems; Computing Education; Interactive Machine Learning; Cybersecurity and Adversarial Machine Learning; Computational Geometry and Topology; Next Generation Networks; Rehabilitation Robotics; and Intelligent Software Engineering. Over the past decade, faculty within the school have secured more than $15M in NSF funding and consistently published in selective conferences. The culture within the school emphasizes high-impact and high-quality research, rather than placing pressure on faculty to secure external funding or publish many papers. Nonetheless, the university provides extensive support for external funding, as well as a robust internal research grants program, including PhD stipends, graduate assistantships and course releases.</p></div>
<b>Qualifications:</b>
<p>Applicants should have a PhD degree in Computer Science, or a related field.</p>
<b>Application Instructions:</b>
<p>Review of applications will begin on November 14, 2025, and continue until the position is filled.</p>
<p>
The application must include:</p>
<ul>
<li><b>Cover letter</b></li>
<li><b>Curriculum vitae</b></li>
<li><b>Contact information for at least three professional references </b>references will be contacted to upload their recommendations</li>
<li><b>Research statement</b> highlighting both current and future directions of research</li>
<li><b>Teaching statement</b></li></ul><br>
<p></p>
<p>
For more information, contact Vahid Alizadeh (vahid.alizadeh@depaul.edu).</p><br>
<p></p>
<p><b>
General Compensation/Benefits Statement</b><br>
DePaul University has provided a compensation range that represents its good faith estimate of what the University may pay for the position at the time of posting. The salary offered to the selected candidate will be determined based on factors such as (but not limited to) the qualifications, education, experience, and training of the selected candidate, the scope and responsibilities of the position, departmental budget availability, internal salary equity considerations, and available market information.</p>
<p>
DePaul University offers excellent benefits, including medical, dental, retirement, paid time off, and tuition benefit. Further information regarding benefits can be found here: https://offices.depaul.edu/human-resources/benefits/Pages/default.aspx.</p>
<p><b>
About DePaul University's Academic Calendar</b><br>
Except for the College of Law, DePaul University operates on a quarter system. Classes in Autumn, Winter, and Spring quarters are 11 weeks in length (including finals week) and Summer courses, in two sessions, are typically 5 weeks in length. The College of Law operates on the semester system. Classes in the Fall and Spring semesters are 16 weeks in length (including finals week) and it offers a Summer Session of 7 weeks (including final exams).</p><br>
<br>
<div><b>Salary Information: </b>The salary range for this 10-month position is $99,000 - $120,000, commensurate with qualifications and experience.</div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><p></p>

Assistant Professor (Tenure Track) - Cybersecurity (26-27)

United Airlines

<div>Achieving our goals starts with supporting yours. Grow your career, access top-tier health and wellness benefits, build lasting connections with your team and our customers, and travel the world using our extensive route network.<br>
<br>
Come join us to create what&rsquo;s next. Let&rsquo;s define tomorrow, together.<br>
<h2 class="jobSectionHeader"><b>
Description</b></h2><div><p>
Connecting People. Uniting the World. There&rsquo;s never been a more exciting time to join United Airlines! As a global company that operates in hundreds of locations around the world &mdash; with millions of customers and tens of thousands of employees &mdash; we have a unique responsibility to uplift and provide opportunities in the places where we work, live and fly.</p><p>
We&rsquo;re on a path to becoming the best airline in aviation history. Join our Cybersecurity and Digital Risk (CDR) team to help lead the industry in cyber safety, security and resilience. United's CDR team plays a critical role in protecting our operations by enabling secure and resilient systems, managing threats and vulnerabilities, and ensuring swift response and recovery. Our mission is to seamlessly embed cybersecurity and digital risk management into every aspect of our business. We help drive progress and growth through trusted digital solutions, safeguarding assets and empowering our team, all while promoting a cyber-safe and secure environment that supports resilient airline operations.</p><p>
United offers a competitive benefits package aimed at keeping you happy, healthy, and well-traveled. From employee-run &quot;Business Resource Group&quot; communities to world-class benefits like parental leave, 401(k), and privileges like space-available travel, United is truly a one-of-a-kind place to work. Are you ready to travel the world and help us keep our airline cyber safe? Apply today!</p><p></p><p><b><br>
Job overview and responsibilities</b></p><p></p><p><br>
Principal Engineer &ndash; Aircraft Cybersecurity Operations is responsible for coordinating with both internal and external partners - such as Avionics Engineering, Powerplant Engineering, Government Affairs, Corporate Security, Corporate Safety, Industry working groups, OEMs, and FAA &ndash; to implement strategy around United&rsquo;s aircraft cybersecurity operations, to ensure consistency with the latest developments in aviation cyber security. This individual will mentor peers on how to identify and assess the aviation cyber risk landscape, including how to perform meaningful security tests, and how to validate security mitigations that should be executed to ensure a safe and secure continued airworthiness for all United aircraft. This individual will also be responsible for coordinating with industry to review new aviation cybersecurity standards and recommendations based on expertise in the airline and aircraft operation space. This individual will be expected to be a strategic system thinker, capable of seeing and defining the broad tactical approach across aircraft cybersecurity operations and United&rsquo;s infrastructure.</p><br>
<p></p><ul><li>
Integrate with industry working groups and partners (e.g., FAA, AIA, A4A, EASA, A-ISAC, etc.) to review new aviation cybersecurity standards and recommendations</li><li>
Serve as a subject matter expert and mentor a team on aircraft operation cybersecurity threats and mitigation strategies, risk assessment methodologies, and security testing</li><li>
Coordinate and build relationships with internal and external partners to drive key aviation cyber security initiatives and projects</li><li>
Review mitigation plans implemented by United aircraft operations teams (e.g., Avionics Engineering, Powerplant Engineering, Cabin Systems Engineering, Digital Technology, Flight Operations, etc.) to provide recommendations based on industry best practices</li><li>
Ensures program(s) is/are meeting intended purpose and metrics<br>
</li></ul></div><h2 class="jobSectionHeader"><b>
Qualifications</b></h2><div><h3 class="jobSectionHeader"><b>
What&rsquo;s needed to succeed (Minimum Qualifications):</b></h3><br>
<div></div><ul><li>
Bachelor's degree required, STEM field preferred</li><li>
Strong cybersecurity expertise applied to aviation or relevant transportation and/or embedded systems domains</li><li>
5 or more years of combined related experience in either aircraft engineering, aircraft cybersecurity, embedded product security, or other similar related fields</li><li>
Proficient knowledge of areas comparable to aircraft avionics, cabin, propulsion systems, and/or airport/transportation operations</li><li>
Proficiency in risk assessment methodologies</li><li>
Proficiency in aviation security regulations and standards</li><li>
Ability to manage business and external partners</li><li>
Ability to work independently and self-motivate</li><li>
Excellent problem solving, critical thinking, interpersonal, collaboration, written and verbal communication skills</li><li>
Must be legally authorized to work in the United States for any employer without sponsorship</li><li>
Successful completion of interview required to meet job qualification</li><li>
Reliable, punctual attendance is an essential function of the position</li></ul><p></p><h3 class="jobSectionHeader"><b><br>
What will help you propel from the pack (Preferred Qualifications):</b></h3><br>
<p></p><ul><li>
Master's degree</li><li>
CISSP, GSEC, or a SANS equivalent cybersecurity certificates and PKI</li><li>
Critical infrastructure or Government experience</li><li>
Working knowledge in navigating hardware-based security techniques and assessments</li><li>
Working knowledge of programming languages</li><li>
Working knowledge of digital design and understanding of hardware at the component levels</li><li>
Working knowledge of infrastructure security and mobile security</li></ul><p></p><p><br>
Posting end date: 6/1/2026</p></div><br>
The base pay range for this role is $147,060.00 to $191,516.00.<br>
The base salary range/hourly rate listed is dependent on job-related, factors such as experience, education, and skills. This position is also eligible for bonus and/or long-term incentive compensation awards.<br>
<br>
You may be eligible for the following competitive benefits: medical, dental, vision, life, accident &amp; disability, parental leave, employee assistance program, commuter, paid holidays, paid time off, 401(k) and flight privileges.<br>
<br>
United Airlines is an Equal Opportunity Employer. We recruit, employ, train, compensate, and promote without regard to race, color, religion, national origin, gender identity, sexual orientation, disability, age, veteran status, or any other protected category under applicable law. We provide reasonable accommodations for applicants and employees with disabilities. To request an accommodation, contact JobAccommodations@united.com</div>

Principal Engineer - Aircraft Cybersecurity Operations (Remote)

Synchrony

<div>
 <strong>
  Role Summary/Purpose
  <br/>
  <br/>
 </strong>
 The Cyber Intelligence Leader leads Synchrony&rsquo;s Cyber Threat Intelligence (CTI), Detection Engineering, and Cyber Hunt programs. This role is accountable for translating external and internal threat signals into actionable intelligence, proactive hunts, and measurable detection improvements across the enterprise. The leader partners closely with Synchrony's Joint Security Operations Center (JSOC), Incident Response, Vulnerability Management, and infrastructure/application teams to reduce adversary dwell time and strengthen Synchrony&rsquo;s cyber defenses. The ideal candidate will possess financial sector cyber intelligence and overall Information Security expertise.
 <br/>
 <br/>
 <strong>
  Essential Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Define intelligence requirements and collection plans focused on threats relevant to financial services and Synchrony&rsquo;s environment.
  </li>
  <li>
   Produce strategic, operational, and tactical intelligence (executive reporting, actor/campaign tracking, TTP and IOC packages).
  </li>
  <li>
   Translate intelligence into detection content, hunt hypotheses, response playbooks, and prioritized mitigations.
  </li>
  <li>
   Manage the intelligence lifecycle (collection &rarr; analysis &rarr; production &rarr; dissemination &rarr; feedback).
  </li>
  <li>
   Lead hypothesis-driven hunts mapped to MITRE ATT&amp;CK, focused on high-risk scenarios and validated by available telemetry.
  </li>
  <li>
   Coordinate hunts across endpoint, network, cloud, identity, and edge/WAF; document repeatable hunt playbooks.
  </li>
  <li>
   Escalate validated suspicious activity to Incident Response and support containment/remediation as needed.
  </li>
  <li>
   Convert hunt findings into durable improvements: detections, data onboarding/enrichment, and control remediation.
  </li>
  <li>
   Lead a detection engineering function responsible for building and maintaining detection content and analytics across the enterprise.
  </li>
  <li>
   Develop detection standards (naming, severity, testing criteria, evidence requirements, runbooks) and a structured tuning process.
  </li>
  <li>
   Ensure detections are threat-informed (ATT&amp;CK-mapped), measurable, and aligned to JSOC workflow and triage capacity.
  </li>
  <li>
   Drive detection validation through purple-team/attack simulation outcomes and real incident lessons learned.
  </li>
  <li>
   Partner with SOC to improve alert fidelity, reduce noise, and ensure clear escalation criteria and responder guidance.
  </li>
  <li>
   Maintain a detection backlog and release cadence; ensure change control and documentation for auditability.
  </li>
  <li>
   Perform other duties and/or special projects as assigned.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications/Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor&rsquo;s degree in computer science or an equivalent degree and a minimum 5 years of work
  </li>
  <li>
   8&ndash;12+ years of cybersecurity experience with depth in threat intelligence, threat hunting, detection engineering, and/or incident response.
  </li>
  <li>
   3+ years leading teams and/or enterprise programs with measurable outcomes.
  </li>
  <li>
   Demonstrated experience building and operationalizing detections within a SIEM/EDR environment and partnering with SOC/IR.
  </li>
  <li>
   Strong knowledge of adversary tactics and frameworks (MITRE ATT&amp;CK) and applying them to detection coverage.
  </li>
  <li>
   Proficiency working with security telemetry across endpoint, network, cloud, and edge; strong investigative mindset.
  </li>
  <li>
   Strong written and verbal communication skills; ability to brief executives and produce clear technical documentation/runbooks.
  </li>
  <li>
   Ability and flexibility to travel for business as required
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Desired Characteristics
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience establishing a detection engineering lifecycle (standards, testing, tuning, change control, coverage reporting).
  </li>
  <li>
   Detection content engineering expertise; familiarity with data models/normalization and scalable detection design.
  </li>
  <li>
   Financial services and/or regulated industry experience; audit-ready documentation and governance mindset.
  </li>
  <li>
   Certifications (preferred): GIAC (GCTI/GCIA/GCIH/GNFA), CISSP, CCSP, or similar.
  </li>
  <li>
   Strong technical knowledge of scripting languages and data access methodologies.
  </li>
  <li>
   Awareness of the latest cyber security trends and developments.
  </li>
  <li>
   US Government Security Clearance, as a plus.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Grade/Level: 14
  <br/>
  <br/>
 </strong>
 The salary range for this position is
 <strong>
  170,000.00 - 290,000.00
 </strong>
 USD Annual and is eligible for an annual bonus based on individual and company performance.
 <br/>
 <br/>
 Actual compensation offered within the posted salary range will be based upon work experience, skill level or knowledge.
 <br/>
 <br/>
 Salaries are adjusted according to market in CA, NY Metro and Seattle.
 <br/>
 <br/>
 <strong>
  Our Way Of Working
  <br/>
  <br/>
 </strong>
 We&rsquo;re proud to offer you flexibility. At Synchrony, our way of working allows you to have the option to work from home near one of our Hubs or come into one of our offices. You will be required to commute to your nearest Hub (either virtual or physical) for in-person engagement activities such as regular business or team meetings, training and culture events.
 <br/>
 <br/>
 <ul>
  <li>
   Field Sales and some Commercial team roles may have varied location requirements based upon partner obligations or preferences.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Eligibility Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   You must be 18 years or older
  </li>
  <li>
   You must have a high school diploma or equivalent
  </li>
  <li>
   You must be willing to take a drug test, submit to a background investigation and submit fingerprints as part of the onboarding process
  </li>
  <li>
   You must be able to satisfy the requirements of Section 19 of the Federal Deposit Insurance Act.
  </li>
  <li>
   New hires (Level 4-7) must have 9 months of continuous service with the company before they are eligible to post on other roles. Once this new hire time in position requirement is met, the associate will have a minimum 6 months&rsquo; time in position before they can post for future non-exempt roles. Employees, level 8 or greater, must have at least 18 months&rsquo; time in position before they can post. All internal employees must consistently meet performance expectations and have approval from your manager to post (or the approval of your manager and HR if you don&rsquo;t meet the time in position or performance expectations).
   <br/>
   <br/>
  </li>
 </ul>
 Legal authorization to work in the U.S. is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.
 <br/>
 <br/>
 <strong>
  Our Commitment
  <br/>
  <br/>
 </strong>
 When you join us, you&rsquo;ll be part of an inclusive culture where your individual skills, experience, and voice are not only heard &ndash; but valued. Together, we&rsquo;re building a future where we can all belong, connect, and turn ideals into action. More than 50% of our workforce is engaged in our Employee Resource Groups (ERGs), where community and passion intersect to offer a safe space to learn and grow.
 <br/>
 <br/>
 This starts when you choose to apply for a role at Synchrony. We ensure all qualified applicants will receive consideration for employment without regard to age, race, color, religion, gender, sexual orientation, gender identity, national origin, disability, or veteran status. We&rsquo;re proud to have an award-winning culture for all.
 <br/>
 <br/>
 <strong>
  Reasonable Accommodation Notice
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.
  </li>
  <li>
   If you need special accommodations, please call our Career Support Line so that we can discuss your specific situation. We can be reached at 1-866-301-5627. Representatives are available from 8am &ndash; 5pm Monday to Friday, Central Standard Time
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Job Family Group
  <br/>
  <br/>
 </strong>
 Information Technology
</div>


VP, Cyber Intelligence Leader

Explore 332+ Senior cyber security analyst in Chicago this May. Find roles across top companies and apply now to boost your career.