Description Connecting People. Uniting the World. There's never been a more exciting time to join United Airlines! As a global company that operates in hundreds of locations around the world - with millions of customers and tens of thousands of employees - we have a unique responsibility to uplift and provide opportunities in the places where we work, live and fly.
We're on a path to becoming the best airline in aviation history. Join our Cybersecurity and Digital Risk (CDR) team to help lead the industry in cyber safety, security and resilience. United's CDR team plays a critical role in protecting our operations by enabling secure and resilient systems, managing threats and vulnerabilities, and ensuring swift response and recovery. Our mission is to seamlessly embed cybersecurity and digital risk management into every aspect of our business. We help drive progress and growth through trusted digital solutions, safeguarding assets and empowering our team, all while promoting a cyber-safe and secure environment that supports resilient airline operations.
United offers a competitive benefits package aimed at keeping you happy, healthy, and well-traveled. From employee-run "Business Resource Group" communities to world-class benefits like parental leave, 401(k), and privileges like space-available travel, United is truly a one-of-a-kind place to work. Are you ready to travel the world and help us keep our airline cyber safe? Apply today!
Job Overview and ResponsibilitiesThe Principal Engineer for Data Protection & Insider Threat will play a critical role in supporting and enabling a team of analysts through the implementation of advanced technology solutions aimed at preventing, detecting, and responding to Insider Threats. This position requires a strategic thinker and thought leader who can drive the development and execution of solutions to reduce the enterprise's attack surface and mitigate risks effectively. This role is ideal for a visionary technologist who is passionate about reducing cyber threats and enabling teams to achieve their mission through innovative solutions.
- Team Enablement: Collaborate with analysts to implement technology solutions that enhance Insider Threat prevention, detection, and response capabilities.
- Program Development: Enable solutions that support a successful Data Loss Prevention (DLP) program and Insider Threat detection and response initiatives.
- Strategic Partnership: Work closely with Data Protection and Insider Threat Lead Analysts to define and execute technology strategies for mitigating risks associated with open egress vectors.
- Risk Reduction: Leverage technical expertise and interpersonal skills to influence tool and process decisions that reduce cyber threat risks and attack surfaces across the enterprise.
- Roadmap Management: Partner with lead analysts to identify gaps, develop strategies, and oversee the implementation of a continually updated roadmap based on evolving attack surfaces.
- Leadership & Innovation: Serve as a thought leader and strategist, guiding the team in implementing solutions that align with the mission and objectives of the organization.
Qualifications What's needed to succeed (Minimum Qualifications):- Bachelor's degree required (STEM preferred)
- 5+ years of relevant experience in cybersecurity solutions
- Strong technical background with the ability to influence technology and process decisions effectively
- Expertise with tools like Splunk, Purview, and/or M365
- Ability to develop and manage strategic roadmaps for evolving cybersecurity needs
- Familiarity with cyber threat analysis and attack surface reduction techniques
- Excellent interpersonal and leadership skills to collaborate with cross-functional teams
- Must be legally authorized to work in the United States for any employer without sponsorship
- Successful completion of interview required to meet job qualification
- Reliable, punctual attendance is an essential function of the position
What will help you propel from the pack (Preferred Qualifications):- Master's degree
- Industry certifications such as the CISSP, CISM, CISA, GCIH, CFCE, GFCA, and/FE
- Expertise in both Data Loss Prevention (DLP) technologies and Insider Threat detection and response solutions
- Experience presenting to executive leaders in technology roles and explaining risk to non-tech fields
- Proficiency in risk assessment and mitigation strategies, particularly for open egress vectors and excessive access permissions.
- Demonstrated ability to manage and update strategic roadmaps based on changing risk landscapes
- Proven experience in data protection, insider threat management, and cybersecurity strategy
Job Post Expires 8/30/2026
Never miss an opportunity! Create an alert based on the job you applied for.
