Engineer - Cybersecurity

At Frontier, our mission is to Make Every Flight Count. That mission guides how we support our customers, our people and the operation every day.

As a Frontier employee, your work connects to more than a single role. Whether you’re supporting flights, helping customers, maintaining aircraft, leading teams or working behind the scenes, you help create a travel experience that is safe, reliable and built around value.

Our work is guided by our core values: customer first, safety always, operational excellence and one team. These values shape how we make decisions, support each other and deliver for the people who count on us.

Support for work, life and travel

Frontier offers benefits, programs and travel privileges designed to support eligible employees at work and beyond. Availability may vary by role, employment status, eligibility, location, schedule, applicable policies and current plan details.

Depending on role and eligibility, available benefits and programs may include:

• Medical, dental and vision coverage
• 401(k) retirement savings options
• Paid holidays, vacation time and sick time
• Travel privileges on Frontier Airlines and participating partner airlines, based on current program rules and availability
• Buddy passes, based on eligibility and program rules
• Travel-related discounts and employee discounts on select products, services and vendors
• A hybrid schedule for eligible headquarters roles based in Denver, Colorado
• Business casual dress options for eligible corporate and support roles
• Employee support programs and resources, including the HOPE League, Frontier Airlines’ nonprofit organization

Frontier Airlines is a Denver-based airline serving destinations across the United States and select international markets. Our people support every part of the travel journey, from airport operations and flight crews to aircraft maintenance, customer support, corporate teams and more.

We’re focused on delivering meaningful value by making travel more accessible, practical and easy to personalize for our customers. Across the airline, our teams help support a safe, reliable and efficient operation while continuing to strengthen the experience for the people who choose Frontier.

What Will You Be Doing?

The Cybersecurity Engineer will be part of a Cybersecurity team that assesses, designs, implements, troubleshoots, and supports the cybersecurity posture of Frontier’s network infrastructure. The Cybersecurity Engineer will report to the Manager of Cybersecurity Architecture & Engineering, enabling cybersecurity design and implementation efforts to protect Frontier’s network and systems against cyber-attacks and data breaches. The Cybersecurity Engineer is responsible for providing technical input on projects for Frontier’s on-prem and cloud environments. The Engineer is responsible for planning, implementing, maintaining, and supervising cybersecurity controls, practices, and infrastructure.

Essential Functions

• Research, design, and deploy resilient, reliable, and scalable security controls for IT/business projects.
• Provide technical leadership in designing, implementing, testing, and rolling out of cybersecurity solutions and/or cyber controls in IT/Business projects.
• Collaborate with the IT team to deliver a secure, resilient, and reliable infrastructure environment.
• Participate in and contribute to identification of cybersecurity tools and systems, business continuity planning, and disaster recovery efforts.
• Provide platform support for cybersecurity technologies include but are not limited to: Data Loss Prevention (DLP), Security Incident Event Management (SIEM), Brand Monitoring, Threat Intelligence, User Behavior Analytics, File Integrity Monitoring, Firewall Analyzer, DDoS Mitigation, Secure Internet Access/Web Content Filters, Endpoint Detection & Response, Vulnerability Management, Security Hardening, SOAR-Orchestration, Cloud Security Platforms, and Secure Email Gateway.
• Ability to secure storage, web, application, networking components in Cloud environments (Azure and AWS).
• Support cybersecurity service management request queue (incidents/service requests)
• Support and contribute to change control and change approval board functions.
• Support design, maintenance, and analysis of the network architecture to protect against cybersecurity threats and exposed vectors.
• Execute and improve core functions of incident response including threat detection/prevention, detection engineering, incident response, security monitoring, and digital forensics.
• Support cybersecurity incident response efforts, handling escalations with Cybersecurity Operations and managed service providers.
• Assess vulnerabilities and threats to the network, evaluate available security processes and technologies and make recommendations to management and business partners.
• Support patch and vulnerability management program efforts (such as: vulnerability read-outs, solution analysis, technical direction in administrator breakout sessions)
• Research latest security threats, cybersecurity standards/frameworks, and vulnerabilities to assess the organizations threat landscape.
• Provide regular status updates to leadership on ongoing projects, maintenance, and systems support.
• Assist in efforts to maintain compliance with PCI-DSS, TSA, SOX, and other external/internal compliance requirements.
• Provide cybersecurity expertise in evaluation of 3rd party vendor risk management reviews.
• Participate in "on-call" rotations requiring night and weekend availability as scheduled, provide additional availability 24/7, when necessary.

• Bachelor’s degree in computer science, technology, or equivalent combination of education and relevant experience (required).
• 6+ years cybersecurity operations and/or engineering experience required.
• 4+ years in security engineering with hands-on experience with enterprise cybersecurity product type: EDR (SentinelOne, Crowdstrike, or Cylance) (required).
• 4+ years in security engineering with hands-on experience with enterprise cybersecurity product type: Secure Email Gateway (Mimecast, Proofpoint, or Office365 Exchange) (required).
• 4+ years in security engineering with hands-on experience with enterprise cybersecurity product type: Vulnerability Management (Nessus, Qualys, or Rapid7) (required).
• 4+ years in security engineering with hands-on experience with enterprise cybersecurity product type: (SIEM (Splunk, Rapid7, or LogRhythm) (required).
• 3+ years of enterprise firewall administration or auditing experience (required).
• Industry cybersecurity certification: CompTIA: Security+ or Pentest+, CEH, CISSP, OCSP, SANS: GCIH or GSEC, CISSP, ISACA: CISA or CISM, Security+, SSCP, or CCNA (required, or willing to attain within 3 months of start date).
• Hands-on Cloud cybersecurity design and implementation (Azure/AWS) (required)
• Design and implementation of security controls including experience in applying security framework methodologies; to include NIST, Cloud (CSA), wired, and wireless security principles (required)
• Experience with Wireshark and NMAP (required)
• Experience with URL Filtering/Web Proxy management and troubleshooting (required)
• PCI-DSS or other security compliance environment experience (highly desirable)

• Proficient in troubleshooting network/system related issues and effectively manage components in a production environment.
• Strong understanding of attack vectors, common intrusion techniques, threat intelligence, application/host/network security hardening, micro-segmentation, network access control, networking protocols, and enterprise risk management concepts.
• Ability to troubleshoot security, networking, client server, Wi-Fi, and VPN issues.
• Ability to maintain an understanding of industry trends and stay abreast of current vulnerabilities and security concerns, understanding their impact on the organization.
• Expert knowledge of enterprise firewall management and deployment.
• Broad and thorough knowledge of enterprise security systems and devices.
• Proficient in deploying and managing complex Cloud infrastructures (Azure/AWS).
• Knowledgeable in penetration testing and vulnerability assessments and remediation.
• Proficient in network traffic and packet analysis.
• Demonstrable experience working with configuration management/automation tools.
• Ability to remain organized and to elicit cooperation from a wide variety of internal team members and 3rd party providers.
• Work calmly and methodically under pressure and against tight deadlines.
• Able to accurately estimate level of effort and deliver projects within scheduled commitments.
• Ability to quickly learn new systems, devices, and methodologies.
• Excellent written and verbal communication skills, including the ability to write detailed technical documents.
• Willing to work more than 40 hours and some weekends.
• Willing to do On-Call rotation for after hours and weekend support.
• Communicates clearly and effectively.
• Manages time efficiently and multi-tasks effectively.
• Exceptional customer service skills.

Laptop endpoint running Windows and a variety of cybersecurity applications and commercial tools.

Work Environment

Typical office environment, adequately heated and cooled

Will require being on call for afterhours and weekend support

Physical Effort

Light physical effort required by handling objects up to 20 pounds occasionally and/or up to 10 pounds frequently.

Supervision Received

General Direction: The incumbent normally receives little instruction on day-to-day work and receives general instructions on new assignments.

Salary Range: $100,104 - $132,870 - Please note: this role will close on or before 9/30/26.

Positions Supervised

• None

Disclaimer: The above statements are intended only to describe the general nature and level of work required of the referenced position; they are not intended to be an exhaustive list of all responsibilities, duties, and skills required of individuals in this position. Please be advised that duties and expectations of this position may be subject to change.

Frontier Airlines, Inc. is an equal opportunity employer and, as such, is committed to providing equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, national origin, age, marital status, veteran status, sexual orientation, gender identity or expression, disability status, pregnancy, genetic information, citizenship status or any other basis protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Frontier Airlines is a Zero Tolerance Drug-Free Workplace. All prospective DOT safety-sensitive employees are subject to pre-employment testing for the following drugs and their metabolites: Marijuana, Cocaine, Amphetamines, Opioids and Phencyclidine (PCP). Further, any DOT safety-sensitive job applicant who is found to have tested positive on any required drug or alcohol test at a former employer will be considered ineligible for employment with Frontier.

Colorado Residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.