Tech Lead Cybersecurity Engineer - Governance Risk & Compliance (GRC)

About this role

Department:
TechnologyOur Company Promise
We are committed to provide our Employees a stable work environment with equal opportunity for learning and personal growth. Creativity and innovation are encouraged for improving the effectiveness of Southwest Airlines. Above all, Employees will be provided the same concern, respect, and caring attitude within the organization that they are expected to share externally with every Southwest Customer.
Job Description:
As a Tech Lead Cybersecurity Engineer on the Governance, Risk & Compliance (GRC) Team, you’ll shape the technology that helps Southwest manage cyber risk, meet evolving regulatory requirements, and protect its Customers, Employees, and operation. Working at the intersection of cybersecurity, compliance, data, and engineering, you’ll lead the design and integration of scalable solutions that automate evidence collection, control testing, continuous monitoring, reporting, and other critical compliance activities. You’ll partner across Cybersecurity, Engineering, Digital Technology, Audit, Legal, and Compliance to translate complex requirements into secure, well-integrated technology capabilities, including AWS-based solutions and a maturing common platform. As an enterprise subject matter expert, you’ll guide Partner Teams, mentor Engineers, strengthen security standards, and help embed compliance into technology solutions from the start. Through technical leadership, automation, and data-driven insights, you’ll reduce manual effort, improve audit readiness, strengthen Southwest’s security posture, and enable the Company to innovate with greater speed, confidence, and resilience.

Additional Details

• This role is offered as a remote workplace position, which may require travel for training, meetings, conferences, etc. Outside of those required visits, the majority of your working time may be spent in a remote location, away from our Corporate Campus. Please note, while this is a remote position, there is a limited group of states or localities ineligible for Employees to regularly perform their work. Those ineligible locations are: Alaska, California, Colorado, Delaware, Illinois, Iowa, Maryland, Massachusetts, Montana, New Hampshire, New Jersey, New York, North Dakota, Oregon, Pennsylvania, South Dakota, Vermont, West Virginia, Washington, Wyoming, and Puerto Rico.

• U.S. citizenship or current authorization to work in the U.S. required and no current or future work authorization sponsorship available.

We’re committed to fair hiring practices and to making employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, military or veteran status, disability, genetic information, or other legally protected characteristics.

Responsibilities

• Provide security guidance to application and Partner Teams to remediate security vulnerabilities, risk items, and policy exceptions

• Deliver training for clients in use of the key Cybersecurity systems, and automated environments

• Identify Cybersecurity problems, plan solutions, recommend software and systems, and coordinate developments in an orderly manner to meet business requirements

• Act as an agent for change to reflect the latest Cybersecurity standards and practices

• Serves as an enterprise subject matter expert (SME) and advocate of IT Security standards and reference architectures

• Act as a Mentor to both Co-Hearts on responding to production program issues and coaches on resolutions in Cybersecurity and Partner Teams

• Lead testing and implement system enhancements using techniques that preserve system integrity and drives a results-oriented environment

• Develop, test and operate end-to-end software solutions using machine learning, related optimization, and knowledge systems

• Ensure that systems are functionally appropriate, technically sound, and well-integrated

• May perform other job duties as directed by Employee's Leaders

Knowledge, Skills and Abilities

• Knowledge of existing elements in value pipeline, including: PingFederate, eDirectory, Active Directory, CyberArk, and Micro Focus IDM

• Skilled in cloud computing technology and its concepts (AWS)

• Skilled in infrastructure-as-code (IaC) development (Terraform, CloudFormation or similar) and automated configuration management using configuration-as-code (CaC) development (Chef, Puppet, Ansible or similar)

• Skilled in implementing Cybersecurity specific Integration Tests for integrations providing Identity, Security Policy, and Cryptography utilizing tools such as Terragrunt and Gradle

• Skilled in performance, logging and monitoring tools such as Prometheus, ELK Stack, AppD and their integration into platform tools such as AWS CloudWatch

• Skilled in credential management tools and solutions like AWS Secrets Manager, CyberArk or Hashicorp Vault

• Skilled in creating parameterized build jobs via GitLab or Jenkins for Continuous Integration of Security and environmental variables

• Knowledge of architectural principles, design patterns and common methodologies across a variety of technologies

• Ability to mentor and guide technical resources, with a focus on growth of the technical bench

Education

• Required: High School Diploma or GED

• Required: Bachelor's degree in Computer Science, Engineering, Information systems or similar fields of study or equivalent advanced level experience

Experience

• Required: Expert-level experience, expansive and far-reaching knowledge in developing, implementing, or integrating technologies for Enterprise security

• Preferred: Experience designing and implementing automated compliance controls, continuous controls monitoring, evidence collection solutions, and compliance-by-design principles supporting PCI DSS, NIST, SOX, CMMC, and other regulatory frameworks.

• Preferred: Experience developing compliance analytics, dashboards, executive reporting, key performance indicators…