• Bachelor’s degree in Cyber Security, Computer Science or other relevant discipline; OR demonstrated capability to perform job responsibilities with a combination of a High School Diploma/GED and at least four (4) years of previous relevant work experience.
• One (1) year of relevant work experience on a Security Operations or Incident Response team.
• Hands-on experience with malware reverse engineering processes and tools (e.g. Ghidra, IDA).
• Demonstrated experience with forensic analysis and packet analysis processes and tools (e.g. Autopsy, Wireshark).
• Understanding of TCP/IP, DNS, HTTP, and other network protocols and the role of each in threat analysis and Incident Response.
• Demonstrable ability to analyze disparate data sources such as network logs, endpoint activity and email data to understand attack vectors and assess damage from an Incident.
• Demonstrable skill creating queries and dashboards using the Splunk SIEM and the SPL language.
• Hands-on experience triaging Incidents across Windows, Mac and Linux endpoints and cloud environments (Azure, GCP and/or AWS).
• Strong problem-solving and analytical skills, with the ability to work in a team environment.
• Ability to demonstrate deep level of critical thinking.
• Ability to pass a live skills demonstration on-site with JetBlue crewmembers.
• Coding experience in scripting languages such as PowerShell, Python.
• Excellent written and verbal communication skills.
• Available and willing to participate in periodic on-call duties and off-hours Incident Response.
• Available for occasional overnight travel (10%).
• Must pass a ten (10) year background check and pre-employment drug test.
• Must be legally eligible to work in the country in which the position is located.
• Authorization to work in the US is required. This position is not eligible for visa sponsorship.

Preferred Experience and Qualifications

• Airline or transportation industry experience in “Blue Team” functions such as Security Operations, Incident Response, Threat Detection or Threat Intelligence at a large company or Managed Service Provider.
• Strong working knowledge of common threat actor attack patterns and tactics, techniques and procedures (TTPs), Indicators of Attack and Indicators of Compromise and using these in proactive threat hunting.
• Strong sense of urgency and drive - a desire to always be moving forward and improving the craft of incident response.

Crewmember Expectations:

• Regular attendance and punctuality.
• Potential need to work flexible hours and be available to respond on short-notice
• Able to maintain a professional appearance.
• When working or traveling on JetBlue flights, and if time permits, all capable crewmembers are asked to assist with light cleaning of aircraft.
• Must be an appropriate organizational fit for the JetBlue culture, that is, exhibit the JetBlue values of Safety, Caring, Integrity, Fun and Passion.
• Promote JetBlue’s #1 value of safety as a Safety Ambassador, supporting JetBlue’s Safety Management System (SMS) components, Safety Policy, and behavioral standards.
• Identify safety and/or security concerns, issues, incidents or hazards that should be reported and report them whenever possible and by any means necessary including JetBlue’s confidential reporting systems (Aviation Safety Action Program (ASAP) or Safety Action Report (SAR))
• The use of ChatGPT or any other automated tool during the interview process will disqualify a candidate from being considered for the position.

Equipment:

• Computer and other office equipment.

Work Environment:

• Traditional office environment.

Physical Effort: 

• Generally not required, or up to 10 pounds occasionally, 0 pounds frequently (Sedentary).

Compensation:

• The base pay range for this position is between $52,000.00 and $80,000.00 per year. Base pay is one component of JetBlue’s total compensation package, which may also include access to healthcare benefits, a 401(k) plan and company match, crewmember stock purchase plan, short-term and long-term disability coverage, basic life insurance, free space available travel on JetBlue, and more. 

#LI-Hybrid