Information Security Engineer

About the role

SkyWest is the largest regional airline in the United States and partners with four major airline carriers. More importantly, we’re known for our reliability, service, and the professionalism of our employees, who operate more than 2,100 flights each day throughout North America. We have been esteemed as one of “America’s Best Employers” by Forbes and are known for an industry-leading workforce, an exceptional leadership team, and our continued solid operational and economic performance.

Responsibilities

• The Information Security Engineer implements, maintains, and improves cybersecurity technologies, processes, and operational capabilities across the organization. The role focuses on security engineering, security operations support, automation, tool integration, incident response, and continuous improvement. The successful candidate is self-motivated, curious, and driven to identify opportunities to improve security effectiveness, reduce manual effort, and strengthen organizational defenses. This position partners with Infrastructure, Network, Systems Engineering, Application Development, and other business teams to implement practical security solutions aligned with business objectives.
• Security Engineering: Implement, maintain, and improve cybersecurity controls and technologies. Participate in the evaluation, testing, deployment, and ongoing support of security solutions. Assist with security reviews of infrastructure, network, and application projects. Develop and maintain security standards, procedures, technical documentation, and operational runbooks. Identify opportunities to strengthen security posture through technology and process improvements.
• Incident Response and Security Operations: Investigate security alerts, suspicious activity, and potential security incidents. Participate in incident containment, response, recovery, and lessons-learned activities. Assist with forensic analysis, evidence collection, and documentation when required. Develop and maintain incident response procedures and operational playbooks. Collaborate with technical teams to resolve security issues and improve response readiness.
• Security Automation and SOAR: Design, implement, and maintain automation that improves security operational efficiency. Develop and support integrations between security and operational platforms. Build and maintain Security Orchestration, Automation, and Response (SOAR) workflows and playbooks. Automate repetitive security tasks, alert enrichment, ticket creation, and response actions where appropriate. Measure the value and effectiveness of automation and recommend further improvements.
• AI-Assisted Security Operations: Evaluate and use approved AI capabilities to improve security analysis, investigation, and response activities. Develop responsible AI-assisted workflows for relevant security use cases. Validate AI-generated findings and recommendations before operational use. Monitor emerging AI-related threats, risks, and defensive capabilities. Identify practical applications of AI that improve quality, consistency, speed, or visibility.
• Security Monitoring and Detection Improvement: Assist