Senior Manager - Product Cybersecurity (Remote)

United Airlines operates a global airline and its Cybersecurity and Digital Risk team works to protect operations through secure, resilient systems and effective threat and vulnerability management. The Senior Manager - Product Cybersecurity leads cybersecurity engineers, develops security architecture and vision across products, manages compliance remediation, and oversees team development, resource planning, budgeting, and forecasting.

Responsibilities:

• Responsible for recruiting and talent development of team, including personnel management
• Define, prioritize, allocate resources, track, and provide status reporting of work assignments, projects, and programs
• Monitors changes in legislation and compliance standards that affect assigned areas of responsibility and proactively acts to update standards, best practices and architectures based on this information
• Coordinates remediation of non-compliant items to meet applicable compliance standards and best practices
• Assist with annual budgeting and monthly forecasting

Requirements:

• Bachelor's degree required
• At least 5 years of relevant experience
• Proficiency with OWASP Top 10
• Proficient knowledge of threat modeling
• Proficient knowledge of risk management processes
• Ability to secure AI, ML, or LLM products or familiarity with SDLC for AI, ML, or LLMs
• Proficiency with application testing (e.g., SAST, DAST, MAST, RAST, IAST, Pen Test tooling)
• Proficiency with programming languages and modern programming language structure (i.e., Object Oriented Programming, web framework)
• Proficient with DevSecOps technology stacks (i.e., AWS, Harness, TeamCity, GitHub, Artifactory, CHEF, CloudWatch)
• Proficiency with SDLC process
• Proficiency with web and app security stack (e.g., API security)
• Proven ability to lead people
• Able to build and execute a workforce transformation strategy that develops the team's capabilities in AI-assisted security engineering, frontier-model application security testing, secure AIDLC, and agentic automation
• Ability to manage business and external partners
• Excellent problem solving, critical thinking, interpersonal, collaboration, written and verbal communication skills
• Must be legally authorized to work in the United States for any employer without sponsorship
• Reliable, punctual attendance is an essential function of the position
• Bachelor's degree (STEM field preferred)
• Master's degree
• One or more of the following: CEH, GSEC, CISM, Security +, CISSP, CISA, SSCP, CASP, OSCP, AWS Solution Architect Pro., Networking, and Security Specializations
• 10+ years of relative experience
• Strong subject matter expertise in the fields of IT security and risk management
• Experience with technical documentation / SOP creation
• Proficient understanding of compliance frameworks (e.g., NIST 800-53) and processes
• Demonstrated experience applying security and risk-management practices to AI/ML or generative AI systems, including secure AI lifecycle reviews, AI threat modeling, adversarial testing and component supply-chain risk and runtime guardrails
• Demonstrated experience implementing or governing frontier-model-enabled application security testing, including context-aware code analysis, vulnerability discovery, exploitability validation, remediation generation, threat-model-informed testing. Experience must include human validation, secure execution environments, model and prompt governance, quality measurement and integration with developer and CI/CD workflows
• Strong knowledge of IT infrastructure security best practices, procedures, and standards
• Experience with cloud native products and in-depth understanding microservice topologies and implementations
• Expertise in application development and dev-ops security technologies and integration
• Demonstrated ability to think strategically about business, product, and technical challenges
• Experience within the transformation of traditional data center security measures into industry adopted cloud technologies
• Proven ability to work with compliance frameworks and requirements
• Ability to work in a fast-paced and Agile development environment
• Ability to perform manual security code reviews
• Ability to interpret dynamic/static analysis tools, and penetration test results
• Proficient knowledge of cloud technologies and security
• Proficiency with vulnerability management processes and providing remediation guidance
• Proficiency in cryptography
• Proficient understanding of IAM (i.e., authentication and authorization)
• Proficient understanding of networks and network security