American Airlines

Engineer/Sr Engineer, IT Cybersecurity Data Protection

American Airlines • $108K — $130K *
Fort Worth, TX 76137In-Person
Information Technology
Less than 5 years of experience
Today
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or related field.
  • 3+ years of experience in data protection, privacy engineering, or security engineering roles.
  • Hands-on experience with encryption, cloud key management, and data classification tools.
  • Strong understanding of identity access controls and data handling practices.
  • Experience with scripting or automation, and working with APIs and CI/CD pipelines.

Responsibilities

  • Operationalize automated data discovery and classification across data systems.
  • Engineer and implement DSPM capabilities using tools to identify data risks.
  • Support encryption, tokenization, and access governance strategies.
  • Deploy and operate DLP and DAM solutions to protect sensitive information.
  • Integrate data protection telemetry with SIEM for threat detection.
  • Implement data minimization and enforce compliance with data retention policies.
  • Document engineering patterns and provide training on secure data practices.

Benefits

  • Travel perks for employees and their families with access to global destinations.
  • Health benefits starting on day one, including dental and vision coverage.
  • Wellness programs to support overall health and wellbeing.
  • 401(k) program available with employer contributions after one year.
  • Employee Assistance Program and various discounts on services and products.
Full Job Description
9/18/26

Location: DFW Reservations Office (DFW-SV01)
Cities: Fort Worth - TX
Requisition ID: 87684

Job Description

Intro

The Engineer/Sr. Engineer - Data Protection plays a key role in delivering, engineering, and enhancing American Airlines' data protection and privacy technology capabilities. In this role, you'll design, build, and support core components of our data protection ecosystem including data security engineering and protection, privacy engineering and assurance, data discovery and classification, retention/ROT data minimization, and access governance. You'll work closely with Cybersecurity, Privacy Office, Enterprise Data, Legal, and product and platform teams to implement scalable, modern controls that safeguard American Airlines' critical information assets and enable secure, innovative business solutions. As a hands-on engineer, you will solve complex data protection challenges, automate controls, and contribute to the continuous improvement of our enterprise privacy and data protection program.

What you'll do

As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations.
  • Operationalize automated data discovery, classification, and inventory; apply sensitivity labels and consistent taxonomy across data stores, pipelines, and collaboration systems.
  • Engineer DSPM capabilities with tools (e.g., Securiti, BigID) to surface data posture risks (overexposure, shadow data, stale sensitive data) and drive remediation workflows.
  • Implement and support encryption, tokenization, masking, anonymization/pseudonymization for data at rest and in transit; integrate with cloud key management systems and enforce approved cryptographic standards; define crypto baselines and policy-as-code guardrails.
  • Configure and govern access controls with RBAC/ABAC and purpose-based authorization; perform least-privilege and fine-grained access reviews across data platforms.
  • Deploy, tune, and operate DLP and DAM solutions (e.g., Microsoft Purview DLP, Imperva/Guardium); build detections for PII/PCI/PHI and reduce false positives with policy and context improvements.
  • Integrate and tune UEBA and Insider Risk signals to detect anomalous data access and exfiltration, partner on response workflows and preventive control changes.
  • Integrate data protection telemetry with SIEM/SOAR; build detections, correlation rules, and automated response playbooks for data-related threats and policy violations.


What you'll do (Continued.......)

  • Implement data minimization and retention/ROT enforcement patterns; automate monitoring of lifecycle actions (archive, delete, redact) aligned to policy and legal holds.
  • Implement DSAR (data subject access request) orchestration and fulfillment with SLA monitoring; automate data collection, redaction, and secure delivery with audit trails.
  • Contribute to cookie/tag governance and catalog assurance; validate consent signals, storage durations, and vendor script behavior against policy.
  • Support privacy platform capabilities and integrate with identity, ticketing, data catalogs/lineage, and evidence repositories.
  • Embed data protection and privacy-by-design controls into services and CI/CD (pre-commit/CI privacy code scanning, secret scanning, schema checks for sensitive fields, data egress policies).
  • Produce compliance evidence and reports for GDPR/CCPA/CPRA, PCI DSS, HIPAA, and internal audits; maintain controls health dashboards, regulatory tracking, and program KPIs.
  • Investigate data-related incidents and privacy events in partnership with IR/SOC/Privacy Office. Collect artifacts, support forensics, document findings, and drive preventive engineering fixes.
  • Conduct platform hardening and vulnerability remediation for data control tooling (misconfigurations, exposed buckets, weak crypto, excessive permissions).
  • Participate in red teaming/tabletop exercises for data scenarios (insider misuse, public link exposures, unintended AI training data); translate findings into control improvements.
  • Partner with Cybersecurity, Privacy Office, Enterprise Data, Legal, and product/platform teams to align designs and deliver privacy- and data protection-by-design outcomes.
  • Document engineering patterns, runbooks, and reference architectures; create training and technical guidance that strengthen secure data handling practices across teams.
  • Communicate clearly and concisely with technical and non-technical audiences - summarize incidents, risks, and recommended actions with accurate, complete context.


All you'll need for success

Minimum Qualifications- Education & Prior Job Experience
  • Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field (or equivalent practical experience)
  • 3+ years of progressive experience in data protection, privacy engineering, security engineering, or platform engineering roles.
  • Hands-on experience implementing and operating data protection capabilities such as encryption at rest and in transit, cloud key management, data classification, DLP, DAM, or DSPM platforms.
  • Strong understanding of identity and access control patterns (RBAC/ABAC, least-privilege access, access reviews) and secure data handling practices including classification, labeling, and retention/ROT.
  • Experience using scripting or automation (e.g., Python, PowerShell) and working with APIs, logs, and CI/CD pipelines to integrate, operate, or enhance security controls.
  • Ability to analyze security signals and alerts, follow and improve runbooks, document findings clearly, and collaborate with cross-functional teams to implement remediation and continuous improvements.


Preferred Qualifications- Education & Prior Job Experience
  • Master's degree in Computer Science, Cybersecurity, Engineering, Information Assurance, or a related technical field.
  • Experience with Microsoft Purview (Information Protection & DLP), Securiti.ai, BigID, OneTrust, and DAM (Imperva/Guardium).
  • Exposure to Azure, AWS, or GCP security services and cloud data platforms (e.g., storage, databases, messaging/streaming).
  • Experience with Git/GitHub, GitHub Actions/Azure DevOps, secrets scanning, and code scanning tools.
  • Familiarity with SQL, regex, and data transformation basics (e.g., dbt, Spark, ETL) for building detections and data handling checks.
  • Experience integrating consent/preference and DSAR orchestration with identity, data catalogs/lineage, and evidence repositories.
  • Proven ability to design KPI/telemetry models and build dashboards that demonstrate control effectiveness and maturity uplift.


All you'll need for success (Continued......)

Skills, Licenses & Certifications
  • Programming / Scripting: Python, PowerShell (nice to have: Bash); strong facility with REST/JSON, YAML, and regex; specific to Privacy Portal - Java, Springboot, Angular/React.
  • Data / Querying: SQL (and exposure to data pipelines-dbt/Spark/ETL concepts helpful).
  • CI/CD & DevOps: Git/GitHub, GitHub Actions or Azure DevOps; artifact/versioning; secret scanning; pre-commit hooks; policy checks in pipelines.
  • Infrastructure / Policy as Code: Terraform or Bicep; OPA/Rego or equivalent for policy-as-code preferred.
  • Cloud & Crypto: Azure/AWS/GCP basics; Azure Key Vault, AWS KMS, GCP KMS; TLS/mTLS; tokenization; HSM/PQC fundamentals.
  • Identity & Access: Microsoft Entra ID (Azure AD), Okta; RBAC/ABAC; JIT/PAM concepts; purpose-based authorization patterns.
  • Data Protection Platforms: Microsoft Purview (Information Protection & DLP), Securiti.ai, BigID, OneTrust (consent/DSAR), Imperva or IBM Guardium (DAM).
  • Monitoring & Response: SIEM (Microsoft Sentinel, Splunk), SOAR (Logic Apps, Splunk SOAR), ITSM/ticketing (ServiceNow/Jira); building detections and playbooks.
  • Insider Risk / UEBA & Collaboration: Microsoft Insider Risk, M365 collaboration safeguards (external sharing governance, link expiration, watermarking).
  • Web/App Privacy: CMP/consent signals, cookie/tag governance, data egress controls, redaction/watermarking where applicable.
  • Clear, well-structured documentation of engineering patterns, runbooks, and technical decisions.
  • Strong analytical and problem-solving skills with the ability to translate requirements into maintainable controls, automations, and repeatable engineering patterns.
  • Privacy and security certifications such as CIPT, CDPSE, CIPP/US, CIPP/E, Security+, CCSP, or CISSP (CISSP relevant for Sr. Engineer).
  • Cloud certifications for Azure, AWS, or GCP at the associate or professional level.
  • Data or engineering-oriented certifications such as Azure Data Engineer, Databricks, or equivalent preferred but not necessary.
  • Ability to work independently with a high degree of initiative.


What you'll get

Feel free to take advantage of all that American Airlines has to offer:
  • Travel Perks: Ready to explore the world? You, your family, and your friends can reach 365 destinations on more than 6,800 daily flights across our global network.
  • Health Benefits: On day one, you'll have access to your health, dental, prescription and vision benefits to help you stay well. And that's just the start, we also offer virtual doctor visits, flexible spending accounts and more.
  • Wellness Programs: We want you to be the best version of yourself - that's why our wellness programs provide you with all the right tools, resources and support you need.
  • 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year.
  • Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more.

About American Airlines

US Airways provides international and domestic air transport in the United States. It is owned by the American Airlines Group. US Airways utilizes a fleet of 343 mainline jet aircrafts, along with 278 regional jet and turbo-prop aircrafts operated by contract and subsidiary airlines under the name US Airways Express. It was originally established as All American Aviation.It operates an airline network with 193 destinations in 24 countries in North America, South America, Europe, and the Middle East. It also operates the US Airways Shuttle, a US Airways brand which provides hourly service between Boston, New York City, and Washington, D.C.As of October 2013, US Airways employed 32,312 people worldwide and operated 3,028 daily flights.US Airways is a member of Oneworld, and it currently operates along with American Airlines as a result of a merge between the two holding companies of these airliners.US Airways was established in 1973. It operates hubs at Charlotte/Douglas International Airport, Philadelphia Inte...

American Airlines Careers

Join the dynamic team at American Airlines, a leader in global aviation and an innovator in the airline industry. With a wide range of job opportunities, American Airlines is the perfect place to advance your career, offering roles that cater to a variety of skills and professional interests. Work You’ll Do At American Airlines, you will be part of a team that is dedicated to providing world-class service and shaping the future of travel. Our employees enjoy a culture of collaboration and respect, where diversity and inclusion are celebrated. With American Airlines, you can contribute to a legacy of innovation and leadership in the skies. Transform Your Career American Airlines is not just a company; it's a community where you can grow your career through a robust suite of professional development and diversity training programs. Our leadership is committed to nurturing talent and recognizes the value of each individual’s growth. Join a team that leads with integrity and a passion for progress. At American Airlines, your career trajectory is bolstered by our commitment to innovation and excellence in the aviation industry. Internship Opportunities Kickstart your career with an internship at American Airlines. Gain invaluable industry experience, build your resume, and make connections that will propel your professional life. Our internships offer hands-on experience in a variety of departments, helping you discover your path in the aviation industry. Benefits of Working With Us American Airlines places immense value on the well-being of its team members. Employees enjoy competitive benefits including health, dental, and vision insurance, employee discounts, and flexible spending accounts. More than just perks, our benefits are designed to support your life, both at work and at home. Explore Job Opportunities Whether you’re looking to enhance your career in engineering, customer service, or leadership, American Airlines has a position that will match your skills and passions. We are continuously hiring and looking for motivated individuals who are ready to take their careers to new heights. Stay Connected Join Our Team Search open positions that align with your skills and interests. We are looking for passionate, curious, and solution-driven team players. SEARCH AMERICAN AIRLINES JOBS Keep Up to Date Stay ahead with career tips, insider perspectives, and industry-leading insights you can put to use today—all from the people who work here. READ CAREERS BLOG Job Alert Emails Customize your subscription to receive job alerts, latest news, and insider tips tailored to your preferences. Discover the exciting and rewarding opportunities that await at American Airlines.
Learn more about American Airlines
Size
123,400 employees
Market Cap
$8 billion
Industry
Aerospace & Defense
Net Income
-$8.8 billion
Founded
1930
5 Year Trend
-5.7%
Revenue
$17.3 billion
NASDAQ
AAL
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at American Airlines

More Information Technology Jobs

Find similar Engineer/Sr Engineer, IT Cybersecurity Data Protection jobs:

NationwideFort Worth, TX