JetBlue Airways

Manager Vulnerability Management

JetBlue Airways • $120K — $145K *
New York, NY 10025In-Person
Information Technology
5 - 7 years of experience
Today
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • Bachelor's Degree in Computer Science, Cyber Security, or related field; or equivalent experience with a High School Diploma/GED and 4+ years in the field
  • 5+ years of experience in Vulnerability Management or related areas
  • Knowledge of scanning tools (e.g., Tenable, Rapid7) and cloud security platforms (e.g., Wiz, Orca)
  • Familiarity with industry standards like PCI, ISO 27001, and NIST Cybersecurity Framework
  • Experience with application security concepts and scanning methodologies
  • Leadership experience managing a team
  • Excellent communication and presentation skills

Responsibilities

  • Develop and maintain JetBlue's Vulnerability Management Program
  • Manage compliance with PCI, Sarbanes-Oxley, and other frameworks
  • Collaborate with IT and networking teams to remediate vulnerabilities
  • Partner with architecture and engineering teams for risk visibility in cloud environments
  • Oversee vulnerability discovery processes and reporting
  • Articulate and prioritize risks for stakeholders
  • Coordinate with Penetration Testing to minimize vulnerabilities during software development

Benefits

  • Flexible work hours and occasional travel opportunities
  • Professional development and growth support
  • Engagement in a culture that values safety, integrity, and fun
  • Access to JetBlue's confidential reporting systems for safety concerns
  • Participation in a collaborative and innovative work environment
Full Job Description
Position Summary

The Crewmember in this role is responsible for overseeing, directing and prioritizing activity across a range of risk-reduction efforts with regard to the identification, prioritization, and remediation of vulnerabilities. Beyond traditional infrastructure vulnerabilities, the Manager will be responsible for activities to detect and mitigate cloud and application layer vulnerabilities. This role reports to the Director - Cyber Security who is responsible for Threat Intel, Security Monitoring, Detection & Incident Response, and will work in close concert with those other teams.

Essential Responsibilities
  • Continued development, evolution and maintenance of JetBlue's Vulnerability Management Program, including managing traditional scanning and cloud security tools and overseeing the scanning and discovery process, exposure management and external attack surface posture
  • Manage the team, policies and procedures to support successful compliance with Payment Card (PCI), Sarbanes-Oxley, TSA and other required oversight bodies/frameworks
  • Collaborate with cross-functional teams in IT, networking and other departments to drive remediation of identified vulnerabilities and misconfigurations across a hybrid environment, and to enumerate, monitor and manage exposure across our external attack surface
  • Partner with architecture, engineering and application development teams to establish and maintain comprehensive visibility into potential risks in a large-scale cloud environment
  • Oversee analysts, partners and service providers to ensure regular, rigorous and effective vulnerability discovery and tracking processes, including regular metrics and reporting
  • Clearly articulate and correctly prioritize risk for stakeholder and leadership teams
  • Coordination with our Penetration Testing program to reduce risk throughout JetBlue's software development, deployment and testing lifecycle to minimize the introduction of vulnerabilities as the environment continues to evolve
  • Coordinate with the Threat Intel and Pen Test teams to ensure immediate assessment of risk for actively-exploited vulnerabilities and live or time-sensitive threat-actor campaigns and activity
  • Understand business requirements, network topology and other factors to make informed decisions around inherent and residual risk, prioritization and resource allocation
  • Develop the integration and automation strategy and manage analysts to optimize workflows between Vulnerability Management and the asset and application teams who address findings
  • Drive continuous evolution and improvement in processes, controls, and the Risk Exception and Risk Acceptance processes as they relate to Vulnerability response
  • Take a significant role in the development of direct reports and other Crewmembers to support their engagement, growth, and goal achievement
  • Other duties as assigned

Minimum Experience and Qualifications
  • Bachelor's Degree in Computer Science, Cyber Security, Data Analysis, or other relevant discipline; OR demonstrated capability to perform job responsibilities and a High School Diploma/GED and at least four (4) years of previous related work experience
  • Five (5) years of relevant work experience in Vulnerability Management, Patch Management, IT Platform Engineering or other related fields
  • Demonstrated knowledge of scanning tools such as Tenable or Rapid7, cloud security platforms such as Wiz or Orca and Attack Surface Management tools and concepts
  • Experience with penetration testing methodologies and tools
  • Familiarity with industry standards and frameworks, such as Payment Card Industry (PCI) Security Standards, ISO 27001 and/or National Institute of Standards and Technology (NIST) Cybersecurity Framework
  • Experience with application security concepts and scanning methodologies such as static code analysis and dynamic application security testing
  • Understanding of application container architecture
  • Leadership and management experience, including leading a team
  • Risk Management knowledge and experience
  • Excellent communication and presentation skills
  • Available for occasional overnight travel (10%)
  • Must pass a ten (10) year background check and pre-employment drug test
  • Legally eligible to work in the country in which the position is located
  • Authorization to work in the US is required. This position is not eligible for visa sponsorship

Preferred Experience and Qualifications
  • Six (6) years of relevant work experience
  • Experience with security testing, Attack Surface Management or red-teaming
  • Strong understanding of the differences in Vulnerability Management across Data Center, Cloud, Containers, Applications etc. is highly desirable
  • Creative problem solver and innovative thinker
  • Past work performing or overseeing additional adjacent disciplines such as Patch Management, Secure Software Development Life Cycle (SSDLC), Pen Testing or Red/Purple Teaming
  • Experience working with AWS, Azure and/or GCP
  • Experience building out Management Metrics and Key Performance Indicators (KPIs)

Crewmember Expectations:
  • Regular attendance and on time punctuality
  • Potential need to work flexible hours and be available to respond on short-notice
  • Able to maintain a professional appearance
  • When working or traveling on JetBlue flights, and if time permits, all capable crewmembers are asked to assist with light cleaning of aircraft
  • Organizational fit for the JetBlue culture, that is, exhibit the JetBlue values of Safety, Caring, Integrity, Fun and Passion
  • Promote JetBlue's #1 value of safety as a Safety Ambassador, supporting JetBlue's Safety Management System (SMS) components, Safety Policy and behavioral standards
  • Identify safety and/or security concerns, issues, incidents or hazards that should be reported and report them whenever possible and by any means necessary including JetBlue's confidential reporting systems (Aviation Safety Action Program (ASAP) and Safety Action Report (SAR))
  • Responsible for adhering to all applicable laws, regulations (FAA, OSHA, DOT, etc.) and Company policies, procedures and risk controls
  • Uphold JetBlue's safety performance metric goals and understand how they relate to their duties and responsibilities
  • The use of ChatGPT or any other automated tool during the interview process will disqualify a candidate from being considered for the position.

Equipment:
  • Computer and other office equipment

Work Environment:
  • Traditional office environment

Physical Effort:
  • Generally not required, or up to 10 pounds occasionally, 0 pounds frequently. (Sedentary)


#LI-AC1

#LI-Hybrid

About JetBlue Airways

JetBlue is a customer service channel for Major United States Airline based in Queens, New York. It is a passenger airline that operates primarily on point-to-point routes with its fleet of 120 Airbus A320 aircraft and 49 EMBRAER 190 aircraft. As of December 31, 2011, it served 70 destinations in 22 states, Puerto Rico, Mexico and 12 countries in the Caribbean and Latin America. Most of JetBlue flights have as an origin or destination New York or one of its other focus cities: Boston, Fort Lauderdale, Los Angeles, Orlando or San Juan, Puerto Rico. As of December 31, 2011, the Company operated an average of 700 daily flights. During the year ended December 31, 2011, the Company acquired eight take-off and landing slots at each of New York’s LaGuardia Airport and Washington D.C.’s Ronald Reagan National Airport. The Company’s operations primarily consist of transporting passengers on its aircraft with domestic United States operations, including Puerto Rico, which accounted for 85% of its capacity in 2011.

JetBlue Airways Careers

There has never been a more exciting time to explore job opportunities at JetBlue Airways, a leading company in the aviation industry known for its innovation, strong culture, and commitment to diversity and leadership development. Work You’ll Do Join JetBlue Airways' dynamic team to help redefine the future of air travel with a focus on customer service excellence and operational efficiency. At JetBlue, you will be part of a culture that values diversity, leadership, and professional growth. Transform your career and the airline industry with JetBlue’s commitment to innovation and excellence. Lead from a unique position in the marketplace, where your skills in technology, customer service, and team collaboration are highly valued. Work with a dedicated team of professionals who are passionate about creating an outstanding travel experience. Collaborate with industry leaders and benefit from a culture that supports career advancement and professional development. Introducing the JetBlue Professional Growth and Development Initiative We are building a market-leading team to master the challenges of the modern aviation industry. At JetBlue, you will find a supportive environment where career growth and learning are encouraged through comprehensive training and leadership development programs. Do Innovative Work Join a team that is at the forefront of the aviation industry, where you can apply your skills in a variety of roles, from pilot and cabin crew positions to engineering and customer support. JetBlue offers a wide range of job opportunities that allow you to innovate and excel. Be Part of a Great Team Work on a wide range of projects and utilize the latest technology in aviation. Harness the unparalleled capabilities of a team that values integrity, teamwork, and mutual respect. Future-Proof Your Career Advance your career with JetBlue Airways, where your ambition can take you to new heights. Enjoy near-limitless opportunities to grow professionally, supported by unmatched training, development, and certification support. Explore JetBlue’s internship programs offer a unique insight into the workings of one of the most innovative airlines in the industry. These programs provide hands-on experience and are a stepping stone to full-time employment. The JetBlue Experience Our combined service capabilities, commitment to innovation, and a diverse and inclusive workplace help employees thrive and lead in their careers. At JetBlue, we are dedicated to nurturing a professional environment where every team member can succeed. Stay Connected Join Our Team Search open positions that match your skills and interests. We look for passionate, curious, creative, and solution-driven team players. Explore the various employment paths JetBlue Airways offers, from customer service to pilot positions. SEARCH JETBLUE JOBS Keep Up to Date Stay ahead with career tips, insider perspectives, and industry-leading insights you can put to use today—all from the people who work here. READ CAREERS BLOG Job Alert Emails Personalize your subscription to receive job alerts, latest news, and insider tips tailored to your preferences. Discover the exciting and rewarding career opportunities that await at JetBlue Airways.
Learn more about JetBlue Airways
Size
19,304 employees
Market Cap
$2 billion
Industry
Aerospace & Defense
Net Income
-$1.3 billion
Founded
1999
5 Year Trend
-1.7%
Revenue
$2.9 billion
NASDAQ
JBLU
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at JetBlue Airways

More Information Technology Jobs

Find similar Manager Vulnerability Management jobs:

NationwideNew York, NY