{"id":144998,"url":"https://alion.io/job/delta-air-lines-security-engineer","title":"Security Engineer","company":{"id":6522,"name":"Delta Air Lines","domain":"delta.com","url":"https://alion.io/company/delta-air-lines","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19500,"max_usd":42000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Amazon EC2","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CyberArk","optional":false},{"name":"IAM","optional":false},{"name":"ITSM","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Unix","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS Bedrock","optional":true},{"name":"AWS Lambda","optional":true},{"name":"CI/CD","optional":true},{"name":"Sentry","optional":true}],"status":"live","first_seen_at":"2026-08-28T07:22:26Z","employer_posted_date":null,"last_verified_at":"2026-08-28T07:22:26Z","board_verified":false,"closed_at":null,"days_open":58,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":58},"description":"Responsibilities:\nDesign, deploy, and maintain CyberArk Privileged Access Management (PAM) solutions including Vault, CPM, PSM, PTA and Privilege Cloud for hybrid and cloud-native environments.\nAdminister and optimise CyberArk Endpoint Privilege Manager (EPM) policies to enforce least privilege and application control on servers and end-user endpoints.\nImplement and manage CyberArk Privilege Cloud, including onboarding of accounts, proxy-based access, session recording, and periodic password rotation.\nConfigure and support CyberArk Identity (IDaaS/SSO/MFA) integrations with enterprise applications, directories, and cloud platforms.\nOwn end-to-end CyberArk infrastructure on AWS: sizing and deploying components, HA/DR design, backup and recovery, patching, and performance tuning.\nIntegrate CyberArk with LDAP/AD, RADIUS, SMTP, SIEM/Syslog, ticketing tools, and other security platforms following best practices.\nDevelop and maintain onboarding workflows, platforms, and policies for privileged accounts and secrets across on-prem, cloud, and SaaS workloads.\nMonitor, troubleshoot, and resolve complex issues in PAM/EPM/Privilege Cloud/Identity environments, including advanced PSM and CPM configurations.\nCollaborate with security architecture, IAM, cloud, and application teams to design secure privileged access patterns and controls.\nProduce and maintain technical documentation, runbooks, and diagrams for CyberArk solutions and related integrations.\nSupport audits and compliance activities by providing reports, evidence of control effectiveness, and remediation plans for findings.\nRequirements:\nBachelor's degree in Computer Science, Information Security, Engineering, or a related discipline, or equivalent practical experience.\n5-12 years total experience in information security with at least 5+ years dedicated to CyberArk PAM engineering.\nStrong hands-on experience with CyberArk components: Enterprise Password Vault (EPV), CPM, PSM, PTA, and Application Access Manager/Secrets management.\nProven experience implementing and operating CyberArk Privilege Cloud in production, including migrations from on-prem PAM where applicable.\nPractical experience with CyberArk EPM: policy design, least-privilege enforcement, elevation rules, and endpoint hardening.\nWorking knowledge of CyberArk Identity (SSO, MFA, lifecycle flows) and its integration with AD, Entra ID (Azure AD), and major SaaS apps.\nStrong AWS experience operating security or IAM-related workloads (EC2 RDS, networking, load balancers, security groups, IAM roles/policies) supporting CyberArk infrastructure.\nFamiliarity with common operating systems (Windows, Linux/UNIX) and directory services (AD/LDAP) from a PAM perspective.\nExperience integrating CyberArk with SIEM/SOC, ITSM, and ticketing tools, and building monitoring and alerting around PAM/EPM services.\nScripting skills (PowerShell, Python, or similar) for automation, bulk onboarding, health checks, and reporting.\nSolid understanding of identity security, least privilege, Just-In-Time (JIT), Zero Trust, and privileged threat detection concepts.\nDesign and implement security controls for Non-Human Identities (NHIs), including service accounts, machine identities, API credentials, application secrets, certificates, and AI-enabled workloads.\nPartner with AI, Data, Platform, and Cloud Engineering teams to establish secure privileged access patterns for AI/ML platforms and agentic workflows.\nImplement controls to mitigate emerging threats associated with AI agents, including over-privileged access, credential abuse, unauthorised actions, and prompt-injection-induced privilege misuse.\nLeverage PAM telemetry, SIEM integrations, and AI/ML-driven monitoring solutions to detect abnormal privileged behaviour involving both human and non-human identities.\nGood to have:\nMandatory: CyberArk Sentry-level certification (e. g., CyberArk Sentry PAM / CyberArk Sentry Privilege Cloud / equivalent) or above.\nExperience implementing CyberArk Secrets Manager, Conjur, or machine identity security solutions at enterprise scale.\nExperience securing AI agents, Generative AI applications, AI-powered automation platforms, and agentic architectures.\nExperience designing governance and lifecycle management controls for Non-Human Identities (NHIs) across large enterprise environments.\nExpertise in Zero Standing Privilege (ZSP), Just-In-Time (JIT) access, and advanced privileged access workflows.\nExperience integrating CyberArk solutions into DevSecOps, CI/CD pipelines, Infrastructure-as-Code, containerised workloads, and cloud-native platforms.\nFamiliarity with AWS Bedrock, Lambda, or other AI/ML platforms from a security and privileged access perspective.\nExperience leveraging behavioural analytics, AI-assisted security monitoring, and advanced threat detection capabilities.\nKnowledge of emerging AI security risks, including prompt injection attacks, autonomous agent privilege escalation, credential abuse, and secure AI governance practices.\nProven ability to lead enterprise PAM transformation initiatives, cloud migrations, and modernisation programs.\nStrong stakeholder management, consulting, and technical leadership capabilities with the ability to influence architecture and security decisions across the organisation.","description_format":"text","description_chars":5284,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Space & Aerospace","Travel & Tourism","Business Travel","Luxury Travel"],"lifecycle":[{"event":"open","at":"2026-08-28T07:22:26Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 79 · green card filings: 69","filings_12m":79,"filings_prev_12m":190,"green_card_filings_12m":69,"median_offered_wage_usd":145169,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":7}],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.599,"p_room":0.35,"age_days":57,"expected_fill_days":27,"reasons":["seen:57","velocity","win:tail"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/delta-air-lines-security-engineer","json_url":"https://alion.io/job/delta-air-lines-security-engineer.json","meta":{"generated_at":"2026-10-25T12:01:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17327,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6522},"rest":"https://alion.io/mcp/rest/get_company?id=6522"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdelta-air-lines-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdelta-air-lines-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdelta-air-lines-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/delta-air-lines-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdelta-air-lines-security-engineer"}]}