Job description

About JSSI Founded in 1989 and headquartered in Chicago, Jet Support Services, Inc. (JSSI) is the largest independent provider of hourly cost maintenance programs for business aviation. JSSI delivers comprehensive coverage for engines, airframes, and auxiliary power units (APUs) across more than 300 different aircraft makes and models, helping owners and operators stabilize maintenance budgets, maximize aircraft availability, and protect asset value throughout the lifecycle of ownership. JSSI has built a portfolio of complementary business lines designed to simplify the economic and technical complexity of business aviation; these include Maintenance teams , Traxxall maintenance tracking software, Parts & Engines , Conklin aircraft cost and performance data, and Aviation Capital asset-based financing solutions. Together, these offerings support owners, operators, and maintenance providers with integrated tools spanning ownership and maintenance planning, execution, and financial management. With more than 6,500 aircraft supported through programs and software platforms, JSSI leverages its unique independence, unmatched scale, and data-driven insight to deliver customized solutions and support models aligned to the interests of each client — regardless of aircraft platform. JSSI is backed by leading institutional investors GTCR, Genstar Capital, and Blackstone. Learn more at jetsupport.com . As the Senior Cybersecurity Engineer, you will be the hands-on technical owner of day-to-day cybersecurity operations that prevent, identify, remediate, and report on security incidents, continually assessing the organization's posture against an evolving threat landscape and designing, implementing, and maintaining the measures that protect our employees and assets. Working in a fast-moving, dynamic environment, you will also drive improvements across the broader cybersecurity program, from detection and response to vulnerability management, security awareness, and compliance, balancing day-to-day operations with the projects that continuously strengthen JSSI's security posture. Responsibilities Work AI-enriched alerts, telemetry, and threat feeds to identify and remediate incidents. Build and maintain agentic tooling and automations across the security stack, automating alert triage, enrichment, and analysis and reducing manual work for the team. Build and maintain SOAR workflows that integrate SIEM, EDR, identity, email, and ticketing tools to automate enrichment, containment, and case management. Lead technical investigation, containment, and recovery for security incidents alongside IT, engineering, and business teams, and turn root-cause findings into stronger detections, playbooks, and controls. Author and tune detections, correlation rules, and queries, drafting them with AI from the threat behaviors you want to catch and validating before they go live. Prioritize and drive remediation of vulnerability, pentest, and security-assessment findings across the organization. Routinely assess network and cloud security posture and prioritize gaps against best practices. Configure and maintain security devices, systems, and tooling according to best practices. Investigate and respond to phishing reports and quarantine-release requests. Own and enhance JSSI's Security Awareness Training program. Design, implement, and operate security improvements across the environment to continually raise the organization's security posture and program maturity. Establish and report on key security metrics and respond to audit requests and client due-diligence questionnaires. Document and improve operational procedures, runbooks, and SOPs. Contribute to incident response planning, security policies, disaster recovery, and business continuity planning. Collaborate with other IT professionals to advise on cybersecurity best practices. Participate in the on-call rotation and respond to critical security alerts off-hours. Perform other duties as assigned. Requirements Required 7+ years' experience in Information Technology roles, including 4+ years in security operations (SOC analyst, incident response, detection engineering, or similar). Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent professional experience. In-depth knowledge of networking protocols and experience configuring network security devices such as firewalls and IDS/IPS. Experience with EDR and XDR services. Scripting and query language experience such as Bash, PowerShell, and KQL. Hands-on experience setting up and querying SIEM tools such as Sumo Logic. Hands-on experience building automations and playbooks in a SOAR platform, integrating security tooling via APIs to automate triage, enrichment, and response. Knowledge of data privacy and compliance regulations and cybersecurity frameworks such as ISO 27001 and NIST. Excellent written and verbal communication skills. Detail orientation and strong analytical and problem-solving abilities. Ability to effectively prioritize tasks and projects in a fast-paced environment. Preferred Experience with Tines. Experience with the Microsoft Defender security suite. Cybersecurity certifications such as CISSP, CISM, or CEH. At JSSI, we are committed to rewarding our team members with competitive and comprehensive compensation packages that reflect their contributions and talent. For this role, the annual base pay generally ranges from $125,000 to $155,000 with the final offer determined by variable factors including but not limited to market location, job-specific knowledge, skills, education, and experience. In addition, your total rewards package may include an annual discretionary bonus plan, incentive or sales bonus plan, or other form of additional compensation, based on your role. Additionally, for full-time employees based in the USA, Canada, or the Philippines, we are proud to offer a robust suite of benefits. This ranges from insurance offerings such as medical, dental, vision, retirement savings programs, among others, starting day one of employment. For a full overview of our offerings, visit the JSSI Benefits Page on our company website JSSI is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, or other characteristic protected by law. JSSI does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job postings. No fee will be paid to third parties who submit unsolicited candidates directly to our hiring managers or Recruiting Team.

Requirements

Must-haves

Work AI-enriched alerts, telemetry, and threat feeds to identify and remediate incidents.
Build and maintain agentic tooling and automations across the security stack, automating alert triage, enrichment, and analysis and reducing manual work for the team.
Build and maintain SOAR workflows that integrate SIEM, EDR, identity, email, and ticketing tools to automate enrichment, containment, and case management.
Lead technical investigation, containment, and recovery for security incidents alongside IT, engineering, and business teams, and turn root-cause findings into stronger detections, playbooks, and controls.
Author and tune detections, correlation rules, and queries, drafting them with AI from the threat behaviors you want to catch and validating before they go live.
Prioritize and drive remediation of vulnerability, pentest, and security-assessment findings across the organization.
Routinely assess network and cloud security posture and prioritize gaps against best practices.
Configure and maintain security devices, systems, and tooling according to best practices.
Investigate and respond to phishing reports and quarantine-release requests.
Own and enhance JSSI's Security Awareness Training program.
Design, implement, and operate security improvements across the environment to continually raise the organization's security posture and program maturity.
Establish and report on key security metrics and respond to audit requests and client due-diligence questionnaires.
Document and improve operational procedures, runbooks, and SOPs.
Contribute to incident response planning, security policies, disaster recovery, and business continuity planning.
Collaborate with other IT professionals to advise on cybersecurity best practices.
Participate in the on-call rotation and respond to critical security alerts off-hours.
Perform other duties as assigned.
7+ years' experience in Information Technology roles, including 4+ years in security operations (SOC analyst, incident response, detection engineering, or similar).
Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
In-depth knowledge of networking protocols and experience configuring network security devices such as firewalls and IDS/IPS.

Nice-to-haves

Experience with Tines.
Experience with the Microsoft Defender security suite.
Cybersecurity certifications such as CISSP, CISM, or CEH.
At JSSI, we are committed to rewarding our team members with competitive and comprehensive compensation packages that reflect their contributions and talent.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aigo

Platform: lever
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision