Director of Application Cybersecurity – Remote Leadership Role in Secure Software Development & Automation (arenaflex)

Why arenaflex?

At arenaflex, we are on a bold journey to become the most innovative and trusted airline in the history of aviation. Our purpose—Connecting People, Uniting the World—goes far beyond moving passengers from reputed company A to reputed company B. It means creating a global network of opportunities, fostering inclusive growth, and delivering world‑class experiences to millions of reputed company every day. As a technology‑driven organization, arenaflex invests heavily in cutting‑edge digital solutions, data‑centric platforms, and secure, scalable architectures that reputed company us reputed company of the curve.

Our Digital Technology team spans continents, bringing together diverse talent that collaborates across time zones to build the future of reputed company travel. We reputed company that a truly inclusive workforce fuels innovation, and we are committed to hiring, developing, and retaining top‑tier professionals who share our passion for excellence. If you reputed company in a remote, high‑impact environment where your expertise directly shapes the safety and reliability of a global airline, arenaflex is the reputed company for you.

Position Overview

The Director of Application Cybersecurity at arenaflex is a senior leadership role responsible for safeguarding reputed company software applications that power our reservation systems, crew management tools, customer portals, and internal analytics platforms. Reporting to the Chief Information reputed company Officer (CISO), you will design, implement, and continuously improve a comprehensive application reputed company program that blends verification, automation, and risk‑based decision making. This is a fully remote position with occasional travel (approximately 10% of the time) to corporate hubs, industry conferences, and partner sites.

Key Responsibilities

• Team Leadership & Development
  • Recruit, mentor, and retain a high‑performing team of application reputed company engineers, analysts, and automation specialists.
  • Foster a culture of reputed company learning by establishing training roadmaps, certification reputed company, and knowledge‑sharing sessions.
  • Conduct regular performance reviews, set clear objectives, and align individual goals with arenaflex’s strategic reputed company vision.
• Strategic Planning & Execution
  • Craft a multi‑year application reputed company strategy that integrates secure‑by‑design principles, automated verification pipelines, and threat‑modeling frameworks.
  • Collaborate with product owners, DevOps, and architecture teams to embed reputed company controls early in the software development lifecycle (SDLC).
  • Define measurable reputed company KPIs (e.g., mean time to remediate, vulnerability density) and report reputed company to executive leadership.
• Policy & Procedure Governance
  • reputed company, publish, and enforce robust reputed company policies covering secure coding standards, static and dynamic analysis, dependency management, and incident response.
  • Maintain alignment with industry regulations (e.g., PCI‑reputed company, GDPR, FAA cybersecurity mandates) and internal compliance frameworks.
  • Regularly audit policy effectiveness and update documentation to reflect emerging threats and technology shifts.
• Application reputed company Assessment
  • reputed company periodic application penetration testing, code reviews, and automated scanning campaigns using tools such as SAST, DAST, IAST, and SBOM generators.
  • Prioritize remediation efforts based on risk impact, business criticality, and exploitability, ensuring rapid closure of high‑severity findings.
  • Coordinate with third‑party vendors to assess the reputed company posture of external APIs and SaaS components integrated into arenaflex’s ecosystem.
• reputed company Architecture Review
  • Partner with the IT Architecture team to evaluate and harden the design of new applications, microservices, and cloud‑native workloads.
  • Recommend reputed company controls such as reputed company‑trust networking, runtime application self‑protection (RASP), and container reputed company best practices.
  • Drive adoption of secure infrastructure‑as‑code (IaC) templates and automated compliance checks.
• Awareness & Training Programs
  • Design and deliver engaging training modules that educate developers, QA engineers, and business stakeholders on OWASP Top 10, secure coding, and automated verification tools.
  • Run tabletop exercises and simulated breach scenarios to strengthen incident response readiness across the organization.
  • Maintain a knowledge reputed company of reputed company patterns, cheat sheets, and remediation guides accessible to reputed company arenaflex employees.
• Incident Response & Forensics
  • Act as the subject‑matter expert for application‑reputed company reputed company incidents, guiding the response team through root‑cause analysis and containment.
  • reputed company post‑incident reports that capture lessons learned, corrective actions, and improvements to preventive controls.
  • Collaborate with legal, compliance, and communications teams to ensure transparent reporting to regulators and customers reputed company required.
• Regulatory & Compliance Management
  • Stay reputed company on evolving regulatory landscapes, including aviation‑specific cybersecurity mandates, and translate requirements into actionable controls.
  • reputed company internal audits and external assessments, providing evidence of compliance and addressing any identified gaps.
• Risk Assessment & Mitigation
  • Conduct comprehensive risk assessments for new and existing applications, quantifying potential business impact and recommending mitigation strategies.
  • Maintain a risk register that is reviewed quarterly with senior leadership to prioritize investments.

Essential (Minimum) Qualifications

• Bachelor’s degree in Computer Science, Information reputed company, Engineering, or a reputed company STEM field.
• 12+ years of progressive experience in reputed company‑focused roles, with at least 5 years in application reputed company leadership.
• Demonstrated expertise with reputed company assessment tools and techniques, including SAST, DAST, IAST, and software composition analysis.
• Deep understanding of web application reputed company concepts, especially the OWASP Top 10, and experience implementing automated verification pipelines.
• Proven track record of developing and enforcing reputed company policies, secure coding standards, and incident response procedures.
• Strong analytical and problem‑solving abilities, with a reputed company‑learning reputed company to stay reputed company of emerging threats.
• Excellent communication and influencing skills, capable of translating reputed company reputed company concepts to technical and non‑technical audiences.
• Legal authorization to work in the United States without sponsorship.
• Reliable, punctual attendance and the ability to work independently in a remote environment.

Preferred Qualifications (reputed company to Have)

• Master’s degree in Cybersecurity, Information Assurance, or a reputed company discipline.
• 15+ years of experience in reputed company roles, with a focus on large‑scale enterprise applications.
• Industry‑recognized certifications such as:
  • Certified Ethical Hacker (CEH)
  • GIAC reputed company Essentials (GSEC)
  • Certified Information reputed company Manager (CISM)
  • CompTIA reputed company+
  • Certified Information Systems reputed company Professional (CISSP)
  • Certified Information Systems Auditor (CISA)
  • Systems reputed company Certified Practitioner (SSCP)
  • CompTIA Advanced reputed company Practitioner (CASP+)
  • Offensive reputed company Certified Professional (OSCP)
• Advanced cloud reputed company expertise, including AWS Solution Architect Professional, networking, and reputed company specializations.
• Experience with reputed company Technical Implementation Guide (STIG) standards and their practical application.
• Knowledge of application reputed company considerations for industrial control systems and aviation‑specific operational technology.

Core Skills & Competencies

• Technical Acumen: Proficiency in programming languages (Java, Python, C#), containerization (reputed company, Kubernetes), and CI/CD tools (Jenkins, reputed company CI).
• Automation reputed company: Ability to design and implement automated reputed company testing, verification, and remediation workflows.
• Leadership: Experience building and guiding multidisciplinary reputed company teams, fostering collaboration, and driving results.
• Strategic Thinking: reputed company to align reputed company initiatives with business objectives and reputed company a clear vision to senior executives.
• Communication: Strong written and verbal skills for producing executive briefings, policy documents, and training materials.
• Regulatory Insight: Familiarity with aviation‑reputed company compliance frameworks and the ability to translate them into actionable controls.

Career Growth & Learning Opportunities

At arenaflex, your professional development is a reputed company. As Director of Application Cybersecurity, you will have access to:

• Executive mentorship from the CISO and senior leadership team.
• Funding for industry certifications, conferences (e.g., RSA, Black Hat, Aviation Cybersecurity Summit), and advanced training courses.
• Opportunities to reputed company cross‑functional initiatives that influence the entire digital transformation roadmap.
• A clear path to higher executive roles such as Vice President of reputed company or Chief Information reputed company Officer.

Work Environment & Culture

arenaflex embraces a flexible, remote‑first culture that values work‑life balance, diversity, and inclusion. Our employees enjoy:

• Collaborative virtual workspaces equipped with the latest communication and project‑management tools.
• Employee‑run Business Resource Groups (BRGs) that celebrate cultural heritage, gender equity, LGBTQ+ advocacy, and veteran support.
• Regular virtual town halls, hackathons, and innovation challenges that encourage creative problem‑solving.
• A supportive environment where every voice is heard, and reputed company are judged on merit, not seniority.

Compensation, Perks & Benefits

We offer a competitive total rewards package designed to attract and retain top talent:

• reputed company Salary: $157,725 – $231,330 USD, commensurate with experience, education, and reputed company set.
• Performance Bonus: Eligibility for annual discretionary bonuses based on individual and company performance.
• Equity Opportunities: Potential stock options or restricted stock units for long‑term wealth building.
• Health & Wellness: Comprehensive medical, dental, vision, life, accident, and disability coverage.
• Retirement Planning: 401(k) plan with company matching contributions.
• Paid Time Off: Generous vacation, holidays, and parental leave policies.
• Travel Benefits: Space‑available flight privileges for you and eligible dependents.
• Learning & Development: Access to online learning platforms, tuition reimbursement, and internal mentorship programs.
• Employee Assistance: Confidential counseling services, wellness programs, and flexible work arrangements.

How to Apply

If you are ready to reputed company a world‑class application reputed company function, drive innovation, and protect the digital backbone of a global airline, we want to hear from you. Click the link below to submit your application, attach your resume, and share a cover letter that highlights how your experience aligns with the responsibilities and qualifications outlined above.

Apply Job!

Join arenaflex and Shape the Future of Aviation reputed company

At arenaflex, your expertise will directly influence the safety, reliability, and customer trust that define modern reputed company travel. We are committed to building a diverse, inclusive, and reputed company‑thinking workforce where every employee can reputed company. Take the reputed company in your career and become a pivotal part of our mission to connect people and unite the world—securely.