Lead - Incident Responder Cybersecurity

• Pay or shift range: $110,114 USD to $146,157 USD

At Frontier, our mission is to Make Every Flight Count. That mission guides how we support our customers, our people and the operation every day.

As a Frontier employee, your work connects to more than a single role. Whether you’re supporting flights, helping customers, maintaining aircraft, leading teams or working behind the scenes, you help create a travel experience that is safe, reliable and built around value.

Our work is guided by our core values: customer first, safety always, operational excellence and one team. These values shape how we make decisions, support each other and deliver for the people who count on us.

Support for work, life and travel

Frontier offers benefits, programs and travel privileges designed to support eligible employees at work and beyond. Availability may vary by role, employment status, eligibility, location, schedule, applicable policies and current plan details.

Depending on role and eligibility, available benefits and programs may include:

• Medical, dental and vision coverage
• 401(k) retirement savings options
• Paid holidays, vacation time and sick time
• Travel privileges on Frontier Airlines and participating partner airlines, based on current program rules and availability
• Buddy passes, based on eligibility and program rules
• Travel-related discounts and employee discounts on select products, services and vendors
• A hybrid schedule for eligible headquarters roles based in Denver, Colorado
• Business casual dress options for eligible corporate and support roles
• Employee support programs and resources, including the HOPE League, Frontier Airlines’ nonprofit organization

Frontier Airlines is a Denver-based airline serving destinations across the United States and select international markets. Our people support every part of the travel journey, from airport operations and flight crews to aircraft maintenance, customer support, corporate teams and more.

We’re focused on delivering meaningful value by making travel more accessible, practical and easy to personalize for our customers. Across the airline, our teams help support a safe, reliable and efficient operation while continuing to strengthen the experience for the people who choose Frontier.

What Will You Be Doing?

The Lead Incident Responder of Cybersecurity Operations is responsible for investigating, containing, eradicating, and recovering from cybersecurity incidents across the Frontier enterprise environment. This role provides leadership, hands‑on incident response, digital forensics, threat analysis, and coordination support during active incidents.

The Lead Incident Responder delivers timely and accurate analysis of internal and external threats using detection and response platforms and collaborates with SOC analysts, threat hunters, IT teams, and management to reduce organizational risk. The scope of the environment includes SIEM, EDR, network security controls, cloud platforms, vulnerability management, and threat intelligence services.

Essential Functions

• Monitor, investigate, analyze, respond to, and document cybersecurity incidents identified through detection and response platforms.
• Serve as Incident Commander, when assigned, to run the bridge, track actions/owners, and drive cadence.
• Define severity, business impact, and required engagement level (e.g., Sev1–Sev4), and lead initial triage to determine scope and next actions.
• Execute the full incident response lifecycle: identification, containment, eradication, recovery, and post‑incident review
• Perform in‑depth alert and event analysis across SIEM, EDR, network, endpoint, and cloud sources
• Collect, preserve, and analyze forensic evidence including logs, disk artifacts, memory artifacts, and network…