at Marriott in Springfield, Illinois, United States
Job Description
Job Number 24097012
Job Category Information Technology
Location Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States
Schedule Full-Time
Located Remotely? Y
Relocation? N
Position Type Management
JOB SUMMARY
Marriott’s Security Engineering team is seeking an experienced technical leader for endpoint security engineering, leading a premier engineering team that develops, operates, and supports heterogeneous security infrastructure and controls on a global scale. This role will be responsible to build and lead the Cyber Security Engineering program. Driving critical security initiatives with our business partners and liaising with key infrastructure teams to develop tactical and strategic security solutions and roadmaps, while also running the operational functions across the technical team.
CANDIDATE PROFILE
Education and Experience
Required:
+ Bachelor’s degree in Computer Sciences or related field or equivalent experience/certification
+ 8+ years of information security experience, with 5+ years of experience and hands-on expertise in endpoint security solutions in a large enterprise.
+ At least 2 years of experience in endpoint security including – Endpoint Detection and Response (EDR), host-based IDS/IPS, component hardening
+ At least 1 year of experience as a supervisory or manager of others and leading complex projects cross-functionally and globally
Preferred:
+ Excellent understanding of current Cyber threat landscape
+ Strong operational knowledge of Windows, Linux, Mac Operating Systems
+ Excellent understanding of Incident Response and Cyber Defense operations
+ Experience delivering large scale, highly available security solutions
+ Current information security certifications – Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM)
+ Experience working with Agile and Scrum methodologies
+ Capable of being hands-on and providing technical expertise.
+ Experience participating in and coordinating activities for security incident response.
+ Support routine regulatory and compliance audit initiatives.
+ Good understanding and experience working with frameworks – NIST, ISO27001, PCI DSS, CSA.
+ Knowledge of global regulatory standards to include GDPR, CCPA etc.
+ Strong analytical and problem-solving skills
+ Proven ability to effectively prioritize and drive multiple work streams in a high-pressure environment
+ Adept at conducting research into process and governance best practices, models, and methodologies
+ Excellent verbal and written communication skills
CORE RESPONSIBILITIES
+ Lead a team of endpoint security engineering professionals responsible for planning, design, operations, implementation, attack mitigation and ongoing support of endpoint security systems.
+ Provide technical deep understanding of security systems at different layers – network , cloud, endpoint, advance malware defense, data security etc.
+ Conduct Architecture and Design review to provide guidance and Quality assurance around best practices and frameworks.
+ Deep understanding of endpoint security technologies, provide security protection on-premise and in public cloud and guide/mentor the security experts on this front.
+ Provide recommendations to management team to increase effectiveness of organization and technology solutions.
+ Scales security program through the application of automation, software, tools, training and initiatives.
+ Manages a large portfolio of security program deliverables, and track and report on budgets, timelines, dependencies, and conflicts.
+ Drive critical initiatives in support of risk reduction and maintain security standards and guidelines.
+ Conducts assessments of threats and vulnerabilities, determines deviations from acceptable configurations or enterprise or local policy, assesses the level of risk, and develops and/or recommends and operationalizes appropriate mitigation countermeasures.
+ Applies knowledge of priorities to define an entity’s direction, determine how to allocate resources, and identify programs or infrastructure that are required to achieve desired goals within domain of interest. Develops policy or advocates for changes in policy that will support new initiatives or required changes/enhancements.
+ Oversees the information assurance (IA) program of an information system.
+ Develop technical documentation, including standards and standard operating procedures
+ Report on key compliance and operational metrics on infrastructure security
+ Conduct routine security audits of all supported security systems to ensure compliance with established standards, policies, procedures and requirements
+ Collaborate with other teams to solve security problems with minimal disruption to other business functions.
+ Manage the investigation and troubleshooting of security issues to determine root cause and drive solutions.
+ Continuous improvement of policies and procedures and technology.
Managing Work, Projects, and Policies
+ Coordinates and implements work and projects as assigned.
+ Generates and provides accurate and timely results in the form of reports, presentations, etc.
+ Analyzes information and evaluates results to choose the best solution and solve problems.
+ Develops specific goals and plans to prioritize, organize, and accomplish work.
+ Sets and tracks goal progress for self and others.
+ Monitors the work of others to ensure it is completed on time and meets expectations.
+ Provides direction and assistance to other organizational units’ policies and procedures, and efficient control and utilization of resources.
Leading Team
+ Creates a team environment that encourages accountability, high standards, and innovation.
+ Leads specific team while assisting with meeting or exceeding department goals.
+ Makes sure others understand performance expectations.
+ Ensures that goals are being translated to the team as they relate to tracking and productivity.
+ Creates and nurtures an environment that emphasizes motivation, empowerment, teamwork, continuous improvement and a passion for providing service.
+ Understands employee and develops plans to address need areas and expand on the strengths.
+ Provides the team with the capabilities needed to meet or exceed expectations.
+ Leads by example demonstrating self-confidence, energy and enthusiasm.
Conducting Human Resources Activities
+ Acts proactively when dealing with employee concerns.
+ Extends professionalism and courtesy to employees at all times.
+ Communicates/updates all goals and results with employees.
+ Meets semiannually with staff on a one-to-one basis.
+ Establishes and maintains open, collaborative relationships with employees.
+ Solicits employee feedback.
+ Interviews job candidates and assists in making hiring decisions.
+ Receives hiring recommendations from team supervisors.
+ Ensures orientations for new team members are thorough and completed in a timely fashion.
+ Observes behaviors of employees and provides feedback to individuals.
Additional Responsibilities
+ Provides information to supervisors, co-workers, and subordinates by telephone, in written form, e-mail, or in person in a timely manner.
+ Manages group or interpersonal conflict.
+ Informs and/or updates executives, peers, and subordinates on relevant information in a timely manner.
+ Manages time effectively and conducts activities in an organized manner.
+ Presents ideas, expectations and information in a concise, organized manner.
+ Uses problem solving methodology for decision making and follow up.
+ Performs other reasonable duties as assigned by manager.
**California Ap