Marriott International - Lincoln, NE
posted 4 months ago
The Cyber Incident Response Analyst is a critical role within Marriott International, responsible for responding to both existing and emerging cyber threats. This position requires a deep understanding of attacker behavior and the ability to analyze data from various sources and tools to identify attacker tools, tactics, and procedures (TTPs). The analyst will participate in and manage security events and incidents, ensuring that the organization is prepared to handle any potential threats effectively. The successful candidate will possess strong technical skills, excellent communication abilities, and the capacity to manage multiple investigations under tight deadlines. In this role, the analyst will conduct host forensics, network forensics, and log analysis to support incident response investigations. They will handle escalations from both internal and external sources, quickly triaging and responding to threats as necessary. Utilizing advanced technology platforms and security tools, the analyst will conduct large-scale investigations and collect endpoint and network-based evidence. Additionally, they will develop and present comprehensive reports tailored for technical, executive, and non-security stakeholders, ensuring that all parties are informed and engaged in the incident response process. The Cyber Incident Response Analyst will also provide technical subject matter expertise related to strategic projects and initiatives that enhance the maturity and capability of the Incident Response team. This includes developing and following detailed operational processes and procedures to analyze, escalate, and assist in the remediation of information security-related incidents. Mentoring and training junior analysts will be a key component of this role, as the analyst will help advance their skills and introduce new methods for monitoring and detecting threats. The position requires flexibility, including the possibility of shift work, to meet the business and operational needs of the organization.