Marriott International - Denver, CO
posted 4 months ago
This position will be part of the Cloud Security Engineering Team within the Global Information Security organization at Marriott International. The security engineer will be responsible for designing and building security capabilities in a multi-cloud environment, as well as building automation for cloud security controls to enhance the cloud security posture. This role will serve as a key engineering and supporting resource for the cloud security engineering program, ensuring that security measures are effectively integrated into cloud operations. The security engineer will provide Cloud Security Governance and Optimization services to technical teams, advising on security best practices and guiding the development and infrastructure teams in adopting and enforcing security and access policies that align with the business's security needs. This includes conducting vulnerability assessments of cloud assets, delivering remediation recommendations, and providing knowledgeable assistance in resolving identified vulnerabilities. In addition, the engineer will improve the accessibility of security through automation and continuous integration pipelines, which includes detecting and fixing vulnerabilities and identifying potential attacks. The role requires participation in the overall architecture and governance model, providing technical oversight, standardization, and validation of the effectiveness of security systems. The engineer will also be involved in researching, designing, and implementing security components that are standards-based, high-performing, and secure, while educating internal and external users on security technologies to enhance the organization's knowledge and skill base. The position demands a proactive approach to managing work, projects, and policies, ensuring timely and accurate reporting, and collaborating with internal partners to support business strategies. The engineer will need to demonstrate a strong understanding of job-relevant issues, products, systems, and processes, while keeping up-to-date with technical advancements and applying new knowledge to the role.