Marriott International - Boston, MA

posted 4 months ago

Full-time - Manager
Hybrid - Boston, MA
Accommodation

About the position

This position will be part of the Cloud Security Engineering Team within the Global Information Security organization at Marriott International. The security engineer will be responsible for designing and building security capabilities in a multi-cloud environment, as well as building automation for cloud security controls to enhance the cloud security posture. This role will serve as a key engineering and supporting resource for the cloud security engineering program, ensuring that security measures are integrated into the cloud infrastructure effectively. The security engineer will provide Cloud Security Governance and Optimization services to technical teams, advising on security best practices and guiding development and infrastructure teams in adopting and enforcing security and access policies that align with the business's security needs. This includes conducting vulnerability assessments of cloud assets, delivering remediation recommendations, and providing knowledgeable assistance in resolving identified vulnerabilities. In addition, the engineer will improve the accessibility of security through automation and continuous integration pipelines, which involves detecting and fixing vulnerabilities and identifying potential attacks. The role requires participation in the overall architecture and governance model, providing technical oversight, standardization, and validation of the effectiveness of security systems. The engineer will also educate internal and external users on security technologies to enhance the organization's knowledge and skills in operating and supporting technology and security services. The position demands a proactive approach to analyzing the current environment to detect critical deficiencies and recommend solutions for improvement, as well as consulting with project teams to modify infrastructure and security services as necessary. The engineer will document all architecture design and analysis work, manage and implement assigned projects, and provide timely and accurate reports on project progress and results.

Responsibilities

  • Design and build security capabilities in a multi-cloud environment.
  • Build automation for cloud security controls to enhance the cloud security posture.
  • Provide Cloud Security Governance and Optimization services to technical teams.
  • Advise on security best practices and guide development and infrastructure teams in adopting and enforcing security policies.
  • Conduct vulnerability assessments of cloud assets and deliver remediation recommendations.
  • Provide subject matter expertise to Security Engineering and Operations teams.
  • Improve accessibility of security through automation and continuous integration pipelines.
  • Participate in the overall architecture and governance model.
  • Provide technical oversight and validation of security systems' effectiveness.
  • Educate internal and external users on security technologies.
  • Participate in the evaluation and selection of security service products.
  • Support governance based on best practices and align projects with security needs.
  • Analyze the current environment to detect deficiencies and recommend improvements.
  • Consult with project teams to modify infrastructure and security services as needed.
  • Document all architecture design and analysis work.

Requirements

  • Bachelor's degree in Information Security or related field or equivalent experience/certification.
  • 7+ years progressive Information Technology engineering experience.
  • 5+ years of Information Security experience in security engineering.
  • 3+ years in public cloud security (e.g., AWS, Azure).
  • 1+ years' experience with scripting languages (e.g., Python, JavaScript).
  • 1+ years' experience with CI/CD pipelines or security tooling for cloud-native deployments.

Nice-to-haves

  • Current information security certification (CISM, CISSP, AWS Professional Architect, AWS Security Specialty).
  • Experience working with Agile and Scrum methodologies.
  • Knowledge of Cloud Security Posture Management (CSPM) tools.
  • Knowledge of securing technologies such as Cloud-Native Services, Container Platforms, APIs, Identity and Access Management, Serverless technologies.

Benefits

  • Medical, dental, and vision coverage.
  • Health care flexible spending account.
  • Dependent care flexible spending account.
  • Life insurance.
  • Disability insurance.
  • Accident insurance.
  • Adoption expense reimbursements.
  • Paid parental leave.
  • Educational assistance.
  • 401(k) plan.
  • Stock purchase plan.
  • Discounts at Marriott properties.
  • Commuter benefits.
  • Employee assistance plan.
  • Childcare discounts.
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service