Marriott International - Concord, NH
posted 4 months ago
This position will be part of the Cloud Security Engineering Team within the Global Information Security organization at Marriott International. The security engineer will be responsible for designing and building security capabilities in a multi-cloud environment, as well as building automation for cloud security controls to enhance the cloud security posture. This role is crucial as it serves as a key engineering and supporting resource for the cloud security engineering program. The engineer will provide Cloud Security Governance and Optimization services to technical teams, advising on security best practices and guiding development and infrastructure teams in adopting and enforcing security and access policies that align with the business's security needs. In addition to governance, the role involves conducting vulnerability assessments of cloud assets, delivering remediation recommendations, and providing knowledgeable assistance in resolving identified vulnerabilities. The engineer will also serve as a subject matter expert to the Security Engineering and Operations teams, ensuring the safeguarding of design, build, deploy, and maintenance of products and services in the cloud environment. The position emphasizes improving the accessibility of security through automation, continuous integration pipelines, and other means, including detecting and fixing vulnerabilities and identifying attacks. The engineer will participate in researching, designing, and implementing security components that are standards-based, high-performing, highly available, and secure, delivering the required business functionality. Educating internal and external users on security technologies is also a key responsibility, aimed at continually improving the organization's knowledge and skill base regarding technology and security services. The role requires collaboration with project teams to identify necessary modifications to infrastructure and security services to accommodate project needs, as well as consulting with architecture teams to adjust technical architecture for infrastructure and security needs. Documentation of all architecture design and analysis work is also a critical component of this position.