Let’s get started
By clicking ‘Next’, I agree to the Terms of Service
and Privacy Policy
Jobs / Job page
Marriott is hiring: Sr. Security Engineer - Cloud Security in Lansing image - Rise Careers
Job details

Marriott is hiring: Sr. Security Engineer - Cloud Security in Lansing

Job Number 24121526 Job Category Information Technology Location Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States Schedule Full-Time Located Remotely? Y Relocation? N Position Type Management JOB SUMMARY This position will be part of the Cloud Security Engineering Team within the Global Information Security organization. The security engineer will be responsible for designing and building security capabilities in a multi-cloud environment and building automation for cloud security controls to enhance the cloud security posture. This role will perform as a key engineering and supporting resource for the cloud security engineering program. CANDIDATE PROFILE Education and Experience Required: Bachelor's degree in Information Security or related field or equivalent experience/certification 7+ years progressive Information Technology engineering experience 5+ years of Information Security experience in security engineering that includes 3+ years in public cloud security (e.g., AWS, Azure) 1+ years' experience with scripting languages (e.g., Python, JavaScript) 1+ years' experience with CI/CD pipelines or security tooling for cloud-native deployments. Preferred Skills and Experience: Current information security certification, including Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP), AWS Professional Architect, AWS Security Specialty. Experience working with Agile and Scrum methodologies Experience and knowledge working in DevSecOps, CI/CD, Infrastructure as Code concepts and technologies Knowledge of Cloud Security Posture Management (CSPM) tools Knowledge of securing technologies such as, but not limited to; Cloud-Native Services (e.g., VPCs, S3 buckets), Container Platforms (e.g., Docker, Kubernetes), APIs, Identity and Access Management, Serverless (e.g., Lambda, Azure Functions) Required Attributes Excellent communication skills and problem-solving ability. Demonstrated ability to work independently and with others. Ability to manage the details and compliance with standards and expectations. Technical infrastructure operations, administration, or engineering background Ability to articulate complex technical ideas in easy-to-understand business terms CORE WORK ACTIVITIES Provides Cloud Security Governance and Optimization services to technical teams. Provides advice on security best practices, and guide the development and infrastructure teams in developing, adopting, and enforcing security and access policies appropriate to the security needs of the business. Provides vulnerability assessment of cloud assets, deliver remediation recommendations, and provides knowledgeable assistance in resolving identified vulnerabilities. Provides subject matter expertise to the Security Engineering and Operations teams, and be hands-on to ensure the safeguarding of design, build, deploy and maintain of products and services in the cloud environment. Improves the accessibility of security through automation, continuous integration pipelines, and other means. This includes detecting and fixing vulnerabilities and identifying attacks. Provides input to the overall architecture, governance model Provide technical oversight, standardization and validation of the effectiveness of security systems. Participates in efforts on researching, designing, and implementing security as components that are standards based, high performing, highly available and secure in delivering the required business functionality. Educates internal and external users of security technologies to continually improve the knowledge and skill-base of the organization on how best to operate and support the technology and security services. Participates in the evaluation and selection of security service products. Supports governance based on best practices and facilitates proper alignment to projects and major initiatives Supports analysis of the current environment to detect critical deficiencies and recommends solutions for improvement. Supports analysis of technology industry and market trends to determine their potential impact on security services architecture. Consults with project teams to identify when it is necessary to modify infrastructure and security services to accommodate project needs. Consults with architecture teams to identify when it is necessary to modify the technical architecture to accommodate infrastructure and security needs. Participates in the documentation of all architecture design and analysis work. Supports, implements and promotes standard configuration and change management, processes and practices. Maintaining Goals Submits reports in a timely manner, ensuring delivery deadlines are met. Promotes the documenting of project progress accurately. Provides input and assistance to other teams regarding projects. Managing Work, Projects, and Policies Manages and implements work and projects as assigned. Generates and provides accurate and timely results in the form of reports, presentations, etc. Analyzes information and evaluates results to choose the best solution and solve problems. Provides timely, accurate, and detailed status reports as requested. Demonstrating and Applying Discipline Knowledge Provides technical expertise and support to persons inside and outside of the department. Demonstrates knowledge of job-relevant issues, products, systems, and processes. Demonstrates knowledge of function-specific procedures. Keeps up-to-date technically and applies new knowledge to job. Uses computers and computer systems (including hardware and software) to enter data and/ or process information. Delivering on the Needs of Key Stakeholders Understands and meets the needs of key stakeholders. Develops specific goals and plans to prioritize, organize, and accomplish work. Determines priorities, schedules, plans and necessary resources to ensure completion of any projects on schedule. Collaborates with internal partners and stakeholders to support business/initiative strategies Communicates concepts in a clear and persuasive manner that is easy to understand. Generates and provides accurate and timely results in the form of reports, presentations, etc. Demonstrates an understanding of business priorities California Applicants Only: The salary range for this position is $96,038 to $209,169 annually. Colorado Applicants Only: The salary range for this position is $96,038 to $190,154 annually. Hawaii Applicants Only: The salary range for this position is $116,205 to $209,169 annually. New York Applicants Only: The salary range for this position is $96,038 to $209,169 annually. Washington, D.C. Applicants Only : The salary range for this position is $105,641 to $190,154 annually. Washington Applicants Only: The salary range for this position is $96,038 to $209,169 annually. In addition to the annual salary, the position will be eligible to receive an annual bonus. Employees will accrue 0.04616 PTO balance for every hour worked and eligible to receive minimum of 7 holidays annually. All locations offer coverage for medical, dental, vision, health care flexible spending account, dependent care flexible spending account, life insurance, disability insurance, accident insurance, adoption expense reimbursements, paid parental leave, educational assistance, 401(k) plan, stock purchase plan, discounts at Marriott properties, commuter benefits, employee assistance plan, and childcare discounts. Benefits are subject to terms and conditions, which may include rules regarding eligibility, enrollment, waiting period, contribution, benefit limits, election changes, benefit exclusions, and others. Marriott HQ is committed to a hybrid work environment that enables associates to Be connected. Headquarters-based positions are considered hybrid, for candidates within a commuting distance to Bethesda, MD; candidates outside of commuting distance to Bethesda, MD will be considered for Remote positions. The application deadline for this position is 77 days after the date of this posting, July 11,2024. Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law. Marriott International is the world's largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed. Be where you can do your best work," begin your purpose, belong to an amazing global" team, and become the best version of you.

Average salary estimate

Estimate provided by employer
$194000 / ANNUAL (est.)
min
max
$94K
$294K

If an employer mentions a salary or salary range on their job, we display it as an "Employer Estimate". If a job has no salary data, Rise displays an estimate if available.

What You Should Know About Marriott is hiring: Sr. Security Engineer - Cloud Security in Lansing, Marriott

Are you passionate about cloud security and eager to make a significant impact in a leading global brand? Marriott is hiring a Sr. Security Engineer - Cloud Security in Lansing, MI, and this could be your chance to step into a pivotal role within our Cloud Security Engineering Team! Here, you’ll be an architect of digital safety, responsible for designing and building robust security capabilities across multiple cloud environments. Your expertise will not only help in automating cloud security controls but will also strengthen our overall cloud security posture. With a strong focus on collaboration, you’ll work closely with infrastructure teams and security operations to identify and mitigate vulnerabilities while adhering to best practices. The ideal candidate will have a Bachelor's in Information Security or a related field, along with 7+ years of progressive IT experience, especially in public cloud security—think AWS and Azure. If scripting and DevSecOps flirt with your fancy, you're in the right place! You’ll help us enhance security protocols, drive automation efforts, and educate fellow employees on safety practices. With your strong communication skills, you’ll articulate complex security concepts to various stakeholders in a way that's easy to grasp. Join us at Marriott, where you'll not only secure our digital assets but also be part of a vibrant, inclusive culture that believes in diversity and the growth of its people. Let’s keep the world of hospitality safe, together!

Frequently Asked Questions (FAQs) for Marriott is hiring: Sr. Security Engineer - Cloud Security in Lansing Role at Marriott
What are the primary responsibilities of the Sr. Security Engineer - Cloud Security at Marriott?

As a Sr. Security Engineer - Cloud Security at Marriott, you'll take on vital responsibilities such as designing security architectures for cloud environments, recommending best practices, conducting vulnerability assessments, and providing training on security technologies. You'll play a key role in enhancing our cloud security posture by developing automation for security controls and collaborating with various teams to ensure compliance with security policies.

Join Rise to see the full answer
What qualifications are required for the Sr. Security Engineer - Cloud Security position at Marriott?

To be considered for the Sr. Security Engineer - Cloud Security role at Marriott, candidates should have a Bachelor's degree in Information Security or a related field, coupled with at least 7 years of progressive IT engineering experience. A minimum of 5 years of experience in Information Security, specifically in cloud security, is essential. Familiarity with scripting languages like Python or JavaScript and an understanding of CI/CD pipelines is also required.

Join Rise to see the full answer
What skills are preferred for the Sr. Security Engineer - Cloud Security role at Marriott?

Preferred skills for the Sr. Security Engineer - Cloud Security position at Marriott include current certifications like CISSP or CISM, as well as hands-on experience with Cloud Security Posture Management (CSPM) tools. Knowledge of DevSecOps practices and Agile methodologies will greatly benefit candidates as they work with our cloud security team. Understanding various security frameworks and technologies will also be a plus.

Join Rise to see the full answer
What type of work environment can the Sr. Security Engineer - Cloud Security expect at Marriott?

The Sr. Security Engineer - Cloud Security position at Marriott offers a hybrid work environment, allowing flexibility while ensuring high-quality collaboration among teams. Marriott supports work-life balance and provides employees with the opportunity to work remotely if they are not commuting to our headquarters in Bethesda, MD.

Join Rise to see the full answer
What benefits does Marriott offer for the Sr. Security Engineer - Cloud Security role?

At Marriott, employees enjoy a generous benefits package that includes medical, dental, and vision coverage, a 401(k) plan with matching contributions, and paid parental leave. Additionally, employees receive PTO, holiday pay, and discounts at Marriott properties around the world. The company is committed to fostering a supportive and equitable workplace, ensuring that all associates can thrive.

Join Rise to see the full answer
Common Interview Questions for Marriott is hiring: Sr. Security Engineer - Cloud Security in Lansing
Can you describe your experience with cloud security frameworks?

In answering this question, detail your hands-on experience with specific cloud security frameworks such as CIS or NIST. Discuss specific projects where you applied these frameworks to assess risks and implement security measures, showcasing your expertise in a variety of cloud environments.

Join Rise to see the full answer
How do you approach vulnerability assessments in cloud environments?

When discussing vulnerability assessments, explain your systematic methodology in identifying, analyzing, and prioritizing vulnerabilities. Mention any specific tools you have used and how you have communicated findings to non-technical stakeholders to ensure remediation actions.

Join Rise to see the full answer
What scripting languages are you proficient in and how have you used them in security automation?

Be prepared to discuss the scripting languages you are familiar with, like Python or JavaScript. Provide examples of automation scripts you have developed to enhance security processes, such as automating the detection of misconfigurations in cloud assets.

Join Rise to see the full answer
Explain a time when you had to advocate for security best practices in a team environment.

In your response, give an example of a situation where you encountered resistance to security practices. Discuss how you effectively communicated the importance of security, the strategies you employed to engage your team, and the positive outcome that resulted.

Join Rise to see the full answer
How do you stay up-to-date with the latest trends and developments in cloud security?

Share the resources you utilize to keep informed about cloud security, such as industry-related publications, webinars, conferences, and professional networks. Emphasize your commitment to continuous learning and how it informs your work.

Join Rise to see the full answer
What is your experience with CI/CD pipelines in the context of security?

Discuss your familiarity with CI/CD and how you have integrated security practices within these workflows. Highlight specific tools or technologies you have used to enhance security without hindering the development process.

Join Rise to see the full answer
Describe a challenging incident involving a security breach or vulnerability you handled.

Use the STAR method to outline the situation, task, action, and result of a security incident you've managed. Focus on how you identified the issue, the steps you took to address it, and the lessons learned from the experience.

Join Rise to see the full answer
How do you ensure compliance with security policies within cloud environments?

Explain your strategic approach to compliance, including establishing security policies, conducting regular audits, and using automation tools to monitor adherence. Give examples of how you've worked with various teams to implement these policies effectively.

Join Rise to see the full answer
What methods do you use to communicate complex security concepts to non-technical audiences?

Detail your strategies for making complex security information easily understandable, such as using analogies, visual aids, or concise explanations. Discuss any experiences you have had leading training sessions or presentations on security topics.

Join Rise to see the full answer
Can you provide an example of how you implemented security improvements in a cloud-based application?

Share a specific project where you identified security risks in a cloud application and the actionable steps you took to enhance its security. Discuss any tools or methodologies you applied and the positive impact it had on the application’s security posture.

Join Rise to see the full answer
Similar Jobs
Photo of the Rise User
Posted 8 days ago
Dental Insurance
Disability Insurance
Flexible Spending Account (FSA)
Health Savings Account (HSA)
Vision Insurance
Performance Bonus
Family Medical Leave
Paid Holidays
Photo of the Rise User
Posted 15 hours ago
Photo of the Rise User
Umbra Hybrid No location specified
Posted 11 days ago
Photo of the Rise User
Greenlight Guru Remote Indianapolis, Indiana, United States
Posted 8 days ago
MATCH
Calculating your matching score...
FUNDING
SENIORITY LEVEL REQUIREMENT
TEAM SIZE
No info
LOCATION
No info
EMPLOYMENT TYPE
Full-time, hybrid
DATE POSTED
December 3, 2024

Subscribe to Rise newsletter

Risa star 🔮 Hi, I'm Risa! Your AI
Career Copilot
Want to see a list of jobs tailored to
you, just ask me below!