Associate Engineer, SOAR Information Security

Marriott International•Bethesda, MD

34d

About The Position

Marriott wishes to add an Associate Engineer to Cyber Analytics and Automation team for our Security Orchestration and Automated Response (SOAR) Platform.â¯ In this role you will be responsible for gathering requirements, developing, and maintaining security automations leveraging a SOAR platform and agentic AI solutions.â¯ You will also use process automation to develop advanced automation playbooks for our Cybersecurity Incident Response Team (CIRT), Vulnerability Management (VM), Insider Threat, Threat Intel, and Detection Engineering teams.

Requirements

Bachelor's degree in Computer Sciences or related field or equivalent experience/certification
Prior experience in technology engineering experience including:
Proven experience with Python scripting
Proven experience working with Splunk ES
Proven experience in working with the Unix/Linux command line
Familiarity with common enterprise infrastructure systems, services and concepts pertaining to: general networking, next-gen firewalls, endpoint protection, IDS, IPS, vulnerability management, Linux and Windows OS, databases, logging platforms, and SDLC concepts
Experience with Microsoft Visio or other visual diagramming software
Ability to identify reconcilable process or workflow inefficiencies and propose more efficient solutions that employ the use of automation
Strong written and verbal communication skills

Nice To Haves

Demonstrated experience collaborating with cross-functional cybersecurity teams to understand business and technical processes, and collection of actionable requirements that inform the design and development of SOAR automation solutions
Hands on experience with a SOAR or other automation platform
Hands on experience using and deploying agentic AI solutions in a professional setting
Familiarity with AWS cloud services
Familiarity (or greater) skill level in SQL
Background in IT security/systems administration or IT security/systems engineering
Working knowledge of MITRE ATT&CK, or similar incident response frameworks
An understanding of core Agile principles
Detail oriented work style

Responsibilities

Support development and maintenance of automation playbooks, dashboards, reports, and metrics for Cybersecurity Operations and partners.
Assist with monitoring and optimizing SOAR platform performance.
Collaborate as needed to ensure SOAR implementation complies with security policies.
Support evaluation and selection of security products for departmental needs as directed.
Use capability modeling to help align automation implementation with business strategy
Provide tier-3 and after-hours support in on-call rotation for SOAR-related escalations.
Works closely with Security Architecture, Security Engineering, Threat Intelligence and the Cyber Incident Response Team to help develop solutions to address emerging threats, support requested service enhancements, and to support the development of new threat detection use cases.
Coordinates with service providers on infrastructure management and maintenance operations.
Collaborate with Security Engineers and Architects to keep pace with the evolution of corporate infrastructure and applications and share that knowledge with peers as appropriate.
Attend SCRUM and prioritization meetings to review and update deliverables.
Maintain documentation for SOAR service management and SOPs pursuant to security and privacy policy.
Support ongoing evaluation of the effectiveness of the SOAR and related platform and requisite services to identify operational improvements, reduce costs, increase performance and automate where possible.
Help evaluate automations, and other activities to identify opportunities to optimize and reduce costs.
Contribute to the development and refinement of detection engineering standards, workflows, and best practices.
Following best practices pertaining to lifecycle management.