Senior Security Engineer, Cloud Data Security

Marriott•Bethesda, MD

4d•Hybrid

About The Position

The position is a part of Marriott International Global Information Security team and will work closely with other technology and business units to secure data in a highly diverse and regulated corporate environment. Position will be responsible for the planning, design, deployment, and management of data security in Cloud IaaS, PaaS and SaaS environments. Enable the organization to store, transmit and process sensitive data in these environments, while implementing and monitoring compliance with data governance policies, data security and data privacy procedures.

Requirements

Bachelor’s degree in Computer Sciences or related field or equivalent experience/certification.
7+ years of information technology experience, with 3+ years of experience in information security
2+ years’ experience discovering, cataloging, and protecting sensitive data, including monitoring and preventing data exfiltration.
1+ years’ hands-on experience working with several of these technologies: Data Loss Prevention (DLP), Data Discovery, Cloud Security Access Broker (CASB), Data Rights Management (DRM), SSL certificate and Encryption Keys.

Nice To Haves

Current information security certification, including Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP)
Hands-on experience with any CASB and / or DLP product or service highly preferred.
Experience with Public Cloud environments in data governance or data compliance standards.
Familiarity with security frameworks and regulatory requirements CSA, NIST, PCI DSS, GDPR, CCPA, etc.
Working knowledge of common IT technologies such as Windows server, Linux / Unix, Databases, Active Directory / LDAP, end-user devices.
Familiarity with change management and deployment processes in large organizations.
Demonstrated experiences identifying and assessing cloud security vulnerabilities and risks
Proven ability to effectively prioritize and execute tasks, manage competing priorities.
Excellent communication, analytical and planning skills to manage implementation of data security controls and practices.

Responsibilities

Running operations for cloud security systems to protect sensitive data on managed networks.
Conducting cloud security analysis of Cloud platforms/environments.
Performing onboarding of data security services via setup, log processing setup, policy configuration, and agent deployment.
Assisting with configuration and delivery of CASB reports.
Providing remote technical support for CASB services and resolve service-related issues through research and troubleshooting.
Troubleshooting tickets assigned and drive towards positive resolution.
Troubleshooting system level problems in a multi-vendor, multi-protocol network environment.
Ensuring technology issues are addressed as per the priority and escalated as necessary.
Documenting all technical issues, analysis, communication, and resolution.
Performing issue resolution for cloud security events and incidents.
Developing and managing Cloud-specific security policies, standards and procedures e.g., CASB tenant management, proxy server management, firewall management, SSL/IPSec, security incident and event management (SIEM), data protection (DLP, encryption), user account management (SSO, SAML), password/key management.
Executing on Cloud security engagements during different phases of the lifecycle – design, implementation and operations.
Implementation of industry leading practices around cyber risks and Cloud
Performing continuous improvement processes for all SOPs and service documentation.
Technical leadership in the areas of cloud data security.
Submits reports in a timely manner, ensuring delivery deadlines are met.
Promotes the documenting of project progress accurately.
Provides input and assistance to other teams regarding projects.
Manages and implements work and projects as assigned.
Generates and provides accurate and timely results in the form of reports, presentations, etc.
Analyzes information and evaluates results to choose the best solution and solve problems.
Provides timely, accurate, and detailed status reports as requested.
Provides technical expertise and support to persons inside and outside of the department.
Demonstrates knowledge of job-relevant issues, products, systems, and processes.
Demonstrates knowledge of function-specific procedures.
Keeps up-to-date technically and applies new knowledge to job.
Uses computers and computer systems (including hardware and software) to enter data and/or process information.
Understands and meets the needs of key stakeholders.
Develops specific goals and plans to prioritize, organize, and accomplish work.
Determines priorities, schedules, plans and necessary resources to ensure completion of any projects on schedule.
Collaborates with internal partners and stakeholders to support business/initiative strategies
Communicates concepts in a clear and persuasive manner that is easy to understand.
Demonstrates an understanding of business priorities
Provides information to supervisors and co-workers by telephone, in written form, e-mail, or in person in a timely manner.
Demonstrates self confidence, energy and enthusiasm.
Informs and/or updates leaders on relevant information in a timely manner.
Manages time effectively and conducts activities in an organized manner.
Presents ideas, expectations and information in a concise, organized manner.
Uses problem solving methodology for decision making and follow up.
Performs other reasonable duties as assigned by manager.