FLEX Application Security Analyst - Software Vulnerability

The Application Security Analyst will assist in monitoring and assessing the security of web applications under the guidance of the Senior Application Security Manager. This role involves supporting the enforcement of security standards participating in application security risk assessments and aiding in the documentation and remediation tracking processes. The role is designed to provide hands-on experience in application security within a corporate environment with a strong focus on learning and development.

CANDIDATE PROFILE

Education and Experience

Required:

• Bachelors degree in Cybersecurity Computer Science or related field or equivalent experience/certification
• 2 years of information technology experience

Preferred:

• Strong understanding of basic programming concepts and principals (interpretation compilation loops control structures data types)
• Basic understanding of security testing methodologies tools and approaches
• Basic understanding of OWASP Top 10 and its implications to software security
• Basic understanding of common software development practices and procedures (version control testing patching CI/CD)
• Basic understanding of the Software Development Lifecycle (SDLC).
• Proficiency in Microsoft Word PowerPoint and Excel
• Excellent communication skills.
• Strong interest in cybersecurity and a willingness to learn on the job.
• Current information security certification including: GSEC GSIF CySA Security CEH GRISC CISA
• Experience in software development (front end or backend developer)
• Experience with software security testing
• Experience working in a regulated environment (e.g. finance healthcare government).
• Experience with conducting risk assessments and developing risk mitigation strategies.
• Solid understanding of GitHub operations (e.g. cloning branching merging pull requests issues)

CORE WORK ACTIVITIES

Application Security Risk Management & Tracking

• Assist in monitoring compliance with security standards and regulatory requirements related to web application security.
• Assist in tracking and documenting risk mitigation efforts ensuring timely resolution of identified issues.
• Support the Senior Manager in tracking and documenting application security risks and remediation efforts.
• Learn and assist in the use of security tools such as GitHub Advanced Security for basic operations (e.g. Tracking & Reporting Issues).
• Work closely with development teams to integrate risk management practices into the software development lifecycle.
• Gain exposure to security frameworks and standards such as OWASP under the mentorship of the Senior Manager.
• Contribute to the development and maintenance of compliance documentation including policies procedures and control frameworks.
• Aid in the use of project management tools like JIRA to track tasks and projects.
• Work closely with the Application Security Testing team to understand findings their relevance and potential impact.
• Conduct basic vulnerability research under the guidance of the Senior Manager.
• File tickets with development and security teams monitor ticket flow volume and remediation activities.
• Participate in audits and assessments to evaluate compliance with internal policies and external regulations.
• Review Security Researcher findings through the company Bug Bounty program and pursue remediation when issues are validated.

Managing Work Projects and Policies

• Coordinates and implements work and projects as assigned.
• Complies with Federal and State laws applying to procedures.
• Generates and provides accurate and timely results in the form of reports presentations etc.
• Analyzes information and evaluates results to choose the best solution and solve problems.
• Manages the flow of questions and directs questions.

Supporting Operations

• Works with team to put sustainable work processes and systems in place that support the execution of the strategy.
• Establishes and maintains complete and up-to-date information to ensure accurate reporting.
• Represents team in resolving situations.
• Maintains and manages inventory and service operations.

Additional Responsibilities

• Informs updates and provides information to supervisors co-workers and subordinates by telephone in written form e-mail or in person in a timely manner.
• Attends and participates in all relevant meetings.
• Presents ideas expectations and information in a concise organized manner.
• Uses problem solving methodology for decision making and follow up.
• Maintains positive working relations with internal customers and department managers.
• Manages time effectively and conducts activities in an organized manner.
• Performs other reasonable duties as assigned by manager.

The pay range for this position is $33.94 to $53.46 per hour.

FLEX opportunities offer coverage for medical dental vision health care flexible spending account dependent care flexible spending account life insurance disability insurance accident insurance adoption expense reimbursements paid parental leave 401(k) plan stock purchase plan discounts at Marriott properties commuter benefits employee assistance plan and childcare discounts. Benefits are subject to terms and conditions which may include rules regarding eligibility enrollment waiting period contribution benefit limits election changes benefit exclusions and others.

Marriott HQ is committed to a hybrid work environment that enables associates to Be connected. Headquarters-based positions are considered hybrid for candidates within a commuting distance to Bethesda MD.

Marriott International is an equal opportunity believe in hiring a diverse workforce and sustaining an inclusive people-first are committed to non-discrimination onanyprotectedbasis such as disability and veteran status or any other basis covered under applicable law.