Senior Security Engineer, Cloud Data Security

JOB SUMMARY

The position is a part of Marriott International Global Information Security team and will work closely with other technology and business units to secure data in a highly diverse and regulated corporate environment. Position will be responsible for the planning design deployment and management of data security in Cloud IaaS PaaS and SaaS environments. Enable the organization to store transmit and process sensitive data in these environments while implementing and monitoring compliance with data governance policies data security and data privacy procedures.

CANDIDATE PROFILE

Education and Experience

Required:

• Bachelors degree in Computer Sciences or related field or equivalent experience/certification.

• 7 years of information technology experience with 3 years of experience in information security

• 2 years experience discovering cataloging and protecting sensitive data including monitoring and preventing data exfiltration.

• 1 years hands-on experience working with several of these technologies: Data Loss Prevention (DLP) Data Discovery Cloud Security Access Broker (CASB) Data Rights Management (DRM) SSL certificate and Encryption Keys.

Preferred:

• Current information security certification including Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP)

• Hands-on experience with any CASB and / or DLP product or service highly preferred.

• Experience with Public Cloud environments in data governance or data compliance standards.

• Familiarity with security frameworks and regulatory requirements CSA NIST PCI DSS GDPR CCPA etc.

• Working knowledge of common IT technologies such as Windows server Linux / Unix Databases Active Directory / LDAP end-user devices.

• Familiarity with change management and deployment processes in large organizations.

• Demonstrated experiences identifying and assessing cloud security vulnerabilities and risks

• Proven ability to effectively prioritize and execute tasks manage competing priorities.

• Excellent communication analytical and planning skills to manage implementation of data security controls and practices.

CORE WORK ACTIVITIES

• Running operations for cloud security systems to protect sensitive data on managed networks.

• Conducting cloud security analysis of Cloud platforms/environments.

• Performing onboarding of data security services via setup log processing setup policy configuration and agent deployment.

• Assisting with configuration and delivery of CASB reports.

• Providing remote technical support for CASB services and resolve service-related issues through research and troubleshooting.

• Troubleshooting tickets assigned and drive towards positive resolution.

• Troubleshooting system level problems in a multi-vendor multi-protocol network environment.

• Ensuring technology issues are addressed as per the priority and escalated as necessary.

• Documenting all technical issues analysis communication and resolution.

• Performing issue resolution for cloud security events and incidents.

• Developing and managing Cloud-specific security policies standards and procedures e.g. CASB tenant management proxy server management firewall management SSL/IPSec security incident and event management (SIEM) data protection (DLP encryption) user account management (SSO SAML) password/key management.

• Executing on Cloud security engagements during different phases of the lifecycle design implementation and operations.

• Implementation of industry leading practices around cyber risks and Cloud

• Performing continuous improvement processes for all SOPs and service documentation.

• Technical leadership in the areas of cloud data security.

Maintaining Goals

• Submits reports in a timely manner ensuring delivery deadlines are met.

• Promotes the documenting of project progress accurately.

• Provides input and assistance to other teams regarding projects.

Managing Work Projects and Policies

• Manages and implements work and projects as assigned.

• Generates and provides accurate and timely results in the form of reports presentations etc.

• Analyzes information and evaluates results to choose the best solution and solve problems.

• Provides timely accurate and detailed status reports as requested.

Demonstrating and Applying Discipline Knowledge

• Provides technical expertise and support to persons inside and outside of the department.

• Demonstrates knowledge of job-relevant issues products systems and processes.

• Demonstrates knowledge of function-specific procedures.

• Keeps up-to-date technically and applies new knowledge to job.

• Uses computers and computer systems (including hardware and software) to enter data and/ or process information.

Delivering on the Needs of Key Stakeholders