Sr. Cloud Security Engineer

Corporate
Bethesda, MD Full Time
POSTED ON 3/26/2023 CLOSED ON 5/31/2023

What are the responsibilities and job description for the Sr. Cloud Security Engineer position at Corporate?

Job Number 23053678
Job Category Information Technology
Location Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States VIEW ON MAP
Schedule Full-Time
Located Remotely? Y
Relocation? N
Position Type Management


JOB SUMMARY

 

This position will be part of the Cloud Security Engineering Team within the Global Information Security organization.  The security engineer will be responsible for designing and building security capabilities in a multi-cloud environment and building automation for cloud security controls to enhance the cloud security posture. This role will perform as a key engineering and supporting resource for the cloud security engineering program.

 

CANDIDATE PROFILE

 

Education and Experience

 

Required:

  • Bachelor’s degree in Information Security or related field or equivalent experience/certification
  • 7 years progressive Information Technology engineering experience
  • 5 years of Information Security experience in security engineering that includes
    • 3 years in public cloud security (e.g., AWS, Azure)
    • 1 years’ experience with scripting languages (e.g., Python, JavaScript)
    • 1 years’ experience with CI/CD pipelines or security tooling for cloud-native deployments.

Preferred Skills and Experience:

  • Current information security certification, including Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP), AWS Professional Architect, AWS Security Specialty.
  • Experience working with Agile and Scrum methodologies
  • Experience and knowledge working in DevSecOps, CI/CD, Infrastructure as Code concepts and technologies
  • Knowledge of Cloud Security Posture Management (CSPM) tools
  • Knowledge of securing technologies such as, but not limited to; Cloud-Native Services (e.g., VPCs, S3 buckets), Container Platforms (e.g., Docker, Kubernetes), APIs, Identity and Access Management, Serverless (e.g., Lambda, Azure Functions)

Required Attributes

  • Excellent communication skills and problem-solving ability.
  • Demonstrated ability to work independently and with others.
  • Ability to manage the details and compliance with standards and expectations.
  • Technical infrastructure operations, administration, or engineering background
  • Ability to articulate complex technical ideas in easy-to-understand business terms

CORE WORK ACTIVITIES

 

  • Provides Cloud Security Governance and Optimization services to technical teams. Provides advice on security best practices, and guide the development and infrastructure teams in developing, adopting, and enforcing security and access policies appropriate to the security needs of the business.
  • Provides vulnerability assessment of cloud assets, deliver remediation recommendations, and provides knowledgeable assistance in resolving identified vulnerabilities.
  • Provides subject matter expertise to the Security Engineering and Operations teams, and be hands-on to ensure the safeguarding of design, build, deploy and maintain of products and services in the cloud environment. 
  • Improves the accessibility of security through automation, continuous integration pipelines, and other means. This includes detecting and fixing vulnerabilities and identifying attacks.
  • Provides input to the overall architecture, governance model
  • Provide technical oversight, standardization and validation of the effectiveness of security systems. 
  • Participates in efforts on researching, designing, and implementing security as components that are standards based, high performing, highly available and secure in delivering the required business functionality. 
  • Educates internal and external users of security technologies to continually improve the knowledge and skill-base of the organization on how best to operate and support the technology and security services.
  • Participates in the evaluation and selection of security service products.
  • Supports governance based on best practices and facilitates proper alignment to projects and major initiatives
  • Supports analysis of the current environment to detect critical deficiencies and recommends solutions for improvement.
  • Supports analysis of technology industry and market trends to determine their potential impact on security services architecture.
  • Consults with project teams to identify when it is necessary to modify infrastructure and security services to accommodate project needs.
  • Consults with architecture teams to identify when it is necessary to modify the technical architecture to accommodate infrastructure and security needs.
  • Participates in the documentation of all architecture design and analysis work.
  • Supports, implements and promotes standard configuration and change management, processes and practices.

 

Maintaining Goals

  • Submits reports in a timely manner, ensuring delivery deadlines are met.
  • Promotes the documenting of project progress accurately.
  • Provides input and assistance to other teams regarding projects.

 

Managing Work, Projects, and Policies

  • Manages and implements work and projects as assigned.
  • Generates and provides accurate and timely results in the form of reports, presentations, etc.
  • Analyzes information and evaluates results to choose the best solution and solve problems.
  • Provides timely, accurate, and detailed status reports as requested.

 

Demonstrating and Applying Discipline Knowledge

  • Provides technical expertise and support to persons inside and outside of the department.
  • Demonstrates knowledge of job-relevant issues, products, systems, and processes.
  • Demonstrates knowledge of function-specific procedures.
  • Keeps up-to-date technically and applies new knowledge to job.
  • Uses computers and computer systems (including hardware and software) to enter data and/ or process information.

 

Delivering on the Needs of Key Stakeholders

  • Understands and meets the needs of key stakeholders.
  • Develops specific goals and plans to prioritize, organize, and accomplish work.
  • Determines priorities, schedules, plans and necessary resources to ensure completion of any projects on schedule.
  • Collaborates with internal partners and stakeholders to support business/initiative strategies
  • Communicates concepts in a clear and persuasive manner that is easy to understand.
  • Generates and provides accurate and timely results in the form of reports, presentations, etc.
  • Demonstrates an understanding of business priorities
 

 

Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law. Marriott International considers for employment qualified applicants with criminal histories consistent with applicable federal, state and local law.
 



Marriott International is the world’s largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed.  We believe a great career is a journey of discovery and exploration.  So, we ask, where will your journey take you?

Sr. Cloud Cyber Security Engineer
HunaTek -
Arlington, VA
Sr Cloud Security Engineer - Remote
UnitedHealth Group -
Reston, VA
FLEX Sr Cloud Security Engineer
Marriott International -
Bethesda, MD

For Employer
Looking for Real-time Job Posting Salary Data?
Keep a pulse on the job market with advanced job matching technology.
If your compensation planning software is too rigid to deploy winning incentive strategies, it’s time to find an adaptable solution. Compensation Planning
Enhance your organization's compensation strategy with salary data sets that HR and team managers can use to pay your staff right. Surveys & Data Sets

Sign up to receive alerts about other jobs with skills like those required for the Sr. Cloud Security Engineer.

Click the checkbox next to the jobs that you are interested in.

  • Disaster Recovery Planning Skill

    • Income Estimation: $112,194 - $138,488
    • Income Estimation: $124,693 - $157,449
  • Cloud Security Skill

    • Income Estimation: $124,693 - $157,449
    • Income Estimation: $149,032 - $188,459
This job has expired.
View Core, Job Family, and Industry Job Skills and Competency Data for more than 15,000 Job Titles Skills Library

Not the job you're looking for? Here are some other Sr. Cloud Security Engineer jobs in the Bethesda, MD area that may be a better fit.

Sr. Security Engineer - Cloud Security

Marriott International, Bethesda, MD

Sr. Cloud Cyber Security Engineer

OneZero Solutions, Alexandria, VA