Senior Security Engineer, Cloud Data Security

JOB SUMMARY

 

The position is a part of Marriott International Global Information Security team and will work closely with other technology and business units to secure data in a highly diverse and regulated corporate environment. Position will be responsible for the planning, design, deployment, and management of data security in Cloud IaaS, PaaS and SaaS environments. Enable the organization to store, transmit and process sensitive data in these environments, while implementing and monitoring compliance with data governance policies, data security and data privacy procedures.

 

CANDIDATE PROFILE 

 

Education and Experience 

 

Required: 

• Bachelor’s degree in Computer Sciences or related field or equivalent experience/certification. 

• 7+ years of information technology experience, with 3+ years of experience in information security 

• 2+ years’ experience discovering, cataloging, and protecting sensitive data, including monitoring and preventing data exfiltration.  

• 1+ years’ hands-on experience working with several of these technologies: Data Loss Prevention (DLP), Data Discovery, Cloud Security Access Broker (CASB), Data Rights Management (DRM), SSL certificate and Encryption Keys. 

 

Preferred: 

• Current information security certification, including Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP) 

• Hands-on experience with any CASB and / or DLP product or service highly preferred. 

• Experience with Public Cloud environments in data governance or data compliance standards.  

• Familiarity with security frameworks and regulatory requirements CSA, NIST, PCI DSS, GDPR, CCPA, etc. 

• Working knowledge of common IT technologies such as Windows server, Linux / Unix, Databases, Active Directory / LDAP, end-user devices.  

• Familiarity with change management and deployment processes in large organizations.  

• Demonstrated experiences identifying and assessing cloud security vulnerabilities and risks 

• Proven ability to effectively prioritize and execute tasks, manage competing priorities.  

• Excellent communication, analytical and planning skills to manage implementation of data security controls and practices. 

 

 CORE WORK ACTIVITIES 

• Running operations for cloud security systems to protect sensitive data on managed networks. 

• Conducting cloud security analysis of Cloud platforms/environments. 

• Performing onboarding of data security services via setup, log processing setup, policy configuration, and agent deployment. 

• Assisting with configuration and delivery of CASB reports. 

• Providing remote technical support for CASB services and resolve service-related issues through research and troubleshooting. 

• Troubleshooting tickets assigned and drive towards positive resolution.  

• Troubleshooting system level problems in a multi-vendor, multi-protocol network environment. 

• Ensuring technology issues are addressed as per the priority and escalated as necessary. 

• Documenting all technical issues, analysis, communication, and resolution. 

• Performing issue resolution for cloud security events and incidents. 

• Developing and managing Cloud-specific security policies, standards and procedures e.g., CASB tenant management, proxy server management, firewall management, SSL/IPSec, security incident and event management (SIEM), data protection (DLP, encryption), user account management (SSO, SAML), password/key management. 

• Executing on Cloud security engagements during different phases of the lifecycle – design, implementation and operations. 

• Implementation of industry leading practices around cyber risks and Cloud  

• Performing continuous improvement processes for all SOPs and service documentation. 

• Technical leadership in the areas of cloud data security. 

 

Maintaining Goals 

• Submits reports in a timely manner, ensuring delivery deadlines are met. 

• Promotes the documenting of project progress accurately. 

• Provides input and assistance to other teams regarding projects. 

 Man