Sr. Manager – Vulnerability Management, Solutions Support

The Marriott Enterprise Vulnerability Management group oversees attack surface reduction across a wide range of corporate, cloud, data center, and property locations. Our team members are passionate about protecting our data, systems, and service delivery functions across the globe against a broad range of adversaries.

The Senior Manager, Vulnerability Management, Solutions Support functions as an individual technical expert as part of a team that maintains Marriott vulnerability management solutions, responsible for implementing, managing, and optimizing vulnerability management tools within the Marriott environment. This role ensures the successful operation of vulnerability assessment and reporting activities by monitoring the operations of solutions, identifying issues that could lead to operational disruptions, performing regular and ad hoc maintenance, and troubleshooting and resolving issues. It requires participating in designing, building, and maintaining integrations between various Marriott and third party applications. Maintaining operational and technical documentation related to the operational lifecycle of supported solutions is required, as is identifying improvements to ensure the inclusion of appropriate quality of delivery and compliance with security policy and regulations. This task area requires in-depth technical knowledge in vulnerability management solutions, computer network theory, IT standards and protocols, operating system management, and application programming interfaces, as well as an understanding of the lifecycle of cyberspace threats, attack vectors, and methods of exploitation.

CANDIDATE PROFILE

Required Education and Experience:

•   Bachelor’s degree in a field relevant to information security or the equivalent combination of experience and certifications
•   7 years of progressive information security experience that includes knowledge of general security concepts such as defense in-depth and risk-based security management. 
•   5 years of experience with vulnerability management concepts and methodologies including: 
o   3 years of experience is required with vulnerability assessment and reporting with an comprehensive understanding of vulnerability management methodologies and procedures, threat assessment, and remediation management
o   1 or more years of implementing, managing and maintaining Kenna Security vulnerability reporting, including designing data structures, building asset group hierarchies, connector management, and administering and maintaining system operations.

Preferred Experience:
•   Experience with enterprise vulnerability assessment tools, such as Tenable.io or Tenable Security Center, and experience with vulnerability workflow solutions, such as ServiceNow 
•   Working knowledge of interacting with API data sources
•   Working knowledge of Python with experience in automation, API access, and data management
•   Knowledge of SEIM and SOAR solutions and their role in enterprise security solutions infrastructure
•   Experience managing medium to large projects involving multiple teams in a technical lead role
•   Familiarity with attack and exploitation techniques involving operating systems, applications, and devices commonly seen in an enterprise environment

Expected Contributions
•   Ensure the successful operation of vulnerability management reporting solutions, including Kenna security
•   Assist in the successful operation of vulnerability management assessment solutions, including Tenable.io
•   Develop and maintain integrations between vulnerability assessment solutions, vulnerability reporting solutions, and related solutions as needed
•   Assist with developing reporting and providing analysis around enterprise vulnerability data
•   Ensure that organization core values and culture are embedded into all aspects of the position’s work.
•   Work with key stakeholders throughout the organization to build relationships based on an understanding of stakeholder needs and actions consistent with the company’s service standards
•   Provide reporting and analysis to demonstrate program effectiveness, drive improvements in maturity and stakeholder awareness, and develop strategic improvements
•   Guide and develop team members in technical skills
•   Use organizational assessment, reporting, workflow, and communications solutions to fulfill responsibilities of the role and of the team
•   Work with third-party providers to assess, report, remediate, and measure the effectiveness of team objectives


Maintaining Goals
•   Submits reports in a timely manner, ensuring delivery deadlines are met.
•   Promotes the documenting of project progress accurately.
•   Provides input and assistance to