Dir-Information Security - Cyber Analytics

JOB SUMMARY

 

Marriott is seeking a Cybersecurity Analytics Director to lead a function within Cybersecurity Operations focused on developing advanced threat detection capabilities. The successful candidate will leverage their extensive background in cybersecurity and threat detection methodologies, defining team strategy, and guiding teams of specialists to develop innovative threat detection solutions using technologies such as SIEM, UEBA, and similar logging and monitoring tools.  This role will also collaborate with teams across the enterprise to understand net-new or existing applications, systems, and services, identify monitoring gaps, and manage implementation of remedial monitoring, ultimately enhancing the organization’s overall security posture.

 

CANDIDATE PROFILE 

Required Education and Experience:

• Bachelor’s degree in computer sciences, related field or equivalent experience and certification
• 8+ years of progressive and collective experience in cybersecurity roles
• 4+ years of:
  • Experience managing teams in a cybersecurity or IT environment
  • Experience with cyber threat detection strategy development and implementation of effective cyber threat detection methodologies

 

 

Preferred:

• Current information security management certification such as:
  • Certified Information Systems Security Professional (CISSP)
  • Certified Information Security Manager (CISM)
• Other current security and IT certifications such as: GIAC Security Essentials Certification (GSEC), SANS GIAC Incident Handler Certification (GCIH), IT Technical Library (ITIL 4) certification
• Familiarity with industry-standard security frameworks such as ISO 27001, NIST Cybersecurity Framework, CIS Critical Security Controls, MITRE ATT&CK
• Experience working with incident response, threat intelligence, and security orchestration automation and response (SOAR), and other IT and security functions to facilitate threat detection and incident response
• Strong project management skills, including the ability to manage budgets, timelines, and resources effectively
• Experience supporting investigations using formal chain-of-custody methods, forensic tools and best practices
• Working knowledge of IDS/IPS systems, EDR solutions, network infrastructure and protocols, cloud security, IAM systems, virtualization and databases

 

Leadership attributes:

• Strong negotiating, influencing and problem resolution skills
• Proven ability to effectively prioritize and execute tasks in a high-pressure environment
• Knowledge of business environment, service requirements and hospitality culture
• Strong verbal and written communication skills with the ability to articulate complex technical ideas in easy-to-understand business terms
• Excellent analytical skills and tools experience
• Ability to apply industry investigative techniques

 

CORE WORK ACTIVITIES                                                                                 

 

• Define Strategy - Develop and implement strategies for threat detection analytics and supporting objectives with alignment to overall organizational strategy and goals.
• Team Leadership – Lead a team of SIEM and UEBA cyber analytics professionals, overseeing the development of high efficacy threat detections for business applications and services.  Work to foster a culture of continuous improvement and drive engagement by encouraging team members to share ideas, learn from each other, and strive for excellence in their work.
• Drive Change - Identify gaps and remediation opertunities in threat detection tools, detection methods for improvement.  Socialize issues with stakeholders and drive changes to improve organizational security posture.
• Collaboration -  Work with key stakeholders, such as project managers, security analysts, and other leaders to ensure that SIEM and UEBA threat detection analytics align with organizational goals and objectives. Partnerships of particular importance will include: Cyber Incident Response Team (CIRT), Threat Intelligence TI), SIEM engineering, SOAR development team, and Security Engineering, Security Architecture, GRC/Risk Management,  and GRC/Compliance.
• Industry Research, Analysis, Recommendations - Continuously monitor industry trends, emerging technologies, and best practices to identify opportunities to improve the company's cyber threat detection capabilities and overall cybersecurity strategy.
• Reporting - Provide regular progress updates and reports to leadership, highlighting key achievements, challenges, and areas for improvement withi