Director Endpoint Security Engineering

JOB SUMMARY

Marriott’s Security Engineering team is seeking an experienced technical leader for endpoint security engineering, leading a premier engineering team that develops, operates, and supports heterogeneous security infrastructure and controls on a global scale. This role will be responsible to build and lead the Cyber Security Engineering program. Driving critical security initiatives with our business partners and liaising with key infrastructure teams to develop tactical and strategic security solutions and roadmaps, while also running the operational functions across the technical team.

CANDIDATE PROFILE 

Education and Experience

Required:

Bachelor’s degree in Computer Sciences or related field or equivalent experience/certification 8+ years of information security experience, with 5+ years of experience and hands-on expertise in endpoint security solutions in a large enterprise. At least 2 years of experience in endpoint security including - Endpoint Detection and Response (EDR), host-based IDS/IPS, component hardening At least 1 year of experience as a supervisory or manager of others and leading complex projects cross-functionally and globally

Preferred:

Excellent understanding of current Cyber threat landscape Strong operational knowledge of Windows, Linux, Mac Operating Systems Excellent understanding of Incident Response and Cyber Defense operations Experience delivering large scale, highly available security solutions Current information security certifications - Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) Experience working with Agile and Scrum methodologies Capable of being hands-on and providing technical expertise. Experience participating in and coordinating activities for security incident response. Support routine regulatory and compliance audit initiatives. Good understanding and experience working with frameworks - NIST, ISO27001, PCI DSS, CSA. Knowledge of global regulatory standards to include GDPR, CCPA etc. Strong analytical and problem-solving skills Proven ability to effectively prioritize and drive multiple work streams in a high-pressure environment Adept at conducting research into process and governance best practices, models, and methodologies Excellent verbal and written communication skills 

CORE RESPONSIBILITIES

Lead a team of endpoint security engineering professionals responsible for planning, design, operations, implementation, attack mitigation and ongoing support of endpoint security systems. Provide technical deep understanding of security systems at different layers - network , cloud, endpoint, advance malware defense, data security etc.  Conduct Architecture and Design review to provide guidance and Quality assurance around best practices and frameworks. Deep understanding of endpoint security technologies, provide security protection on-premise and in public cloud and guide/mentor the security experts on this front. Provide recommendations to management team to increase effectiveness of organization and technology solutions. Scales security program through the application of automation, software, tools, training and initiatives. Manages a large portfolio of security program deliverables, and track and report on budgets, timelines, dependencies, and conflicts. Drive critical initiatives in support of risk reduction and maintain security standards and guidelines. Conducts assessments of threats and vulnerabilities, determines deviations from acceptable configurations or enterprise or local policy, assesses the level of risk, and develops and/or recommends and operationalizes appropriate mitigation countermeasures. Applies knowledge of priorities to define an entity’s direction, determine how to allocate resources, and identify programs or infrastructure that are required to achieve desired goals within domain of interest. Develops policy or advocates for changes in policy that will support new initiatives or required changes/enhancements. Oversees the information assurance (IA) program of an information system. Develop technical documentation, including standards and standard operating procedures Report on key compliance and operational metrics on infrastructure security Conduct routine security audits of all supported security systems to ensure compliance with established standards, policies, procedures and requirements Collaborate with other teams to solve security problems with minimal disruption to other business functions. Manage the investigation and troubleshooting of security issues to determine root cause and drive solutions. Continuous improvement of policies and procedures and technology.

Managing Work, Projects, and Policies 

Coordinates and implements work and projects as assigned. Generates and provides accurate and timely results in the form of reports, presentations, etc. Analyzes information and evaluates results to choose the best solution and solve problems. Develops specific goals and plans to prioritize, organize, and accomplish work. Sets and tracks goal progress for self and others. Monitors the work of others to ensure it is completed on time and meets expectations. Provides direction and assistance to other organizational units’ policies and procedures, and efficient control and utilization of resources.

Leading Team

Creates a team environment that encourages accountability, high standards, and innovation. Leads specific team while assisting with meeting or exceeding department goals. Makes sure others understand performance expectations. Ensures that goals are being translated to the team as they relate to tracking and productivity. Creates and nurtures an environment that emphasizes motivation, empowerment, teamwork, continuous improvement and a passion for providing service. Understands employee and develops plans to address need areas and expand on the strengths. Provides the team with the capabilities needed to meet or exceed expectations. Leads by example demonstrating self-confidence, energy and enthusiasm.

Conducting Human Resources Activities 

Acts proactively when dealing with employee concerns. Extends professionalism and courtesy to employees at all times. Communicates/updates all goals and results with employees. Meets semiannually with staff on a one-to-one basis. Establishes and maintains open, collaborative relationships with employees. Solicits employee feedback. Interviews job candidates and assists in making hiring decisions. Receives hiring recommendations from team supervisors. Ensures orientations for new team members are thorough and completed in a timely fashion. Observes behaviors of employees and provides feedback to individuals.

Additional Responsibilities 

Provides information to supervisors, co-workers, and subordinates by telephone, in written form, e-mail, or in person in a timely manner. Manages group or interpersonal conflict. Informs and/or updates executives, peers, and subordinates on relevant information in a timely manner. Manages time effectively and conducts activities in an organized manner. Presents ideas, expectations and information in a concise, organized manner. Uses problem solving methodology for decision making and follow up. Performs other reasonable duties as assigned by manager. California Applicants Only: The salary range for this position is $110,550 to $245,238 annually. Colorado Applicants Only: The salary range for this position is $110,550 to $222,943 annually. Hawaii Applicants Only: The salary range for this position is $133,766 to $245,238 annually. New York Applicants Only: The salary range for this position is $110,550 to $245,238 annually. Washington Applicants Only: The salary range for this position is $110,550 to $245,238 annually. In addition to the annual salary, the position will be eligible to receive an annual bonus and restricted stock units/stock grants. Employees will accrue 0.04616 PTO balance for every hour worked and eligible to receive minimum of 7 holidays annually. All locations offer coverage for medical, dental, vision, health care flexible spending account, dependent care flexible spending account, life insurance, disability insurance, accident insurance, adoption expense reimbursements, paid parental leave, educational assistance, 401(k) plan, stock purchase plan, discounts at Marriott properties, commuter benefits, employee assistance plan, and childcare discounts. Benefits are subject to terms and conditions, which may include rules regarding eligibility, enrollment, waiting period, contribution, benefit limits, election changes, benefit exclusions, and others. Marriott HQ is committed to a hybrid work environment that enables associates to Be connected. Headquarters-based positions are considered hybrid, for candidates within a commuting distance to Bethesda, MD; candidates outside of commuting distance to Bethesda, MD will be considered for Remote positions. The application deadline for this position is 28 days after the date of this posting, June 6, 2024.

Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law.

---