Marriott
FLEX Senior Detection Engineer
Marriott, Bethesda, Maryland, us, 20811
Additional Information
Job Number:
24203269
Job Category:
Information Technology
Location:
Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States, 20814
VIEW ON MAP
Schedule:
Full Time
Located Remotely?
Yes
Position Type:
Management
This is a temporary position.
This is a detection engineering role that leverages knowledge of monitoring, analyzing, detecting, and responding to cyber events and incidents to develop and implement effective monitoring and alerting for information systems and networks. This role is responsible for developing and tuning Security Information and Event Management (SIEM) and User Entity and Behavior Analytics (UEBA) content to monitor critical IT infrastructure and application logged events to detect cybersecurity and insider threats across the Marriott enterprise. This role produces high-quality documentation pertaining to detection development, monitoring logic, and other content creation tasks. This role will also lead collaboration sessions for security monitoring use case ideation with partners in the cyber security tower and other business units.
CANDIDATE PROFILE
Education and Experience
Required:
Bachelor’s degree in Computer Sciences or related field or equivalent experience/certification
3+ years of collective experience in one or all of the following:
Splunk SIEM (Splunk Enterprise Security) threat detection use case development
UEBA use case development for insider threat use case development
5+ years of experience in some or all of the following:
Experience working in (or with) security functions such as SOC, CIRT, security engineering, risk management, vulnerability management.
Technical infrastructure operations, administration, or systems engineering
Scripting or programming language, including Python
Preferred Skills/Experience:
Current information security certification such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP)
Offensive and defensive security certifications such as CEH, IGAC Cyber Defense, OSCP or other related certifications
Splunk Certification, including Splunk Enterprise Security Certified Admin
Use case development experience on the Exabeam platform
Working knowledge of the NIST Cyber Security Framework and ISO/IEC 27001:2022
Working knowledge of the MITRE ATT&CK Framework
Experience with security monitoring use case ideation for business applications and IT infrastructure
Familiarity with cloud service provider platforms (AWS, Azure, GCP), identity and access management systems, firewalls, next-gen anti-malware, intrusion detection and prevention systems
Experience with Linux, Unix and Microsoft operating systems
Knowledge of IP networking
Experience with a scripting language (*nix shell scripting, Python, PowerShell, etc.) and regular expressions
Solid written and verbal communication skills
Agile methodology
Core Responsibilities
Most Often:
Lead collaboration sessions within the cyber security tower and other business units to devise security monitoring use cases.
Engage and collaborate with other security engineers and architects as needed.
Document prospective security monitoring use cases with MITRE ATT&ACK mappings.
Inform and consult other cyber ops teams of required data onboarding and integrations for use case development.
Develop analytics, correlation searches, dashboards, reports and alerts within the SIEM and UEBA platforms.
Solicit feedback for pre-production security monitoring content through peer review process.
Document developed security monitoring content in a documentation registry.
Manage field mapping and transmission of security monitoring alerts to the security incident response platform.
Provide governance support for the content development function.
Service operational requests in queue.
Attend SCRUM and prioritization meetings to review and update deliverables.
Less Often:
Contribute to ongoing development and maintenance of documented standards, workflows, and best practices.
Research emerging threats and adversary tactics.
Occasional participation in evaluations of new platforms, technologies and methodologies.
MANAGEMENT COMPETENCIES
Leadership
Communication:
Conveys information and ideas to others in a convincing and engaging manner.
Leading Through Vision and Values:
Keeps the organization's vision and values at the forefront.
Managing Change:
Initiates and/or manages the change process.
Problem Solving and Decision Making:
Identifies and understands issues, problems, and opportunities.
Professional Demeanor:
Exhibits behavioral styles that convey confidence and command respect.
Strategy Development:
Develops business plans by exploring and systematically evaluating opportunities.
Managing Execution
Building a Successful Team:
Uses an effective interpersonal style to build a cohesive team.
Strategy Execution:
Ensures successful execution of business plans.
Driving for Results:
Sets high standards of performance.
Building Relationships
Customer Relationships:
Develops and sustains relationships based on understanding of customer needs.
Global Mindset:
Supports employees and business partners with diverse styles.
Strategic Partnerships:
Develops collaborative relationships with fellow employees and business partners.
Generating Talent and Organizational Capability
Developing Others:
Supports the development of others' skills.
Organizational Capability:
Evaluates and adapts the structure of assignments.
Learning and Applying Professional Expertise
Continuous Learning:
Actively identifies new areas for learning.
Technical Acumen:
Understanding and utilizing professional skills.
Technical Intelligence:
Knowledge and ability to define and apply appropriate technology.
Development Methodologies:
General knowledge of SDLC and Agile framework.
Information Security:
General information security knowledge.
Business Acumen:
Understands and utilizes business information.
Basic Competencies
Basic Computer Skills:
Using basic computer hardware and software.
Mathematical Reasoning:
The ability to add, subtract, multiply, or divide.
Oral Comprehension:
The ability to listen to and understand information.
Reading Comprehension:
Understanding written sentences and paragraphs.
Writing:
Communicating effectively in writing.
The pay range for this position is $60.09 to $85.24 per hour.
Washington Applicants Only:
Employees will accrue 0.0334 PTO balance for every hour worked and eligible to receive a minimum of 9 holidays annually.
FLEX opportunities offer coverage for various benefits. Benefits are subject to terms and conditions.
Marriott HQ is committed to a hybrid work environment. Headquarters-based positions are considered hybrid for candidates within a commuting distance to Bethesda, MD.
The application deadline for this position is 13 days after the date of this posting, November 26, 2024.
Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture.
Marriott International is the world’s largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed.
Be
where you can do your best work,
begin
your purpose,
belong
to an amazing global team, and
become
the best version of you.
#J-18808-Ljbffr
Job Number:
24203269
Job Category:
Information Technology
Location:
Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States, 20814
VIEW ON MAP
Schedule:
Full Time
Located Remotely?
Yes
Position Type:
Management
This is a temporary position.
This is a detection engineering role that leverages knowledge of monitoring, analyzing, detecting, and responding to cyber events and incidents to develop and implement effective monitoring and alerting for information systems and networks. This role is responsible for developing and tuning Security Information and Event Management (SIEM) and User Entity and Behavior Analytics (UEBA) content to monitor critical IT infrastructure and application logged events to detect cybersecurity and insider threats across the Marriott enterprise. This role produces high-quality documentation pertaining to detection development, monitoring logic, and other content creation tasks. This role will also lead collaboration sessions for security monitoring use case ideation with partners in the cyber security tower and other business units.
CANDIDATE PROFILE
Education and Experience
Required:
Bachelor’s degree in Computer Sciences or related field or equivalent experience/certification
3+ years of collective experience in one or all of the following:
Splunk SIEM (Splunk Enterprise Security) threat detection use case development
UEBA use case development for insider threat use case development
5+ years of experience in some or all of the following:
Experience working in (or with) security functions such as SOC, CIRT, security engineering, risk management, vulnerability management.
Technical infrastructure operations, administration, or systems engineering
Scripting or programming language, including Python
Preferred Skills/Experience:
Current information security certification such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP)
Offensive and defensive security certifications such as CEH, IGAC Cyber Defense, OSCP or other related certifications
Splunk Certification, including Splunk Enterprise Security Certified Admin
Use case development experience on the Exabeam platform
Working knowledge of the NIST Cyber Security Framework and ISO/IEC 27001:2022
Working knowledge of the MITRE ATT&CK Framework
Experience with security monitoring use case ideation for business applications and IT infrastructure
Familiarity with cloud service provider platforms (AWS, Azure, GCP), identity and access management systems, firewalls, next-gen anti-malware, intrusion detection and prevention systems
Experience with Linux, Unix and Microsoft operating systems
Knowledge of IP networking
Experience with a scripting language (*nix shell scripting, Python, PowerShell, etc.) and regular expressions
Solid written and verbal communication skills
Agile methodology
Core Responsibilities
Most Often:
Lead collaboration sessions within the cyber security tower and other business units to devise security monitoring use cases.
Engage and collaborate with other security engineers and architects as needed.
Document prospective security monitoring use cases with MITRE ATT&ACK mappings.
Inform and consult other cyber ops teams of required data onboarding and integrations for use case development.
Develop analytics, correlation searches, dashboards, reports and alerts within the SIEM and UEBA platforms.
Solicit feedback for pre-production security monitoring content through peer review process.
Document developed security monitoring content in a documentation registry.
Manage field mapping and transmission of security monitoring alerts to the security incident response platform.
Provide governance support for the content development function.
Service operational requests in queue.
Attend SCRUM and prioritization meetings to review and update deliverables.
Less Often:
Contribute to ongoing development and maintenance of documented standards, workflows, and best practices.
Research emerging threats and adversary tactics.
Occasional participation in evaluations of new platforms, technologies and methodologies.
MANAGEMENT COMPETENCIES
Leadership
Communication:
Conveys information and ideas to others in a convincing and engaging manner.
Leading Through Vision and Values:
Keeps the organization's vision and values at the forefront.
Managing Change:
Initiates and/or manages the change process.
Problem Solving and Decision Making:
Identifies and understands issues, problems, and opportunities.
Professional Demeanor:
Exhibits behavioral styles that convey confidence and command respect.
Strategy Development:
Develops business plans by exploring and systematically evaluating opportunities.
Managing Execution
Building a Successful Team:
Uses an effective interpersonal style to build a cohesive team.
Strategy Execution:
Ensures successful execution of business plans.
Driving for Results:
Sets high standards of performance.
Building Relationships
Customer Relationships:
Develops and sustains relationships based on understanding of customer needs.
Global Mindset:
Supports employees and business partners with diverse styles.
Strategic Partnerships:
Develops collaborative relationships with fellow employees and business partners.
Generating Talent and Organizational Capability
Developing Others:
Supports the development of others' skills.
Organizational Capability:
Evaluates and adapts the structure of assignments.
Learning and Applying Professional Expertise
Continuous Learning:
Actively identifies new areas for learning.
Technical Acumen:
Understanding and utilizing professional skills.
Technical Intelligence:
Knowledge and ability to define and apply appropriate technology.
Development Methodologies:
General knowledge of SDLC and Agile framework.
Information Security:
General information security knowledge.
Business Acumen:
Understands and utilizes business information.
Basic Competencies
Basic Computer Skills:
Using basic computer hardware and software.
Mathematical Reasoning:
The ability to add, subtract, multiply, or divide.
Oral Comprehension:
The ability to listen to and understand information.
Reading Comprehension:
Understanding written sentences and paragraphs.
Writing:
Communicating effectively in writing.
The pay range for this position is $60.09 to $85.24 per hour.
Washington Applicants Only:
Employees will accrue 0.0334 PTO balance for every hour worked and eligible to receive a minimum of 9 holidays annually.
FLEX opportunities offer coverage for various benefits. Benefits are subject to terms and conditions.
Marriott HQ is committed to a hybrid work environment. Headquarters-based positions are considered hybrid for candidates within a commuting distance to Bethesda, MD.
The application deadline for this position is 13 days after the date of this posting, November 26, 2024.
Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture.
Marriott International is the world’s largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed.
Be
where you can do your best work,
begin
your purpose,
belong
to an amazing global team, and
become
the best version of you.
#J-18808-Ljbffr