• Lead the development of network security requirements and success criteria through collaboration with internal and external customers. Leverage these criteria and integrate business and technical knowledge when designing and developing to deliver solutions that meet functional and non-functional requirements while delivering the best value and user experience.
• Develop IPS policies in alignment with business and security requirements
• Perform daily support operations within 24/7 schedules
• Responsible for the operation, performance, availability and capacity of the Intrusion Prevention Systems (IPS)
• TLS inspection policy design and implementation.
• Splunk and Strata Cloud Log analysis in conjunction with security information and event management (SIEM) tools.
• Collaborate with global teams across Marriott International enterprise.
• Drive overall IPS process improvements and documentation, and represent and contribute to the overall IPS solutions and methodologies
• Full life-cycle support for critical network security technology from ideation and strategic planning through retirement and decommissioning for all engineering and operational needs.
• Represent the Security Engineering team with various stakeholders to drive remediation of identified risks, endorse preventative solutions gather requirements, and influence stakeholders to reduce risk and maintain security alignment to corporate and or industry requirements.
• Create and implement an operational security program to ensure the security of IPS solution.
• Identify, select, deploy, and maintain appropriate monitoring and configuration management tools to provide proactive monitoring and management of the security posture of production environments.
• Identify, select, deploy, and maintain authentication, authorization, and auditing solutions for production operations.
• Stay current on cloud security policies, standards, regulations making recommendations for the company
• Work closely and collaboratively with Information Security, Technology teams and Business units to support their needs
• Act as an advocate of information security policies, standards, controls and as an enabler to the business while managing risk appropriately
• Drive mitigation of reported risks from continuous monitoring solutions
• Track and report on the status of cloud security risks to corporate/industry requirements.
• Gain deep security-level knowledge of on-prem and cloud environments, continuous monitoring solutions to understand and provide direct guidance for security remediation activities.

Required:

• Bachelor’s degree in Computer Sciences or related field or equivalent experience/certification
• 7+ years of information technology experience, with 4+ years of experience in network security in some or all of the following:
• Performing technical planning, system integration, verification and validation, risk analysis, supportability and effectiveness analyses for various tools and solutions, performance and capacity management.
• Intrusion Prevention Systems, vulnerability and compliance management, identity and access management, or risk and security logging and monitoring
• Networking design and concepts to include TCP/IP, switching, routing, firewalls, Load balancer, virtual route forwarding and VLANs.

​

Preferred:

• Current information security certification, including Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP); CCNA; Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Familiarity with security frameworks CSA, NIST, CIS, PCI DSS, etc.
• Thorough understanding of the following security technologies: Log Management, TLS inspection, URL filtering, DNS security
• Experience with IEEE standards 802.3, 802.11 and 802.15
• Experience in public cloud – AWS, Azure.
• Experience using log analysis tools to troubleshoot issues and to plan for future requirements.
• Knowledge in Software Defined Networking and network micro segmentation.
• Policy creation and rule design and updates for the administration security control systems
• Technical writing/creation of formal documentation such as architecture diagrams, technical designs, and SOPs
• Excellent communication skills and problem-solving ability.
• Demonstrated ability to work independently and with others
• Ability to manage the details and compliance with standards and expectations

The pay range for this position is $47.35 to $80.00 per hour.

​

Washington Applicants Only: Employees will accrue 0.0334 PTO balance for every hour worked and eligible to receive minimum of 9 holidays annually.

​

FLEX opportunities offer coverage for medical, dental, vision, health care flexible spending account, dependent care flexible spending account, life insurance, disability insurance, accident insurance, adoption expense reimbursements, paid parental leave, 401(k) plan, stock purchase plan, discounts at Marriott properties, commuter benefits, employee assistance plan, and childcare discounts. Benefits are subject to terms and conditions, which may include rules regarding eligibility, enrollment, waiting period, contribution, benefit limits, election changes, benefit exclusions, and others.

​

Marriott HQ is committed to a hybrid work environment that enables associates to Be connected. Headquarters-based positions are considered hybrid, for candidates within a commuting distance to Bethesda, MD; candidates outside of commuting distance to Bethesda, MD will be considered for Remote positions.

​

The application deadline for this position is 14 days after the date of this posting, January 21, 2025.

​

Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law.