Associate Security Architect

JOB SUMMARY

NOTE:  This is a FLEX Associate Engagement  

Position type: Full-Time

The Senior Security Architect develops and maintains security strategies, provides technical security guidance, ensures compliance with security standards, and serves as the point of escalation for security issues. They possess broad knowledge across various security domains and collaborate with project teams to enhance security while balancing time to market and functionality.

Role Responsibilities/Duties:

• Develop and maintain security strategies, requirements, and standards for applications and platforms.
• Provide in-depth technical security guidance as the Security Subject Matter Expert (SME) for various technologies and project areas.
• Ensure communication of company security policies, standards, and industry standards to program teams during the Software Development Life Cycle (SDLC).
• Identify gaps and collaborate with project teams to enhance security while maintaining time to market, functionality, and scalability.
• Review and approve Security Accreditation tasks throughout each phase of the SDLC.
• Serve as the point of escalation for security issues and risks.
• Possess broad knowledge in security areas such as Cloud Computing, Application Security, Identity and Access Management (IAM), Cryptography, Infrastructure, and DevSecOps.

Qualifications:

• Bachelor's or master's degree in computer science, information systems, cybersecurity, or a related field, or equivalent experience/certification.
• 5+ years of information security experience in security engineering with expertise in at least three of the following areas:Conducting security reviews and identifying risks and gaps.
• Performing security accreditations.
• Developing security architectures and strategies.
• Developing Enterprise security patterns.
• Working with development teams and vendor teams for implementing compensating controls.
• Experience in reviewing and developing Security Architectures and identifying security risks/gaps as well as mitigation strategies.
• 3+ years combined experience in five or more of the following areas:Full-stack knowledge of IT infrastructure, including Applications, Databases, Operating systems (Windows, Unix, and Linux), IP networks (WAN and LAN), DevSecOps, and API Architectures.
• Cryptography and current cryptographic standards, including PKI.
• Working knowledge of the OWASP Top 10.

Competencies:

• Strong working knowledge of Agile Methodologies with a focus on SAFe.
• Strong working knowledge of IT service management disciplines such as Change management, Configuration management, Asset management, Incident management, and Problem management.
• Ability to provide security requirements for various areas including Cloud Computing, Application Development, IAM, Cryptography, DevSecOps, and Infrastructure design.
• Experience in developing Enterprise Security Strategies.
• Experience and a strong working knowledge of methodologies for conducting threat-modeling exercises.
• Experience designing the deployment of applications and infrastructure into hybrid and public cloud services.

Marriott International is an equal opportunity employer committed to hiring a diverse workforce and sustaining an inclusive culture. Marriott International does not discriminate on the basis of disability, veteran status or any other basis protected under federal, state or local laws.

FLEX employees will accrue .03334 hours of paid leave for every hour worked and be eligible to receive minimum of 9 holidays annually.

All locations offer coverage for medical, dental, vision, health care flexible spending account, dependent care flexible spending account, life insurance, disability insurance, accident insurance, adoption expense reimbursements, paid parental leave, 401(k) plan, stock purchase plan, discounts at Marriott properties, commuter benefits, employee assistance plan, and childcare discounts.  Benefits are subject to terms and conditions, which may include rules regarding eligibility, enrollment, waiting period, contribution, benefit limits, election changes, benefit exclusions, and others.

Marriott HQ is committed to a hybrid work environment that enables associates to Be connected.  Headquarters-based positions are considered hybrid, for candidates within a commuting distance to Bethesda, MD; candidates outside of commuting distance to Bethesda, MD will be considered for remote positions.

The application deadline for this position is 14 days after the date of this posting, May 20th, 2024.