What are the responsibilities and job description for the Sr. Manager - Security Threat Management & Response (Tactical) position at Marriott International?
Job Category Information Technology
Location Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States VIEW ON MAP
Schedule Full-Time
Located Remotely? N
Relocation? N
Position Type Management
JOB SUMMARY
This intel-centric Cyber role is focused on gathering, disseminating, and reporting threat-related events. It has overall responsibility for creating and maintaining relationships with indicators of compromise (IOCs) and possesses the capabilities to recognize the associations between various threat actors and these IOCs. The ideal candidates will have extensive experience with Threat Intelligence Platforms (TIP), preferably OpenCTI, for effective threat intelligence management.
This role is part Marriott Global Cybersecurity organization with our primary offices in Bethesda, MD, and Singapore and with teams elsewhere in the US, Europe and Asia.
CANDIDATE PROFILE
Education and Experience
Required:
• Bachelor’s degree in Computer Sciences or related field or equivalent experience/certification
• 7 years of progressive information technology leadership experience
• 4 years’ information security experience that includes:
o A strong expertise in threat intelligence platforms, preferably OpenCTI
o Creation of treat reports for executive (non technical) and technical stakeholders
o Experience in threat data analysis and response planning.
Preferred:
• Current information security certification, including Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP)
• Technical leadership experience in a sourced environment
• Project management skills
• Excellent communication skills and problem solving ability
• Demonstrated ability to work independently and with others
• Ability to manage the details and compliance with standards and expectations
• Technical infrastructure operations, administration, or engineering background
CORE WORK ACTIVITIES
• Utilize OpenCTI to gather, analyze, and interpret threat data from diverse sources.
• Develop and maintain a deep understanding of threat vectors, threat actors, and emerging threats to track cyber campaigns effectively.
• Create comprehensive threat intelligence profiles within OpenCTI for threat actors, tactics, techniques, and procedures (TTPs), and IOCs.
• Generate actionable, detailed threat intelligence reports on monthly, quarterly, and ad-hoc bases.
• Produce and review executive-level briefings on current events and strategic cyber intelligence.
• Communicate complex threat events or security incident details to a wide audience, including executives, legal, and technical staff, in both verbal and written forms.
• Advise internal stakeholders on threat intelligence best practices and strategies.
• Engage in external threat intelligence sharing with partners and platforms.
• Use corporate Endpoint Detection and Response tools, like CrowdStrike, and SIEM solutions, such as Splunk, to identify potential threats to the infrastructure.
• Participate in the development of processes for analyzing log files, including ad hoc and static threat hunts, in the corporate SIEM.
Maintaining Goals
• Submits reports in a timely manner, ensuring delivery deadlines are met.
• Promotes the documenting of project progress accurately.
• Provides input and assistance to other teams regarding projects.
Managing Work, Projects, and Policies
• Manages and implements work and projects as assigned.
• Generates and provides accurate and timely results in the form of reports, presentations, etc.
• Analyzes information and evaluates results to choose the best solution and solve problems.
• Provides timely, accurate, and detailed status reports as requested.
Demonstrating and Applying Discipline Knowledge
• Provides technical expertise and support to persons inside and outside of the department.
• Demonstrates knowledge of job-relevant issues, products, systems, and processes.
• Demonstrates knowledge of function-specific procedures.
• Keeps up-to-date technically and applies new knowledge to job.
• Uses computers and computer systems (including hardware and software) to enter data and/ or process information.
Delivering on the Needs of Key Stakeholders
• Understands and meets the needs of key stakeholders.
• Develops specific goals and plans to prioritize, organize, and accomplish work.
• Determines priorities, schedules, plans and necessary resources to ensure completion of any projects on schedule.
• Collaborates with internal partners and stakeholders to support business/initiative strategies
• Communicates concepts in a clear and persuasive manner that is easy to understand.
• Generates and provides accurate and timely results in the form of reports, presentations, etc.
• Demonstrates an understanding of business priorities
Additional Responsibilities
• Provides information to supervisors and co-workers by telephone, in written form, e-mail, or in person in a timely manner.
• Demonstrates self-confidence, energy and enthusiasm.
• Informs and/or updates leaders on relevant information in a timely manner.
• Manages time effectively and conducts activities in an organized manner.
• Presents ideas, expectations and information in a concise, organized manner.
• Uses problem solving methodology for decision making and follow up.
• Performs other reasonable duties as assigned by manager.
Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law.
Marriott International is the world’s largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed. Be where you can do your best work, begin your purpose, belong to an amazing global team, and become the best version of you.
