Lead Security Compliance Engineer

About Us :

Marriott International Inc., headquartered in Bethesda, Maryland, USA, was founded in May 1927 by J. Willard Marriott and Alice S. Marriott with a modest nine-seat A&W root beer stand. Guided by the family's leadership and core principles, Marriott International today has grown into a global hospitality giant, operating approximately 9,000 properties and over 30 leading brands in more than 140 countries and territories.

From such humble beginnings to becoming the world’s largest hotel company, Marriott International has never stopped searching for inventive ways to serve its customers, provide opportunities for its associates, and grow their business. At Marriott Tech Accelerator center (MTA), Hyderabad, India, Marriott is exploring the world we live in and all its possibilities. At Marriott Tech Accelerator, we are a team of passionate engineering minds dedicated to creating and building cutting-edge solutions that streamline operations and elevate guest experiences.

Marriott Tech Accelerator center is fully owned and operated by ANSR. All associates at Marriott Tech Accelerator will be ANSR employees, delivering services exclusively to ANSR's client, Marriott International.

To know more about us, please visit Marriott Tech Accelerator careers page

Role Title : Senior Engineer II – Security & Compliance

Position Summary :

The Senior Security & Compliance Engineer represents a challenging opportunity to lead, design, and implement solutions critical to securing cloud infrastructure core to Marriott’s mission. Apply to this position if you have a software development background, have expertise in areas of Cloud Security, DevOps, and infrastructure automation with a focus on integrating security best practices. The core responsibilities are to contribute to a team working to improve technical security best practices through identifying and developing security standards through automated technical security patterns and pipelines, developing automations to strengthen configurations within our public and private clouds, and developing processes to automate manual processes.

The Cloud Infrastructure Security & Compliance team is where the rubber meets the road as to translating information security policy into enterprise standards, practices, and automations. You will use Cloud and DevOps SME skills to participate as a leading contributor to designing, implementing, arbitrating, and influencing security best practices across a complex organization.

Job Responsibilities :

• Improve cloud security posture through script and pipeline development using technologies like python, boto3, Ansible, Harness, and Jenkins
• Participate, lead, and adjudicate best practices secure application and infrastructure architecture
• Research and publish standards for use of security technologies such as secrets management, key management, or rehydration patterns
• Utilize understanding of progressive infrastructure practices such as containers, Kubernetes, and DevOps to implement security automation within these systems and associated processes
• Develop techniques, strategies, and script automation to discover and implement hardening to Public cloud resources and services (AWS, Azure, GCP, Alibaba Cloud)
• Support cloud and virtual machine image hardening and delivery
• Support custom tool development using software development languages such as Python or NodeJS
• Provide and presents status, analysis and reporting to internal stakeholders, Executive Management and Senior Leadership
• Train and / or mentors other team members, and peers as appropriate
• Identify opportunities to enhance the service delivery, operations, and continual service improvement processes
• Perform other compliance-related functions as required