Marriott
Additional Information
Job Number
25138588
Job Category
Information Technology
Location
Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States, 20814VIEW ON MAP (https://www.google.com/maps?q=Marriott%20International%20HQ%2C%207750%20Wisconsin%20Avenue%2C%20Bethesda%2C%20Maryland%2C%20United%20States%2C%2020814)
Schedule
Full Time
Located Remotely?
Y
Position Type
Management
This is a temporary position.
JOB SUMMARY
Responsible for establishing and maintaining a framework for insider risk analysis responsible for supporting the Global Insider Threat Management Program. Duties will include incident response to insider incidents and collaborating with multiple areas of the business, including human resources, business data owners, legal, physical security, SOC/CIRT, software development and information technology groups. The Sr. Manager will act as a technical subject matter expert to enhance adjacent programs such as threat intelligence, cybersecurity incident response, risk management, audit, ethics, etc. He/She will track and manage cradle-to-grave incident management through mitigation. This includes overseeing program metrics (KPI/KRI) to ensure the advancement of the program across the enterprise, while mitigating human risk to the organization.
CANDIDATE PROFILE
Education and Experience Required:
Bachelor's degree in Computer Science, MIS, or related field or equivalent experience/certification 7+ years' experience in insider threat/risk, or information security that includes cross-functional incident response, risk assessments, threat mitigation, and/or investigative support. 3+ years' SIEM, EDR, and/or DLP experience
Preferred:
Current certifications, including Certified Insider Threat Program Manager, Certified Threat Manager, Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP) Project management skills Excellent communication skills and problem-solving ability
Demonstrated ability to work independently and with others Ability to manage the details and compliance with standards and expectations
CORE WORK ACTIVITIES
Insider Threat Management & Response
Establish a framework for researching, documenting, and integrating assessments.
Responsible for gathering relevant intelligence regarding attacker tactics, techniques, and procedures.
Work as needed with the incident response team to triage alerts triggered by suspicious or malicious activity.
Act as a technical subject matter expert to enhance adjacent programs such as incident response, threat hunting, and custom detection development.
Develop and report on key metrics of the insider threat management program.
Utilize the corporate Endpoint Detection and Response tool and SIEM to identify anomalous activity and potential threats to the enterprise infrastructure.
Perform analysis of adversary tradecraft, malicious code, and capabilities for hunt pivoting purposes.
Manage the analysis of artifacts to determine potential specific adversary and motives.
Responds to crisis or urgent situations within the pertinent domain to mitigate immediate and potential threats and comply with relevant data breach laws.
Uses mitigation, preparedness, and response and recovery approaches, as needed, to maximize safety and security of systems, preservation of intellectual property, and information security.
Investigates and analyzes all relevant security and privacy response activities.
Conducts assessments of threats and vulnerabilities, determines deviations from acceptable configurations or enterprise or local policy, assesses the level of risk, and develops and/or recommends and operationalizes appropriate mitigation countermeasures.
Identifies and assesses the capabilities and activities of; produces findings to help initialize or support law enforcement and counterintelligence investigations or activities.
Analyzes threat information from multiple sources, disciplines, and agencies across industry and regulatory organizations.
Synthesizes and places regulatory and intelligence information in context; draws insights about the possible implications
Maintaining Goals
Submits reports in a timely manner, ensuring delivery deadlines are met.
Promotes the documenting of project progress accurately.
Provides input and assistance to other teams regarding projects.
Managing Work, Projects, and Policies Manages and implements work and projects as assigned.
Generates and provides accurate and timely results in the form of reports, presentations, etc.
Analyzes information and evaluates results to choose the best solution and solve problems.
Provides timely, accurate, and detailed status reports as requested.
Demonstrating and Applying Discipline Knowledge
Provides technical expertise and support to persons inside and outside of the department.
Demonstrates knowledge of job-relevant issues, products, systems, and processes.
Demonstrates knowledge of function-specific procedures. Keeps up-to-date technically and applies new knowledge to job.
The pay range for this position is $47.30 to $80.24 per hour.
Washington Applicants Only: Employees will accrue 0.0334 PTO balance for every hour worked and eligible to receive minimum of 9 holidays annually.
FLEX opportunities offer coverage for medical, dental, vision, health care flexible spending account, dependent care flexible spending account, life insurance, disability insurance, accident insurance, adoption expense reimbursements, paid parental leave, 401(k) plan, stock purchase plan, discounts at Marriott properties, commuter benefits, employee assistance plan, and childcare discounts. Benefits are subject to terms and conditions, which may include rules regarding eligibility, enrollment, waiting period, contribution, benefit limits, election changes, benefit exclusions, and others.
Marriott HQ is committed to a hybrid work environment that enables associates to Be connected. Headquarters-based positions are considered hybrid, for candidates within a commuting distance to Bethesda, MD; candidates outside of commuting distance to Bethesda, MD will be considered for Remote positions.
The application deadline for this position is 15 days after the date of this posting, August 25, 2025.
At Marriott International, we are dedicated to being an equal opportunity employer, welcoming all and providing access to opportunity. We actively foster an environment where the unique backgrounds of our associates are valued and celebrated.?Our greatest strength lies in the rich blend of culture, talent, and experiences of our associates. ?We are committed to non-discrimination on any protected basis, including disability, veteran status, or other basis protected by applicable law.
Marriott International is the world's largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed.
Be
where you can do your best work,?
begin
your purpose,
belong
to an amazing global? team, and
become
the best version of you.
Job Number
25138588
Job Category
Information Technology
Location
Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States, 20814VIEW ON MAP (https://www.google.com/maps?q=Marriott%20International%20HQ%2C%207750%20Wisconsin%20Avenue%2C%20Bethesda%2C%20Maryland%2C%20United%20States%2C%2020814)
Schedule
Full Time
Located Remotely?
Y
Position Type
Management
This is a temporary position.
JOB SUMMARY
Responsible for establishing and maintaining a framework for insider risk analysis responsible for supporting the Global Insider Threat Management Program. Duties will include incident response to insider incidents and collaborating with multiple areas of the business, including human resources, business data owners, legal, physical security, SOC/CIRT, software development and information technology groups. The Sr. Manager will act as a technical subject matter expert to enhance adjacent programs such as threat intelligence, cybersecurity incident response, risk management, audit, ethics, etc. He/She will track and manage cradle-to-grave incident management through mitigation. This includes overseeing program metrics (KPI/KRI) to ensure the advancement of the program across the enterprise, while mitigating human risk to the organization.
CANDIDATE PROFILE
Education and Experience Required:
Bachelor's degree in Computer Science, MIS, or related field or equivalent experience/certification 7+ years' experience in insider threat/risk, or information security that includes cross-functional incident response, risk assessments, threat mitigation, and/or investigative support. 3+ years' SIEM, EDR, and/or DLP experience
Preferred:
Current certifications, including Certified Insider Threat Program Manager, Certified Threat Manager, Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP) Project management skills Excellent communication skills and problem-solving ability
Demonstrated ability to work independently and with others Ability to manage the details and compliance with standards and expectations
CORE WORK ACTIVITIES
Insider Threat Management & Response
Establish a framework for researching, documenting, and integrating assessments.
Responsible for gathering relevant intelligence regarding attacker tactics, techniques, and procedures.
Work as needed with the incident response team to triage alerts triggered by suspicious or malicious activity.
Act as a technical subject matter expert to enhance adjacent programs such as incident response, threat hunting, and custom detection development.
Develop and report on key metrics of the insider threat management program.
Utilize the corporate Endpoint Detection and Response tool and SIEM to identify anomalous activity and potential threats to the enterprise infrastructure.
Perform analysis of adversary tradecraft, malicious code, and capabilities for hunt pivoting purposes.
Manage the analysis of artifacts to determine potential specific adversary and motives.
Responds to crisis or urgent situations within the pertinent domain to mitigate immediate and potential threats and comply with relevant data breach laws.
Uses mitigation, preparedness, and response and recovery approaches, as needed, to maximize safety and security of systems, preservation of intellectual property, and information security.
Investigates and analyzes all relevant security and privacy response activities.
Conducts assessments of threats and vulnerabilities, determines deviations from acceptable configurations or enterprise or local policy, assesses the level of risk, and develops and/or recommends and operationalizes appropriate mitigation countermeasures.
Identifies and assesses the capabilities and activities of; produces findings to help initialize or support law enforcement and counterintelligence investigations or activities.
Analyzes threat information from multiple sources, disciplines, and agencies across industry and regulatory organizations.
Synthesizes and places regulatory and intelligence information in context; draws insights about the possible implications
Maintaining Goals
Submits reports in a timely manner, ensuring delivery deadlines are met.
Promotes the documenting of project progress accurately.
Provides input and assistance to other teams regarding projects.
Managing Work, Projects, and Policies Manages and implements work and projects as assigned.
Generates and provides accurate and timely results in the form of reports, presentations, etc.
Analyzes information and evaluates results to choose the best solution and solve problems.
Provides timely, accurate, and detailed status reports as requested.
Demonstrating and Applying Discipline Knowledge
Provides technical expertise and support to persons inside and outside of the department.
Demonstrates knowledge of job-relevant issues, products, systems, and processes.
Demonstrates knowledge of function-specific procedures. Keeps up-to-date technically and applies new knowledge to job.
The pay range for this position is $47.30 to $80.24 per hour.
Washington Applicants Only: Employees will accrue 0.0334 PTO balance for every hour worked and eligible to receive minimum of 9 holidays annually.
FLEX opportunities offer coverage for medical, dental, vision, health care flexible spending account, dependent care flexible spending account, life insurance, disability insurance, accident insurance, adoption expense reimbursements, paid parental leave, 401(k) plan, stock purchase plan, discounts at Marriott properties, commuter benefits, employee assistance plan, and childcare discounts. Benefits are subject to terms and conditions, which may include rules regarding eligibility, enrollment, waiting period, contribution, benefit limits, election changes, benefit exclusions, and others.
Marriott HQ is committed to a hybrid work environment that enables associates to Be connected. Headquarters-based positions are considered hybrid, for candidates within a commuting distance to Bethesda, MD; candidates outside of commuting distance to Bethesda, MD will be considered for Remote positions.
The application deadline for this position is 15 days after the date of this posting, August 25, 2025.
At Marriott International, we are dedicated to being an equal opportunity employer, welcoming all and providing access to opportunity. We actively foster an environment where the unique backgrounds of our associates are valued and celebrated.?Our greatest strength lies in the rich blend of culture, talent, and experiences of our associates. ?We are committed to non-discrimination on any protected basis, including disability, veteran status, or other basis protected by applicable law.
Marriott International is the world's largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed.
Be
where you can do your best work,?
begin
your purpose,
belong
to an amazing global? team, and
become
the best version of you.