Cybersecurity Solution Security Analyst

Job Description:

This is a dynamic and high-impact opportunity to play a central role in protecting one of the world's most recognized hospitality brands. In this position, you will help secure a vast and complex digital ecosystem spanning enterprise platforms, web and mobile applications, APIs, AI and GenAI-enabled systems, hotel environments, and partner integrations. Your work will directly safeguard more than 250 million customers, thousands of business partners, and team members across the globe. You will serve as a trusted security advisor, partnering with cross-functional teams to embed security throughout the solution lifecycle, drive adoption of secure-by-design principles, and ensure that technology initiatives are delivered in a manner that is secure, resilient, and aligned with organizational standards.

Key Responsibilities

• Perform Cybersecurity Reviews: Provide security guidance for business and technology initiatives, ensuring solutions are secure, resilient, scalable, and aligned with security and technology standards.
• Architecture & Solution Assessment: Review and assess internal and external applications, vendor solutions, APIs, integrations, cloud services, identity architectures, AI-enabled capabilities, and data flows to ensure security is embedded throughout the solution lifecycle.
• Artifact Development: Develop and maintain solution security artifacts, including architecture reviews, data flow diagrams, security requirements, testing results, standards, and implementation guidance.
• Risk Communication: Communicate security risks, trade-offs, mitigation strategies, and recommendations to technical and non-technical stakeholders, enabling informed business decisions.
• Cross-Functional Collaboration: Work closely with business, product, engineering, architecture, operations, cybersecurity, and third-party partners to integrate security throughout the solution lifecycle.
• Balanced Solution Guidance: Assess proposed solutions and guide teams toward designs that appropriately balance security, customer experience, delivery velocity, scalability, resiliency, and operational supportability.
• Secure-by-Design Leadership: Build trusted relationships across teams while driving adoption of secure-by-design principles and practices.
• Security Review Management: Lead solution security reviews by defining scope, identifying security requirements, and ensuring required validation activities are completed.
• Technical Artifact Evaluation: Evaluate architecture artifacts, including network diagrams, data flow diagrams, integration patterns, API designs, vulnerability assessments, penetration testing results, and audit findings.
• Remediation & Governance: Identify security gaps, document risks and compensating controls, and support remediation efforts prior to production release. Contribute to the evolution of security standards, reference architecture, secure development practices, and governance processes.

Required Skills & Competencies

• Strong understanding of modern application and cloud security practices, secure software development lifecycles (SDLC), and technology risk management.
• Working knowledge of networking concepts and security controls, including TCP/IP, DNS, TLS, firewalls, web application firewalls (WAFs), proxies, load balancers, VPNs, VPC networking, routing, and network segmentation.
• Experience evaluating security risks in AI and GenAI-enabled systems and services, including model integration, data governance, and secure use of third-party AI capabilities.
• Strong analytical, communication, and stakeholder management skills with the ability to translate technical concepts into business-focused recommendations.
• Excellent written and verbal communication skills with proven ability to influence technical and business stakeholders.
• Familiarity with regulatory and industry frameworks including PCI DSS, GDPR, CCPA, NIST 800-53, SOC 2, and ISO 27001.
• Experience with penetration testing, vulnerability management, or application security programs.

Experience Requirements

• 7+ years of experience in cybersecurity, technology, software engineering, solution architecture, risk assessment, or a related discipline.
• 5+ years of experience assessing or delivering applications, cloud services, integrations, APIs, or enterprise technology solutions.
• Experience supporting hospitality, travel, e-commerce, payments, financial services, or other large-scale customer-facing platforms is preferred.

Qualifications & Education

• Education: Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience preferred.
• Certifications: Industry certifications such as CISSP, CISM, CCSP, AWS Certified Security - Specialty, AWS Certified Solutions Architect, or equivalent are preferred.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender, identity, national origin, disability, or protected veteran status.