Cybersecurity Solution Security Analyst
Spectraforce
McLean, VA, United States
3 days ago
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Apply on jobs.localjobnetwork.com
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
7 years minimum
Working hours
Regular working hours
Job source
Tech stack
Application Programming Interfaces (APIs)
Artificial Intelligence
Amazon Web Services
Proxy Servers
Application Firewall
Software System Penetration Testing
Cloud Computing Security
Cyber Security
Computer Networks
Data Governance
Domain Name System (DNS)
Virtual Private Networks (VPN)
+22 more
Mobile Application Software
Network Diagrams
Routing
Network Segmentation
PCI Data Security Standards
Systems Development Life Cycle
Release Management
Cloud Services
Secure Coding
Software Engineering
Data Streaming
Systems Integration
TCP/IP
Software Vulnerability Management
Transport Layer Security
Enterprise Software Applications
Load Balancing
Software Security
Firewalls (Computer Science)
Amazon Virtual Private Cloud (VPC)
Information Technology
Vulnerability Analysis
Job description
- This is a dynamic and high-impact opportunity to play a central role in protecting one of the worldβs most recognized hospitality brands. In this position, you will help secure a vast and complex digital ecosystem spanning enterprise platforms, web and mobile applications, APIs, AI and GenAI-enabled systems, hotel environments, and partner integrations. Your work will directly safeguard more than 250 million customers, thousands of business partners, and team members across the globe. You will serve as a trusted security advisor, partnering with cross-functional teams to embed security throughout the solution lifecycle, drive adoption of secure-by-design principles, and ensure that technology initiatives are delivered in a manner that is secure, resilient, and aligned with organizational standards., * Perform cybersecurity reviews and provide security guidance for business and technology initiatives, ensuring solutions are secure, resilient, scalable, and aligned with security and technology standards.
- Review and assess internal and external applications, vendor solutions, APIs, integrations, cloud services, identity architectures, AI-enabled capabilities, and data flows to ensure security is embedded throughout the solution lifecycle.
- Develop and maintain solution security artifacts, including architecture reviews, data flow diagrams, security requirements, testing results, standards, and implementation guidance.
- Communicate security risks, trade-offs, mitigation strategies, and recommendations to technical and non-technical stakeholders, enabling informed business decisions.
- Work closely with business, product, engineering, architecture, operations, cybersecurity, and third-party partners to integrate security throughout the solution lifecycle.
- Assess proposed solutions and guide teams toward designs that appropriately balance security, customer experience, delivery velocity, scalability, resiliency, and operational supportability.
- Build trusted relationships across teams while driving adoption of secure-by-design principles and practices.
- Lead solution security reviews by defining scope, identifying security requirements, and ensuring required validation activities are completed.
- Evaluate architecture artifacts, including network diagrams, data flow diagrams, integration patterns, API designs, vulnerability assessments, penetration testing results, and audit findings.
- Identify security gaps, document risks and compensating controls, and support remediation efforts prior to production release.
- Contribute to the evolution of security standards, reference architecture, secure development practices, and governance processes.
Requirements
- Strong understanding of modern application and cloud security practices, secure software development lifecycles (SDLC), and technology risk management.
- Working knowledge of networking concepts and security controls, including TCP/IP, DNS, TLS, firewalls, web application firewalls (WAFs), proxies, load balancers, VPNs, VPC networking, routing, and network segmentation.
- Experience evaluating security risks in AI and GenAI-enabled systems and services, including model integration, data governance, and secure use of third-party AI capabilities.
- Strong analytical, communication, and stakeholder management skills with the ability to translate technical concepts into business-focused recommendations.
- Excellent written and verbal communication skills with proven ability to influence technical and business stakeholders.
- Familiarity with regulatory and industry frameworks including PCI DSS, GDPR, CCPA, NIST 800-53, SOC 2, and ISO 27001.
- Experience with penetration testing, vulnerability management, or application security programs., * 7 + years of experience in cybersecurity, technology, software engineering, solution architecture, risk assessment, or a related discipline.
- 5 + years of experience assessing or delivering applications, cloud services, integrations, APIs, or enterprise technology solutions.
- Experience supporting hospitality, travel, e-commerce, payments, financial services, or other large-scale customer-facing platforms is preferred.
- Bachelorβs degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience preferred.
- Industry certifications such as CISSP, CISM, CCSP, AWS Certified Security - Specialty, AWS Certified Solutions Architect, or equivalent are preferred.
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Apply on jobs.localjobnetwork.com
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Good distractions
Loading talks and stories from around this roleβ¦