ALG Vacations (ALGV), part of the Hyatt family, is widely recognized for providing the industry's leading leisure travel experience to destinations worldwide. As North America’s only vertically integrated travel, hospitality, and leisure management group, we can oversee all aspects of the vacation- from the moment a guest books a trip to the time they return home. Serving more than three million passengers annually, each of our highly respected brands offers unique benefits and a wide portfolio of destinations.

Grow your career as a Senior Analyst, Cyber Security Operations with Trisept Solutions. In this role, you will ensure the global security of our guests, colleagues, and hotels. You will maintain and enhance Hyatt’s security posture by partnering with our Managed Security Service Provider (MSSP) to manage the Security Information and Event Management (SIEM) system, developing and implementing detections mechanisms to identify and mitigate security threats and creating automation workflows to streamline security operations.  You will collaborate closely with the broader Cyber Security team, continuing to make Hyatt a leading hospitality company. You will be part of a team that is passionate about diversity, equity and inclusion, committed to nurturing curiosity and new skills, and building connections across the organization with stakeholders, colleagues and guests.  

A successful Senior Analyst, Cyber Security Operations will:

• Possess a deep understanding of cybersecurity principles, SIEM and automation technologies, threat detection methodologies.
• Partner with MSSP to manage the day-to-day cyber security operations including the investigation, containment and remediation of incidents escalated through our MSSP.
• Develop and maintain runbooks for potential incidents, including documentation and responsibilities of internal and external stakeholders.
• Respond to Cyber Security incidents as they are detected, ensuring all malicious activities are identified, mitigated, and remediated.
• Actively participate in the design, implementation, and maintenance of SIEM and threat detection content including dashboards, detection rules, alerts, correlations, etc. Continuously tune detections to reduce false positives.
• Continuously research and hunt for tactics, techniques, and procedures leveraged by advanced threat groups. Develop and implement detection mechanisms.
• Develop automations, scripts and workflows using SIEM and automation tools to streamline SOC processes.
• Work with development and operations teams to ensure complete, efficient, monitoring and logging of security relevant events.
• Work closely with Threat Intelligence to incorporate threat feeds for enrichment and alerting in the SIEM.
• Serve as a key cyber security SME; advise leaders across the organization on actions to take during security events and potential or active threats to the company’s security posture, as well as our third parties, key partners, and acquired entities.
• Ensure that CSO processes comply with regulations and standards such as Data Privacy, PCI-DSS and SEC reporting.
• Mentor, coach, and develop talent within the team.
• Demonstrate a commitment to Hyatt core values.
• Must be willing to work off-shift hours, as needed, during incidents. Must also be available for on-call rotation.

The position responsibilities outlined above are in no way to be construed as all encompassing. Other duties, responsibilities, and qualifications may be required and/or assigned as necessary.

Requirements:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security or related field, however, any combination of experience, education, and certification that demonstrates the candidate can be successful in the position is acceptable.
• At least 3 - 5 years of information security experience with a solid focus on Security Operations and Incident Response as well as technical certifications to reinforce their practical experience. 
• At least 3+ years of experience in a Cyber Security Operations Center (SOC) or Incident Response team.
• Proficiency with SIEM platforms (i.e. Splunk) and security automation tools.
• Experience with security tools such as EDR (i.e. CrowdStrike), IDS/IPS, SWG, firewalls, intelligence platforms.
• Cyber Security related certifications (i.e. SANS, CISSP, Splunk Power User) are preferred; however any combination of certification, education, and experience that demonstrates the candidate can be successful in the position is acceptable. 
• Technical domain knowledge of Linux, Windows, Or MacOS based systems and network infrastructure and cloud services (AWS, Azure).  
• Experience with log analysis tools and query languages.
• Experience with scripting languages (e.g., Python, PowerShell). 
• Experience with cyber kill chain, MITRE ATT&CK framework and threat hunting.  
• Experience with ServiceNow or similar ticketing platform with the ability to create reports, identify trends, and manage a ticket queue.
• Proactive self-starter with ability to work independently and as part of a larger team.
• Strong verbal and written communication and presentation skills.
• Ability and willingness to operate in a fast-paced and complex corporate environment.
• Excellent interpersonal skills and ability to create collaborative relationships with colleagues across various groups and levels, and influence without authority.
• Ability to travel worldwide on an as-needed basis for meetings and conferences (up to 10% of total work hours).

About ALG Vacations:

It all begins when our client’s book with ALG Vacations. We keep our standards as high as our passion for travel, working together with our agents to ensure every client’s vacation exceeds every expectation. We are an industry innovator that combines the expertise of many different brands.