At Apple Leisure Group, we care for people so they can be their best. We deliver distinctive experiences for our guests, while providing a world of understanding and care. We strive to be the first choice in vacation travel, enriching lives and uniting the world. Grow your career as a successful Senior Analyst, Cyber Security Vulnerability Management within Trisept Solutions. In this role, you will play a critical role in safeguarding our organization’s assets by identifying, assessing, and mitigating potential vulnerabilities across our systems. A successful Senior Analyst, Cyber Security Vulnerability Management will: Conduct scans of Hyatt’s IT infrastructure to detect and evaluate cyber security vulnerabilities. Evaluate potential false positives and tune scanner as needed. Assess the criticality of findings, create remediation plans with applicable teams and produce comprehensive reports for various levels of stakeholders (i.e., executive and technical). Participate in regular “red team” exercises, acting as a malicious attacker would to identify novel and unique vulnerabilities and ensure they are remediated. Assist with vulnerability assessments of new applications and act as an advisory resource to their developers to help ensure the creation of secure code. Track all vulnerability remediation efforts and hold various teams across the organization and vendors accountable for timelines, initiate escalation, when appropriate. Assist with on-site reviews and audit requests of Hyatt properties to identify cyber security vulnerabilities and produce meaningful reporting for all findings. Manage and optimize vulnerability scanning tools and related software. Provide expertise during security incidents related to vulnerabilities. Ability to work urgently with stakeholders across the organization including Cyber Security Operations to assist with mitigation process when zero-day exploits are identified. Generate reports on vulnerability assessment findings, trends and status updates. Maintain accurate documentation of vulnerabilities, assessments, and remediation activities. Continuously monitor various sources of information (i.e., threat intelligence feeds) for vulnerabilities and assess their impact to Hyatt’s environment. A successful Senior Analyst, Cyber Security Vulnerability Management will have: Bachelor’s degree in cybersecurity, information technology or a related field. A CISSP, SSCP, Security+ or related industry certification is preferred; however, any combination of certification, education and experience that demonstrates the candidate can be successful in the position is acceptable. Knowledge of system administrative concepts for Unix, Linux, and/or Windows operating systems. Knowledge of security frameworks such as CIS, NIST, ISO, PCI, and IT Controls. 4+ years of experience in cybersecurity, with a focus on vulnerability management. Extensive experience in cybersecurity, a deep understanding of emerging threats, and a proactive approach to risk mitigation. Strong knowledge of common vulnerabilities (e.g. OWASP Top 10) and attack vectors. Experience with vulnerability scanning tools (e.g., Rapid7, Qualys, Tenable), including configuration, reporting, scanning best practices, agent deployment and asset management within the tool. Knowledge of security concepts and methodologies such as vulnerability assessments, application vulnerability testing, enterprise security strategies, network and cloud security architecture, and governance. Excellent verbal and written communication skills. Demonstrated attention to detail. Ability to work under pressure and handle multiple priorities simultaneously. Ability to travel up to 10%. The position responsibilities outlined above are in no way to be construed as all encompassing. Other duties, responsibilities, and qualifications may be required and/or assigned as necessary. About Apple Leisure Group As North America’s only vertically integrated travel, hospitality and leisure management group, Apple Leisure Group is an industry innovator that combines the expertise of 14 leading brands. Our unique niche allows us the special opportunity to oversee every aspect of the travel experience, from the moment a guest books a trip to the time they return home. ALG consistently delivers exceptional value to travelers and strong performance to resort owners and partners by strategically leveraging the power of its portfolio of brands across five segments, comprising: Vacations: The largest seller of vacation packages and charter flights in the U.S. for travel to Mexico and the Caribbean, moving approximately 3.2 million passengers annually through well-established vacation brands Resort Brand Management: management of 5-star and 4-star luxury resorts Destination Management Services: Best-in-class destination management services provided by Amstar DMC and Worldstar Loyalty Program: Exclusive loyalty program Unlimited Vacation Club Technology Solutions: Innovative technology solutions provider Trisept Solutions, connecting over 88,000 travel agents with leading travel suppliers. To learn more about the Apple Leisure Group advantage, visit appleleisuregroup.com. About TRISEPT SOLUTIONS Trisept Solutions is the enterprise operating platform that delivers innovative merchandising solutions for airlines, hotels and resorts, destinations, theme parks and other travel merchants. With 20 years of travel technology innovation, end-to-end traveler engagement and billions of transactions processed each year, this is the world’s most sophisticated travel merchandising platform. Our Values At ALG, we call our employees Colleagues, because we are more than just employees. We care for people so they can be at their best, we provide a world of understanding and care, and we deliver distinctive experiences for our guests. Our Values, by which we operate: Empathy Integrity Respect Inclusion Experimentation Well Being ALG’s Commitment to Diversity & Inclusion Living our purpose of caring for people so they can be their best means that we are committed to a workplace culture grounded in diversity and inclusion where Colleagues feel welcome and encouraged to fully participate in the organization. With the value of INCLUSION, we respect all the ways our Colleagues are individually unique and foster creativity and engagement in respectful environments. Benefits At a Glance We offer competitive salaries and a comprehensive benefit package to our U.S. based employees: Medical, Dental and Vision Insurance Basic Life Insurance Short & Long Term Disability Paid Parental Leave Corporate Wellness Program Travel Discounts & Deals Paid Time Off & Holidays 401(k) Plan with Company Match We are proud to be an EEO/AA employer M/F/D/V. We maintain a drug-free and tobacco-free workplace and perform pre-employment background checks. #J-18808-Ljbffr
ISO standards pci Unix rapid7 Windows qualys Linux OWASP Certified Information Systems Security Professional (CISSP)