Senior Analyst Cyber Security Operations - (SOC) - (Remote Opportunity) at Hyatt Hotels Corporation in Chicago, IL

Hyatt Corporate Office, Chicago

ALG Vacations (ALGV), part of the Hyatt family, is widely recognized for providing the industry's leading leisure travel experience to destinations worldwide. As North America’s only vertically integrated travel, hospitality, and leisure management group, we can oversee all aspects of the vacation- from the moment a guest books a trip to the time they return home. Serving more than three million passengers annually, each of our highly respected brands offers unique benefits and a wide portfolio of destinations.

Grow your career as a Senior Analyst, Cyber Security Operations with Trisept Solutions. In this role, you will ensure the global security of our guests, colleagues, and hotels. You will maintain and enhance Hyatt’s security posture by partnering with our Managed Security Service Provider (MSSP) to manage the Security Information and Event Management (SIEM) system, developing and implementing detections mechanisms to identify and mitigate security threats and creating automation workflows to streamline security operations. You will collaborate closely with the broader Cyber Security team, continuing to make Hyatt a leading hospitality company. You will be part of a team that is passionate about diversity, equity and inclusion, committed to nurturing curiosity and new skills, and building connections across the organization with stakeholders, colleagues and guests.

A successful Senior Analyst, Cyber Security Operations will:

Possess a deep understanding of cybersecurity principles, SIEM and automation technologies, threat detection methodologies.

Partner with MSSP to manage the day-to-day cyber security operations including the investigation, containment and remediation of incidents escalated through our MSSP.

Develop and maintain runbooks for potential incidents, including documentation and responsibilities of internal and external stakeholders.

Respond to Cyber Security incidents as they are detected, ensuring all malicious activities are identified, mitigated, and remediated.

Actively participate in the design, implementation, and maintenance of SIEM and threat detection content including dashboards, detection rules, alerts, correlations, etc. Continuously tune detections to reduce false positives.

Continuously research and hunt for tactics, techniques, and procedures leveraged by advanced threat groups. Develop and implement detection mechanisms.

Develop automations, scripts and workflows using SIEM and automation tools to streamline SOC processes.

Work with development and operations teams to ensure complete, efficient, monitoring and logging of security relevant events.

Work closely with Threat Intelligence to incorporate threat feeds for enrichment and alerting in the SIEM.

Serve as a key cyber security SME; advise leaders across the organization on actions to take during security events and potential or active threats to the company’s security posture, as well as our third parties, key partners, and acquired entities.

Ensure that CSO processes comply with regulations and standards such as Data Privacy, PCI-DSS and SEC reporting.

Mentor, coach, and develop talent within the team.

Demonstrate a commitment to Hyatt core values.

Must be willing to work off-shift hours, as needed, during incidents. Must also be available for on-call rotation.

The position responsibilities outlined above are in no way to be construed as all encompassing. Other duties, responsibilities, and qualifications may be required and/or assigned as necessary.

About ALG Vacations:

It all begins when our client’s book with ALG Vacations. We keep our standards as high as our passion for travel, working together with our agents to ensure every client’s vacation exceeds every expectation. We are an industry innovator that combines the expertise of many different brands.

ALG Vacations consistently delivers exceptional value to travelers and strong performance to resort owners and partners by strategically leveraging the power of its portfolio of brands across multiple segments, comprising:

Vacations: The largest seller of vacation packages and charter flights in the U.S. for travel to Mexico and the Caribbean, moving approximately 3.2 million passengers annually through well-established vacation brands

Destination Management Services: Best-in-class destination management services provided by Amstar® DMC and Worldstar®

Loyalty Program: Exclusive loyalty program Unlimited Vacation Club®

Technology Solutions: Innovative technology solutions provider Trisept Solutions®, connecting over 88,000 travel agents with leading travel suppliers.

Since 2021, ALG Vacations has been part of the Hyatt family. At Hyatt, we believe in the power of belonging and creating a culture of care where our colleague’s become family. Our colleagues and our guests have been at the heart of our business since 1957 and helped Hyatt become one of the best and fastest-growing hospitality brands in the world.

As we continue to grow our business together, we never lose sight of what’s most important: Our People. We turn trips into journeys, encounters into experiences and jobs into careers.

To learn more about ALG Vacations: https://alg.www.vaxvacationaccess.com/about-us/

About TRISEPT SOLUTIONS

Trisept Solutions® is the enterprise operating platform that delivers innovative merchandising solutions for airlines, hotels and resorts, destinations, theme parks and other travel merchants. With 20 years of travel technology innovation, end-to-end traveler engagement and billions of transactions processed each year, this is the world’s most sophisticated travel merchandising platform.

Our Values

At ALG Vacations, we call our employees Colleagues, because we are more than just employees. We care for people so they can be at their best, we provide a world of understanding and care, and we deliver distinctive experiences for our guests. Our Values, by which we operate:

Empathy • Well Being • Inclusion • Integrity • Respect • Experimentation

Our Commitment to Diversity & Inclusion

Being part of ALG Vacations and the Hyatt family means always having space to be you. Our global teams are a mosaic of cultures, ethnicities, genders, ages, abilities, and identities. We are committed to diversity across the board—from who we hire and develop, organizations we support, and who we buy from and work with.

We’re proud to offer exceptional corporate benefits which include:

Travel Perks and Benefits for both ALG Vacations and Hyatt

Medical, Dental and Vision Insurance

Basic Life Insurance

Short- & Long-Term Disability

Paid Parental Leave

Corporate Wellness Program

Travel Discounts & Deals

Paid Time Off & Holidays

401(k) Plan with Company Match

We are proud to be an EEO/AA employer M/F/D/V. We maintain a drug-free and tobacco-free workplace and perform pre-employment background checks.

Qualifications

Requirements:

Bachelor’s degree in Computer Science, Cybersecurity, Information Security or related field, however, any combination of experience, education, and certification that demonstrates the candidate can be successful in the position is acceptable.

At least 3 - 5 years of information security experience with a solid focus on Security Operations and Incident Response as well as technical certifications to reinforce their practical experience.

At least 3+ years of experience in a Cyber Security Operations Center (SOC) or Incident Response team.

Proficiency with SIEM platforms (i.e. Splunk) and security automation tools.

Experience with security tools such as EDR (i.e. CrowdStrike), IDS/IPS, SWG, firewalls, intelligence platforms.

Cyber Security related certifications (i.e. SANS, CISSP, Splunk Power User) are preferred; however any combination of certification, education, and experience that demonstrates the candidate can be successful in the position is acceptable.

Technical domain knowledge of Linux, Windows, Or MacOS based systems and network infrastructure and cloud services (AWS, Azure).

Experience with log analysis tools and query languages.

Experience with scripting languages (e.g., Python, PowerShell).

Experience with cyber kill chain, MITRE ATT&CK framework and threat hunting.

Experience with ServiceNow or similar ticketing platform with the ability to create reports, identify trends, and manage a ticket queue.

Proactive self-starter with ability to work independently and as part of a larger team.

Strong verbal and written communication and presentation skills.

Ability and willingness to operate in a fast-paced and complex corporate environment.

Excellent interpersonal skills and ability to create collaborative relationships with colleagues across various groups and levels, and influence without authority.

Ability to travel worldwide on an as-needed basis for meetings and conferences (up to 10% of total work hours).