Cyber Security Solutions Analyst (contract)

Hilton; McLean (VA); Hybrid; USD 83,000 - 103,000; Full time

Job summary

Hilton, a global hospitality brand, seeks a security leader to protect an expansive digital ecosystem spanning enterprise platforms, APIs, AI-enabled systems, and partner integrations. You will embed secure-by-design practices, guide architecture, and align initiatives with security standards across the lifecycle.

You will partner with cross-functional teams to drive risk-aligned security controls, governance, and incident readiness in a fast-paced, globally distributed environment.

Qualifications

• Strong understanding of modern application and cloud security practices.
• Experience with secure-by-design principles.
• Regulatory frameworks such as PCI, GDPR, SOC 2.

Responsibilities

• Perform cybersecurity reviews and provide security guidance for business initiatives.
• Review applications, APIs, cloud services, and data flows for security embedding.
• Develop and maintain security artifacts and guidance.
• Communicate risks and mitigation strategies to stakeholders.
• Collaborate with cross-functional teams to integrate security.
• Drive secure design choices balancing security and user experience.
• Lead security reviews and define scope and requirements.
• Evaluate architecture artifacts and remediation needs.
• Identify gaps and support remediation prior to production.
• Contribute to security standards and governance processes.

Skills

Cybersecurity

Security reviews

Cloud security

AI security

Communication

Regulatory frameworks

Penetration testing

Education

Bachelor's degree in CS/InfoSec/Engineering

CISSP/CISM/CCSP AWS Security specialty

Tools

AWS

NIST 800-53

ISO 27001

Job description

Please note that this is a contract role providing services to Hilton through Talent Solutions. If you are selected for this role, you will be employed by Talent Solutions and will not be an employee of Hilton. Contract workers are not employees of Hilton or any of its subsidiaries, nor will they be eligible for Hilton benefits.

• This is a US based hybrid position at one of our corporate offices in McLean, VA, Dallas, TX or Memphis, TN 3 days/week***

Job Summary

This is a dynamic and high-impact opportunity to play a central role in protecting one of the world's most recognized hospitality brands. In this position, you will help secure a vast and complex digital ecosystem spanning enterprise platforms, web and mobile applications, APIs, AI and GenAI-enabled systems, hotel environments, and partner integrations. Your work will directly safeguard more than 250 million customers, thousands of business partners, and team members across the globe. You will serve as a trusted security advisor, partnering with cross-functional teams to embed security throughout the solution lifecycle, drive adoption of secure-by-design principles, and ensure that technology initiatives are delivered in a manner that is secure, resilient, and aligned with organizational standards.

Responsibilities

• Perform cybersecurity reviews and provide security guidance for business and technology initiatives, ensuring solutions are secure, resilient, scalable, and aligned with security and technology standards.
• Review and assess internal and external applications, vendor solutions, APIs, integrations, cloud services, identity architectures, AI-enabled capabilities, and data flows to ensure security is embedded throughout the solution lifecycle.
• Develop and maintain solution security artifacts, including architecture reviews, data flow diagrams, security requirements, testing results, standards, and implementation guidance.
• Communicate security risks, trade-offs, mitigation strategies, and recommendations to technical and non-technical stakeholders, enabling informed business decisions.
• Work closely with business, product, engineering, architecture, operations, cybersecurity, and third-party partners to integrate security throughout the solution lifecycle.
• Assess proposed solutions and guide teams toward designs that appropriately balance security, customer experience, delivery velocity, scalability, resiliency, and operational supportability.
• Build trusted relationships across teams while driving adoption of secure-by-design principles and practices.
• Lead solution security reviews by defining scope, identifying security requirements, and ensuring required validation activities are completed.
• Evaluate architecture artifacts, including network diagrams, data flow diagrams, integration patterns, API designs, vulnerability assessments, penetration testing results, and audit findings.
• Identify security gaps, document risks and compensating controls, and support remediation efforts prior to production release.
• Contribute to the evolution of security standards, reference architecture, secure development practices, and governance processes.

Skills

• Strong understanding of modern application and cloud security practices, secure software development lifecycles (SDLC), and technology risk management.
• Working knowledge of networking concepts and security controls, including TCP/IP, DNS, TLS, firewalls, web application firewalls (WAFs), proxies, load balancers, VPNs, VPC networking, routing, and network segmentation.
• Experience evaluating security risks in AI and GenAI-enabled systems and services, including model integration, data governance, and secure use of third-party AI capabilities.
• Strong analytical, communication, and stakeholder management skills with the ability to translate technical concepts into business-focused recommendations.
• Excellent written and verbal communication skills with proven ability to influence technical and business stakeholders.
• Familiarity with regulatory and industry frameworks including PCI DSS, GDPR, CCPA, NIST 800-53, SOC 2, and ISO 27001.
• Experience with penetration testing, vulnerability management, or application security programs.

Experience

• 7 + years of experience in cybersecurity, technology, software engineering, solution architecture, risk assessment, or a related discipline.
• 5 + years of experience assessing or delivering applications, cloud services, integrations, APIs, or enterprise technology solutions.
• Experience supporting hospitality, travel, e-commerce, payments, financial services, or other large-scale customer-facing platforms is preferred.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience preferred.
• Industry certifications such as CISSP, CISM, CCSP, AWS Certified Security - Specialty, AWS Certified Solutions Architect, or equivalent are preferred.

This is a rare opportunity to make a meaningful and measurable impact at a global scale, working at the intersection of security, technology, and innovation within one of the most recognized brands in the hospitality industry. You will collaborate with talented teams across the organization, influence the direction of security practices and standards, and help shape how a world-class enterprise protects its customers and partners in an ever-evolving threat landscape. If you are passionate about cybersecurity and thrive in a fast-paced, collaborative environment, this role offers the challenge, visibility, and purpose to take your career to the next level.

Pay Rate Range

60 - 75 USD hourly