Information Security Director

Position Overview

We are looking for a seasoned cloud security Response leader to join our efforts in reshaping the cloud services landscape across industry verticals and leading a team of cloud security incident responders, analysts, and engineers to revolutionize the delivery of Cloud Services to the world’s most critical organizations.  The SaaS Cloud Security organization is responsible for securing enterprise-grade software services on behalf of our 25,000 customers, processing over 60 billion transactions per day. 

As a Senior Director and a security engineering manager responsible for the SaaS Cloud Security operations and Response Team, you will oversee the development and execution of security incident response processes, threat intelligence services, forensics, services, and a global security operations center within the Oracle SaaS cloud. You will play a critical role in performing investigations, forensic analysis and deliver lessons learned on security events that may occur in Oracle’s SaaS services. 

This organization is responsible for coordinating with and reacting to alerts and inquiries from security operations centers globally, as well as directly from our customers. Thorough, timely response and crisp coordination/communication with both internal and external teams will be keys to your success in this role. You and your team will jointly execute red/blue team exercises with our in-house red team in an effort to continually improve both operations and response capabilities.

This position requires strong people management experience, technical security knowledge and strategic leadership in operating and expanding a successful security operations and response organization. Our team environment is progressive, flexible, professionally challenging, rewarding, and fun.

Characteristics

Expects Results: Consistently drives high standards for everyone, the team, and the organization to accomplish key goals. 

Communicates and Influences: Clearly communicates information and ideas to individuals and teams in an articulate, focused, and compelling way. 

Possesses Strong Technology and Architecture Acumen understanding of cloud technology, architecture and software development.

Builds and Maintains High Performing Teams: Attracts, develops, engages and retains talented team members by creating an inclusive environment.

Key Responsibilities

• You will build and lead the team in planning and conducting security response operations and preparedness.
• You and the team members will be planning, designing and executing tabletop exercises cross-functionally across Oracle for SaaS security incident planning.
• You will lead effective reporting, communication, status and solution recommendations based on lessons learned during investigation and forensics activities.
• You will ensure we have effective knowledge management of lessons learned and review results of critical investigations in order to close security gaps and continuously improve SaaS security across the board.
• You will regularly brief senior leadership regarding the strengths, weaknesses, opportunities, and threats associated with lessons learned by you and your team.
• You will provide regular threat/risk briefings to senior leadership regarding issues raised by the operations and response team.
• You will work closely with your partners and peers in security engineering who leverage your findings, analysis and results to assist in driving security solutions to internal and external customers. 
• You will influence and assist in new security solutions, security processes, security standards to scale SaaS growth.

Career Level - M4

Ideal Experience

• Understanding and experience of latest cloud security incidents and attack techniques.
• Leadership experience managing a security response team for a large-scale company/portfolio.
• Deep technical understanding of security threat detection, response and operational best practices.
• Strong and hands-on experience/knowledge in the following areas:

• Security Incident Case management and tooling 
• Forensic investigation process and tools
• Customer facing communication in coordination with legal peers
• Driving automation into the forensics and evidence collection process
• Problem solving skills to learn new technical and non-technical analysis techniques to overcome problems.
• Ability to identify and implement both tactical and strategic solutions.
• Demonstrated knowledge of AWS, Azure or Google cloud services.
• Ability to lead and engage individuals and teams located across multipl