Senior Security Engineer

OCI Security Architecture team is looking for an experienced security engineer to join our team. The candidate will get the opportunity to work with and learn from outstanding security engineers across Oracle. They will collaborate with multi-functional teams, including architects and developers to drive security improvements and innovation across OCI.

Security Architecture is comprised of subject matter experts who are focused and specialized in securing all aspects of OCI Cloud. As security experts, we are sought out by our partner engineering organizations to provide mentorship on crafting their products, services and features. We set OCI wide security standards and hold a high security requirement bar for all services. We strive to provide the highest level of security to our customers.

We are currently looking for a highly motivated security engineer with experience in Cloud Security to join the OCI Security Architecture team. This person would be involved in architecture, design, prototyping and development of the security aspects of Oracle Cloud's products and services.

You should be a security-minded leader who can work with architects and/or development teams as they design new capabilities. You must ensure that security requirements are clear and the design implements the vital controls to improve security posture for the service. As a member of the Security Architecture team, you will be required to have a firm grasp on security technologies, trends in cloud security practices, and ability to communicate complex technical security requirements clearly to the development teams. You should be able to understand how to design test specifications for the services and feature so that the security requirements can be tested with automated tooling.

Career Level - IC3

Key responsibilities:

• Collaborate with cross-functional teams to drive security improvements, innovation and standard methodologies into the products and services.
• Conduct threat modeling, security architecture reviews, risk assessment and provide guidance on mitigating the identified issues.
• Identify issues to prevent security problems at scale.
• Build and maintain technical security standards and patterns.
• Provide experienced security guidance to service teams to ensure OCI's products and services are secure by default. 
• Stay up-to-date on the latest advancements in Cloud security and apply them to improve OCI's security posture.

Qualifications:

• A minimum of 5+ years of experience in application security, product security, or systems security.
• A BS or MS in Computer Science/Engineering with a focus on Security, or a related field with a demonstrated ability in the field.
• Experience in architecture, design, deployment, and handling of standard security practices and policies is required. 

Preferred qualifications includes, 

• Master’s degree in Computer Science, Information Security, Computer Engineering or equivalent.
• Experience in cloud product or set of cloud services, with expertise in IaaS, PaaS.
• Experience with architecture security reviews for products or services operating in a cloud environment. 
• Expertise in concepts of multi-tenancy, cloud security and virtualization, Access Management, OAuth, Cloud SSO, Identity Provisioning, Identity Governance etc.
• Expertise in Encryption, Key management, Cybersecurity fundamentals (e.g., access controls, common software vulnerabilities, and security best practices), Deployment Methodologies, and Security Standards Compliance Certification (STIG, FedRAMP, PCI-DSS), etc.
• Very good understanding of concepts related to Docker, Container, Serverless computing, and Kubernetes.
• Ability to design large scalable systems for cloud customers with focus on security.
• Knowledge of network security, VPN/Firewalls and software-defined networking is a plus.
• Experience operating within and supporting a security assurance and assessment program is a plus.
• Excellent written and verbal communication skills, strong analytical and problem-solving skills.

Disclaimer:

Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.

Range and benefit information provided in this posting are specific to the stated locations only

US: Hiring Range: from $87,000 to $178,200 per annum. May be eligible for bonus and equity.

Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle’s differing products, industries and lines of business.
Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.