Left arrow iconBack to search

Principal Security Engineer

Oracle
Posted 3 days ago
Location

Reston, VA, US

Salary

Competitive

Contract type

Full Time

Life Insurance

By applying, a Oracle account will be created for you. Oracle's Privacy Policy and Terms & Conditions will apply.

SonicJobs' Terms & Conditions and Privacy Policy also apply.

Develops advanced testing tools and methodologies to proactively identify and address security weaknesses. Uses expertise to recognize and escalate complex security violations, ensuring prompt response and resolution. Contributes to compliance assessments, evaluating the effectiveness of security controls and processes. Recommends best practices and independently applies data security tools and techniques, such as encryption, hashing, masking, and access management, to ensure the confidentiality and integrity of sensitive information.

Responsibilities

KeyResponsibilities

SecurityMonitoring - Security Tool Design and Development:

–        Conductssecurity assessments of various products and services, analyzing potentialvulnerabilities and recommending mitigation strategies.

–        Developsadvanced testing tools and methodologies to proactively identify and addresssecurity weaknesses.

–        Conductsin-depth security design and coding (e.g., reviewing code, writing code forcomplex investigation), providing advanced guidance and recommendations forimprovement.

–        Participatesin reviews of security alerts.

EventResponse:

–        Usesexpertise to recognize and escalate complex security violations, ensuringprompt response and resolution.

–        Takesappropriate action to contain and mitigate security events, coordinating with relevantteams and stakeholders.

–        Contributesto post-event reviews, providing insights and recommendations for strengtheningevent response processes.

Compliance:

–        Contributesto compliance assessments, evaluating the effectiveness of security controlsand processes.

–        Reviewssecurity compliance deliverables, providing recommendations for enhancingadherence to internal and external obligations.

–        Ensurescompliance with internal and external obligations, collaborating with relevantstakeholders to implement necessary measures.

–        Ensuresinventory systems are maintained and remain compliant from a securityperspective.

BusinessContinuity Support:

–        Providesguidance on business continuity and disaster recovery plans, processes, andprocedures, considering potential risks and vulnerabilities.

–        Ensuresthe execution of business continuity plans to support critical systems and dataduring disruptions, implementing appropriate measures and controls.

–        Assessesreadiness for certification and/or audit, providing insights andrecommendations for enhancing preparedness.

DataSecurity and Privacy:

–        Recommendsbest practices and independently applies data security tools and techniques,such as encryption, hashing, masking, and access management, to ensure theconfidentiality and integrity of sensitive information.

–        Conductsthorough reviews of documentation and procedures related to data security,identifying and recommending improvements to enhance overall security posture.

Researchand Innovation:

–        Appliesindustry security knowledge through engagement in research activities andcollaboration with colleagues to contribute to the development of innovativesecurity solutions.

–        Staysupdated on emerging trends and evolving threats, identifying potentialimplications for the organization and recommending appropriate actions.

–        Exploresand evaluates novel techniques and technologies to address complex securityproblems.

 

 

CoreResponsibilities

Planning& Execution:

–        Managesand coordinates moderately complex tasks, monitoring timelines and deliverablesto ensure timely completion and adherence to requirements for a moderatelysized project or initiative.

–        Efficientlydelegates, monitors, and prioritizes work across multiple projects, providingtechnical oversight and adjusting plans to address shifts in resources ortimelines.

Collaboration& Partnership:

–        Collaboratesacross the organization to align on expectations and achieve shared objectives.

–        Leveragesunderstanding of business leaders, stakeholders, and/or customers to ensureproposed solutions meet their needs.

–        Supportsinclusivity by actively seeking and listening to diverse perspectives, ensuringothers feel heard and respected.

ProblemSolving:

–        Identifiesand addresses moderately complex issues by analyzing a wide range of dataand/or information to identify solutions in accordance with standard practices.

–        Proactivelyescalates unresolved or critical issues with a thorough assessment and suggestspotential solutions.

–        Reviews,contributes to, and documents problem solving strategies.

ContinuousLearning:

–        Pursueslearning opportunities to expand knowledge and skills and/or tools in new areasand stays abreast of the latest industry trends and best practices.

–        Proactivelyseeks and leverages ongoing feedback and training to improve skills.

–        Coachesand mentors junior team members, fostering continuous learning and knowledgesharing within and across teams.

ContinuousImprovement:

–        Developsideas, recommends updates, and/or collaborates on the implementation of processimprovements to increase the efficiency and effectiveness of processes,protocols, and workflows across teams, and evaluates the impact on keystakeholders.

–        Solicitsfeedback from others on ideas for alternative approaches and methods forcontinued improvement.

Performanceand Development:

–        Contributesto the talent development pipeline by participating in candidate interviews,assessing candidates, and providing hiring recommendations.

Qualifications

Minimum Job Qualifications
Education and/or Experience:
11 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

OR

Bachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 7 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

OR

Master's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 5 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.

Job Skills:
Same as prior level plus;
Threat Modeling Demonstrated ability in or knowledge of threat modeling, including applying techniques to identify and mitigate security risks and vulnerabilities.
Compliance Demonstrated knowledge of and adherence to regulatory, legal, and organizational compliance requirements.
Technical Writing Demonstrated ability in or knowledge of technical writing, including developing and maintaining accurate technical documentation.
Innovation Demonstrated ability in or knowledge of innovation, including generating or supporting new ideas, technologies, or processes for organizational growth.
Thought Leadership Demonstrated ability to provide thought leadership and drive adoption of best practices within teams or industry.
Cross-Functional Team Leadership Demonstrated experience successfully leading cross-functional teams in project or product delivery.
Training and Development Demonstrated ability to design and deliver effective training programs to build team and individual capabilities.
Security Assurance Demonstrated ability in or knowledge of security assurance, including providing evidence of meeting security obligations and implementing security gating.

Preferred Job Qualifications
Education and/or Experience:
11 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

OR

Bachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 7 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

OR

Master's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 5 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.

Cloud or Internet Software Security Experience:
3 years of experience working on high-impact projects related to cloud or internet software security.

Programming/Scripting Experience:
3 years of experience working with one or more of the following programming or scripting languages (e.g., Go, Java, Python, or C/C++).

Cloud Experience:
2 years of experience with AWS Solution, Azure 900 Fundamentals, OCI Fundamentals, or equivalent cloud experience.

Information Security Certifications:
Information security or equivalent certifications (e.g., Certified Oracle Cloud Infrastructure Security Professional, Certificate of Cloud Security Knowledge [CCSK], Certified Information Security Manager [CISM], Certified Information Systems Security Professional [CISSP], Certified Ethical Hacker [CEH], Certified Cloud Security Professional [CCSP],

Only Oracle brings together the data, infrastructure, applications, and expertise to power everything from industry innovations to life-saving care. And with AI embedded across our products and services, we help customers turn that promise into a better future for all. Discover your potential at a company leading the way in AI and cloud solutions that impact billions of lives.

True innovation starts when everyone is empowered to contribute. That’s why we’re committed to growing a workforce that promotes opportunities for all with competitive benefits that support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs.

We’re committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing accommodation-request_mb@oracle.com or by calling 1-888-404-2494 in the United States.

Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans’ status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.




Learn more about this Employer on their Career Site

Apply now in a few quick clicks

By applying, a Oracle account will be created for you. Oracle's Privacy Policy and Terms & Conditions will apply.

SonicJobs' Terms & Conditions and Privacy Policy also apply.