Principal Security Engineer

Develops advanced testing tools and methodologies to proactively identify and address security weaknesses. Uses expertise to recognize and escalate complex security violations, ensuring prompt response and resolution. Contributes to compliance assessments, evaluating the effectiveness of security controls and processes. Recommends best practices and independently applies data security tools and techniques, such as encryption, hashing, masking, and access management, to ensure the confidentiality and integrity of sensitive information.

Only Oracle brings together the data, infrastructure, applications, and expertise to power everything from industry innovations to life-saving care. And with AI embedded across our products and services, we help customers turn that promise into a better future for all. Discover your potential at a company leading the way in AI and cloud solutions that impact billions of lives.

True innovation starts when everyone is empowered to contribute. That's why we're committed to growing a workforce that promotes opportunities for all with competitive benefits that support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs.

We're committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing accommodation-request_mb@oracle.com or by calling 1-888-404-2494 in the United States.

Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans' status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.

Disclaimer:

Certain U.S. based or U.S. customer or client-facing roles may be required to comply with applicable requirements, such as immunization/occupational health mandates, and/or drug testing requirements.

Range and benefit information provided in this posting are specific to the stated locations only

US: Hiring Range in USD from: $106,300 to $234,600 per annum. May be eligible for bonus, equity, and compensation deferral.

Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle''s differing products, industries and lines of business.

Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.

Oracle US offers a comprehensive benefits package which includes the following:

1. Medical, dental, and vision insurance, including expert medical opinion

2. Short term disability and long term disability

3. Life insurance and AD&D

4. Supplemental life insurance (Employee/Spouse/Child)

5. Health care and dependent care Flexible Spending Accounts

6. Pre-tax commuter and parking benefits

7. 401(k) Savings and Investment Plan with company match

8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.

9. 11 paid holidays

10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.

11. Paid parental leave

12. Adoption assistance

13. Employee Stock Purchase Plan

14. Financial planning and group legal

15. Voluntary benefits including auto, homeowner and pet insurance

The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.

Career Level - IC4

Key Responsibilities

Security Monitoring - Security Tool Design and Development:

• Conducts security assessments of various products and services, analyzing potential vulnerabilities and recommending mitigation strategies.

• Develops advanced testing tools and methodologies to proactively identify and address security weaknesses.

• Conducts in-depth security design and coding (e.g., reviewing code, writing code for complex investigation), providing advanced guidance and recommendations for improvement.

• Participates in reviews of security alerts.

Event Response:

• Uses expertise to recognize and escalate complex security violations, ensuring prompt response and resolution.

• Takes appropriate action to contain and mitigate security events, coordinating with relevant teams and stakeholders.

• Contributes to post-event reviews, providing insights and recommendations for strengthening event response processes.

Compliance:

• Contributes to compliance assessments, evaluating the effectiveness of security controls and processes.

• Reviews security compliance deliverables, providing recommendations for enhancing adherence to internal and external obligations.

• Ensures compliance with internal and external obligations, collaborating with relevant stakeholders to implement necessary measures.

• Ensures inventory systems are maintained and remain compliant from a security perspective.

Business Continuity Support:

• Provides guidance on business continuity and disaster recovery plans, processes, and procedures, considering potential risks and vulnerabilities.

• Ensures the execution of business continuity plans to support critical systems and data during disruptions, implementing appropriate measures and controls.

• Assesses readiness for certification and/or audit, providing insights and recommendations for enhancing preparedness.

Data Security and Privacy:

• Recommends best practices and independently applies data security tools and techniques, such as encryption, hashing, masking, and access management, to ensure the confidentiality and integrity of sensitive information.

• Conducts thorough reviews of documentation and procedures related to data security, identifying and recommending improvements to enhance overall security posture.

Research and Innovation:

• Applies industry security knowledge through engagement in research activities and collaboration with colleagues to contribute to the development of innovative security solutions.

• Stays updated on emerging trends and evolving threats, identifying potential implications for the organization and recommending appropriate actions.

• Explores and evaluates novel techniques and technologies to address complex security problems.

Core Responsibilities

Planning & Execution:

• Manages and coordinates moderately complex tasks, monitoring timelines and deliverables to ensure timely completion and adherence to requirements for a moderately sized project or initiative.

• Efficiently delegates, monitors, and prioritizes work across multiple projects, providing technical oversight and adjusting plans to address shifts in resources or timelines.

Collaboration & Partnership:

• Collaborates across the organization to align on expectations and achieve shared objectives.

• Leverages understanding of business leaders, stakeholders, and/or customers to ensure proposed solutions meet their needs.

• Supports inclusivity by actively seeking and listening to diverse perspectives, ensuring others feel heard and respected.

Problem Solving:

• Identifies and addresses moderately complex issues by analyzing a wide range of data and/or information to identify solutions in accordance with standard practices.

• Proactively escalates unresolved or critical issues with a thorough assessment and suggests potential solutions.

• Reviews, contributes to, and documents problem solving strategies.

Continuous Learning:

• Pursues learning opportunities to expand knowledge and skills and/or tools in new areas and stays abreast of the latest industry trends and best practices.

• Proactively seeks and leverages ongoing feedback and training to improve skills.

• Coaches and mentors junior team members, fostering continuous learning and knowledge sharing within and across teams.

Continuous Improvement:

• Develops ideas, recommends updates, and/or collaborates on the implementation of process improvements to increase the efficiency and effectiveness of processes, protocols, and workflows across teams, and evaluates the impact on key stakeholders.

• Solicits feedback from others on ideas for alternative approaches and methods for continued improvement.

Performance and Development:

• Contributes to the talent development pipeline by participating in candidate interviews, assessing candidates, and providing hiring recommendations.

Key Responsibilities

Security Monitoring - Security Tool Design and Development:

• Conducts security assessments of various products and services, analyzing potential vulnerabilities and recommending mitigation strategies.

• Develops advanced testing tools and methodologies to proactively identify and address security weaknesses.

• Conducts in-depth security design and coding (e.g., reviewing code, writing code for complex investigation), providing advanced guidance and recommendations for improvement.

• Participates in reviews of security alerts.

Event Response:

• Uses expertise to recognize and escalate complex security violations, ensuring prompt response and resolution.

• Takes appropriate action to contain and mitigate security events, coordinating with relevant teams and stakeholders.

• Contributes to post-event reviews, providing insights and recommendations for strengthening event response processes.

Compliance:

• Contributes to compliance assessments, evaluating the effectiveness of security controls and processes.

• Reviews security compliance deliverables, providing recommendations for enhancing adherence to internal and external obligations.

• Ensures compliance with internal and external obligations, collaborating with relevant stakeholders to implement necessary measures.

• Ensures inventory systems are maintained and remain compliant from a security perspective.

Business Continuity Support:

• Provides guidance on business continuity and disaster recovery plans, processes, and procedures, considering potential risks and vulnerabilities.

• Ensures the execution of business continuity plans to support critical systems and data during disruptions, implementing appropriate measures and controls.

• Assesses readiness for certification and/or audit, providing insights and recommendations for enhancing preparedness.

Data Security and Privacy:

• Recommends best practices and independently applies data security tools and techniques, such as encryption, hashing, masking, and access management, to ensure the confidentiality and integrity of sensitive information.

• Conducts thorough reviews of documentation and procedures related to data security, identifying and recommending improvements to enhance overall security posture.

Research and Innovation:

• Applies industry security knowledge through engagement in research activities and collaboration with colleagues to contribute to the development of innovative security solutions.

• Stays updated on emerging trends and evolving threats, identifying potential implications for the organization and recommending appropriate actions.

• Explores and evaluates novel techniques and technologies to address complex security problems.

Core Responsibilities

Planning & Execution:

• Manages and coordinates moderately complex tasks, monitoring timelines and deliverables to ensure timely completion and adherence to requirements for a moderately sized project or initiative.

• Efficiently delegates, monitors, and prioritizes work across multiple projects, providing technical oversight and adjusting plans to address shifts in resources or timelines.

Collaboration & Partnership:

• Collaborates across the organization to align on expectations and achieve shared objectives.

• Leverages understanding of business leaders, stakeholders, and/or customers to ensure proposed solutions meet their needs.

• Supports inclusivity by actively seeking and listening to diverse perspectives, ensuring others feel heard and respected.

Problem Solving:

• Identifies and addresses moderately complex issues by analyzing a wide range of data and/or information to identify solutions in accordance with standard practices.

• Proactively escalates unresolved or critical issues with a thorough assessment and suggests potential solutions.

• Reviews, contributes to, and documents problem solving strategies.

Continuous Learning:

• Pursues learning opportunities to expand knowledge and skills and/or tools in new areas and stays abreast of the latest industry trends and best practices.

• Proactively seeks and leverages ongoing feedback and training to improve skills.

• Coaches and mentors junior team members, fostering continuous learning and knowledge sharing within and across teams.

Continuous Improvement:

• Develops ideas, recommends updates, and/or collaborates on the implementation of process improvements to increase the efficiency and effectiveness of processes, protocols, and workflows across teams, and evaluates the impact on key stakeholders.

• Solicits feedback from others on ideas for alternative approaches and methods for continued improvement.

Performance and Development:

• Contributes to the talent development pipeline by participating in candidate interviews, assessing candidates, and providing hiring recommendations.