Principal Security Engineer (US Government Clearance required)

Behind every mission-critical Cloud service is a sophisticated SaaS architecture supporting the largest companies in the world, employing the most advanced software engineering.  We are proud to support those services and team with customers who depend on them, continually innovating and challenging the status quo.  Our team environment is progressive, flexible, professionally challenging, rewarding, and fun.

We are looking for experienced security engineers to join our efforts in reshaping the cloud services landscape across industry verticals to revolutionize the delivery of Cloud Services to the world’s most critical organizations.  The SaaS Cloud Security organization is responsible for securing enterprise-grade software services on behalf of our 25,000 customers, processing over 60 billion transactions per day.

Oracle SaaS Cloud Security operates as a global team of analysts responsible for monitoring and responding to any potential risks to the Oracle SaaS environment.  The SaaS Detection & Response team collectively covers the breadth and depth of Threat Detection Engineering, Security Operations, Incident Response, Threat Intelligence, and Digital Forensics.

Career Level - IC4

Qualifications:

Disclaimer:

Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.

Range and benefit information provided in this posting are specific to the stated locations only

US: Hiring Range in USD from: $109,200 to $223,400 per annum. May be eligible for bonus and equity.

Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle’s differing products, industries and lines of business.
Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.

Oracle US offers a comprehensive benefits package which includes the following:
1. Medical, dental, and vision insurance, including expert medical opinion
2. Short term disability and long term disability
3. Life insurance and AD&D
4. Supplemental life insurance (Employee/Spouse/Child)
5. Health care and dependent care Flexible Spending Accounts
6. Pre-tax commuter and parking benefits
7. 401(k) Savings and Investment Plan with company match
8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
9. 11 paid holidays
10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
11. Paid parental leave
12. Adoption assistance
13. Employee Stock Purchase Plan
14. Financial planning and group legal
15. Voluntary benefits including auto, homeowner and pet insurance

The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.

Responsibilities:

Responsibilities:

• Function as a technical lead on a team of highly technical analysts developing threat detection content in various technologies such as SIEM, EDR, IDS, and others.
• Develop and implement security automation and orchestration strategies.
• Work in conjunction with other teams such as Incident Response, Threat Intelligence, Engineering Development, and Cloud Operations teams to continuously improve Oracle SaaS security posture.
• Ensure the confidentiality, availability, and integrity of Oracle Cloud data systems.
• Respect and protect customer data.
• Monitor security controls to detect and prevent infiltration of company systems and exfiltration of company data by adversaries.
• Correlate data from disparate log sources to determine a baseline and generate alerts based on behavior-based indicators.
• Develop and provide team reporting cadence and metrics.
• Perform other duties as assigned.

Qualifications:

This position requires the ability to maintain an active TS/SCI security clearance with Poly.

• University degree from an accredited college or university, or equivalent experience or certifications.
• 5-7 years of experience in utilizing enterprise security solutions including but not limited to SIEM, security detection and response tools, and endpoint security products.
• 5-7 years experience with threat detection development, and threat research.
• Ability to analyze attacker tactics, techniques, and procedures (TTPs).
• Experience with industry standard frameworks such as OWASP, Mitre, NIST, PCI, FedRAMP, etc.
• Strong log analysis, deduction, analytical, and problem-solving skills.
• Strong technical experience with Linux or similar Unix platforms (Oracle Linux, CentOS, RHEL, Solaris, BSD), macOS, and Windows.
• At least 5 years’ experience as a network analyst or systems administrator.
• Strong knowledge of Oracle systems and software.
• Knowledge of cloud technologies (IaaS/PaaS, AWS, Azure, OCI), virtualization

Salary : $109,200 - $223,400