Principal Software Development Engineer

Oracle

Oracle offers a comprehensive and fully integrated stack of cloud applications and cloud platform services.

As part of Oracle’s Security Engineering team, you will be responsible for identifying security tool gaps and issues while coordinating resolutions with the relevant technical support groups, businesses at risk, and service recovery teams. As a member of this team, you will design and execute controls to protect the environment against internal and external security threats.

The engineer will ensure the effectiveness of the security program and its alignment with corporate policy. This role will be responsible for providing input on the design and architecture of security solutions, the maintenance and analysis of current tools, monitoring for gaps or weaknesses in coverage, ensuring compliance with policy and industry standards, and promoting security throughout the organization. In addition, it will be necessary to collaborate with members of other lines of business to identify and address concerns related to security posture and security initiatives. The engineer will be expected to participate in security project tasks on an as-needed basis and interact directly with security organizations and multiple Lines of Business globally.

Preferred Qualifications:

• 5 years related experience in an information security role, supporting security programs and security engineering/architecture in complex enterprise environments. Hands-on experience with enterprise security architecture, engineering, and implementation (Networking, Endpoint, System Level Security) required.
• Experience with at least one enterprise-scale of the following security platforms: SIEM, Antivirus, Endpoint Detection and Response.
• Strong experience in cloud computing and building secure environments in the cloud utilizing tools such as Terraform & Ansible.
• Experience in security aspects of multiple platforms, operating systems (Linux and Windows servers), software, communications, and network protocols.
• Understanding of networking protocols and infrastructure designs; including routing, network ports and protocols, host and network intrusion detection systems, encryption, load balancing, and other network infrastructure.
• Knowledge of security processes and technologies including threat detection, firewall functionality, security monitoring, and specific tools: SIEM, AV, IDS/IPS.
• Excellent communication skills, analytical ability, strong judgment and leadership skills, and the ability to work effectively with IT management and staff.
• Dedicated and self-driven desire to maintain knowledge of current security threats and countermeasures; enthusiastic team member.
• Desirable certifications include: CISSP; CCSP; GCED; GCIH; GCFA; GIAC; OCI Certifications.

Responsibilities:

• Monitor, develop, and maintain enterprise security tooling program including Security Information and Event Management (SIEM), Endpoint Protection, and Web Application Firewalls in both engineering and analyst capacity.
• Build and administer secure Oracle Cloud environments to support the diverse needs of Oracle’s customers.
• Work directly with system owners to implement security controls and configure security tools to meet a variety of requirements.
• Reduce risk by enhancing existing security tools and processes within the organization.
• Develop and execute Standard Operating Procedures, Event Handlers, Runbooks, and Job Aids required for successful task completion of teammates, customers, and partner teams.
• Perform effective troubleshooting to ensure tool efficiency, provide root cause analysis, and develop plans for remediation.
• Assess threats & vulnerabilities to our environment and develop/implement remediation plans.
• Participate in a Rotational On-Call schedule for Critical issues (we strive to make sure this is truly as rare as it can be).