Security Engineer 4

Job Category Information Security Engineer Minimum Qualifications 6 years in security engineering detection engineering or cloud security with exposure to SaaS and API-based environments Strong expertise in anomaly detection behavioural analytics and applied data science concepts for cybersecurity Hands-on experience with SIEM SOAR and detection-as-code frameworks e g Splunk OpenSearch KQL Sigma Proficiency in threat hunting methodologies adversary emulation and detection in large-scale SaaS cloud environments Familiarity with threat intelligence platforms TIPs enrichment pipelines and ATT CK-based intelligence mapping Good programming automation and data analytics skills Experience integrating detection pipelines into SaaS applications and microservices Preferred Qualifications Experience developing analytics pipelines including AI ML models for anomaly detection and risk scoring Exposure to SOC operations detection content development and adversary simulation Deep knowledge of threat intelligence tradecraft e g ATT CK Sigma mappings enrichment correlation with detection rules Experience with automated detection tuning and false positive reduction Familiarity with cloud-native telemetry pipelines Security certifications GIAC GCDA GCFA GCTI GCP Security Engineer AWS Security Specialty OSCP Responsibilities 1 SaaS Detection Research Engineering Develop and refine detection frameworks for SaaS-specific threats business logic abuse API misuse identity-based attacks Engineer detection-as-code pipelines leveraging Sigma OpenSearch and automation frameworks Incorporate AI ML-driven anomaly detection techniques where applicable Continuously reskill and upskill in emerging detection technologies 2 Proactive Security Controls Mitigations Implement preventive and adaptive controls to identify SaaS threats before exploitation Use automation and analytics including AI-enhanced methods to accelerate response and reduce MTTD MTTR Collaborate with detection and response teams to improve coverage and resilience 3 Threat Hunting Intelligence Integration Conduct advanced threat hunting across SaaS telemetry using both traditional and AI-assisted approaches Leverage threat intelligence feeds and enrichment pipelines to drive prioritization Map detection coverage to MITRE ATT CK and adversary playbooks Automate ingestion normalization and correlation of structured unstructured TI data 4 Risk-Based Detection Security Metrics Build risk-based prioritization models incorporating AI ML where beneficial Provide executive reporting on detection performance coverage and efficiency Quantify detection efficacy by aligning outcomes with business risk and threat impact 5 Continuous Reskilling Innovation Lead reskilling initiatives within Detection Engineering enabling the team to adopt new frameworks AI ML methods and automation Collaborate with data science teams to explore AI-supported detection content generation and validation Foster a culture of continuous learning and applied innovation in DE TH and TI Qualifications Career Level - IC4 About Us As a world leader in cloud solutions Oracle uses tomorrow s technology to tackle today s challenges We ve partnered with industry-leaders in almost every sector-and continue to thrive after 40 years of change by operating with integrity We know that true innovation starts when everyone is empowered to contribute That s why we re committed to growing an inclusive workforce that promotes opportunities for all Oracle careers open the door to global opportunities where work-life balance flourishes We offer competitive benefits based on parity and consistency and support our people with flexible medical life insurance and retirement options We also encourage employees to give back to their communities through our volunteer programs We re committed to including people with disabilities at all stages of the employment process If you require accessibility assistance or accommodation for a disability at any point let us know by emailing or by calling 1 888 404 2494 in the United States Oracle is an Equal Employment Opportunity Employer All qualified applicants will receive consideration for employment without regard to race color religion sex national origin sexual orientation gender identity disability and protected veterans status or any other characteristic protected by law Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law