Senior DevSecops Engineer

Employer DescriptionAn Oracle career can span industries, roles, Countries and cultures, giving you the opportunity to flourish in new roles and innovate, while blending work life in. Oracle has thrived through 40+ years of change by innovating and operating with integrity while delivering for the top companies in almost every industry.

In order to nurture the talent that makes this happen, we are committed to an inclusive culture that celebrates and values diverse insights and perspectives, a workforce that inspires thought leadership and innovation.

Oracle offers a highly competitive suite of Employee Benefits designed on the principles of parity, consistency, and affordability. The overall package includes certain core elements such as Medical, Life Insurance, access to Retirement Planning, and much more. We also encourage our employees to engage in the culture of giving back to the communities where we live and do business.

At Oracle, we believe that innovation starts with diversity and inclusion and to create the future we need talent from various backgrounds, perspectives, and abilities. We ensure that individuals with disabilities are provided reasonable accommodation to successfully participate in the job application, interview process, and in potential roles. to perform crucial job functions.

That’s why we’re committed to creating a workforce where all individuals can do their best work. It’s when everyone’s voice is heard and valued that we’re inspired to go beyond what’s been done before.

Oracle is an Equal Employment Opportunity Employer*. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans’ status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.

Job DescriptionThe CSS Security Operations team can provide you with the opportunity to build and operate a suite of managedcloud security services in a multi-tenant cloud environment. CSS is committed to providing the best in managedsecurity cloud solutions that meet the needs of our customers who are tackling some of the world’s you interested in securing complex workloads and platform? We are looking for hands-on security engineers withexpertise and passion in solving difficult security problems in distributed, multi-tenant services. These are excitingtimes in our space - we are growing fast, and working on ambitious new a Security Engineer you will work closely with other engineers from to build and operate services that arefundamentally sound and efficient. You should be familiar with security at all levels of the software, hardware, andnetwork stack; while being exceptionally deep in a few. Intellectual curiosity and an excitement for the challenges ofsecuring complex systems are a must. You should value simplicity and usability as well as security and workcomfortably in a collaborative, agile environment.

Things you will do:Design, implementation and operation of the solutions delivery toolchainSOP and Best Practices development and , implementation and operation of new secure cloud servicesMonitoring security posture of customer infrastructure hosted on Oracle CloudLevel 3 Incident response and production supportSecurity testing, vulnerability assessment and vulnerability advisory communicationsStay ahead of on security threats and mitigation strategiesBasic Qualifications:Bachelors or Masters Degree in Computer Science or related fielddemonstrated ability in security engineering or related field or equivalent experienceStrong application / product / software security backgroundGood cloud infrastructure automation (Terraform, Chef, or similar) backgroundProficient Linux administration, supervising and solvingComfortable with writing non-trivial code in one of Python, Go, Ruby or other high-level languageExperience in working in a DevOps model using any of the major cloud providers Azure, AWS, GCP, OCI, ence with penetration testing, network audits and intrusion detection systemsExcellent organizational, verbal, and written communication skillsPreferred Qualifications:CCNA / CCNP, SANS, OCSP, CISSP, CISA, Firewall and Cloud experience of working on SIEM tools like Splunk to analyze logs and correlate fundamentals in networking dge of networking and security concepts such as IPSec, SSL VPN, Subnets, Security rules, WAF, Load Balancers,FastConnect, network routing, etc (Preferably Oracle Cloud exposure).Oracle products scale, distributed environments experienceKubernetes and Docker experienceSite Reliability engineering experienceResponsible for the planning, design and build of security architectures; oversees the implementation of network and computer security and ensures compliance with corporate security policies and procedures.

Responsible for advanced planning, design and build of security systems, applications, environments and architectures; oversees the implementation of security systems, applications, environments and architectures and ensures compliance with information security standards and corporate security policies and procedures. Provides technical advice and direction to support the design and development of secure architectures. May participate in an incident management team, bringing advanced-level skills to respond to security events in line with Oracle incident response playbooks. Investigates purported intrusions and breaches, and oversees root cause analysis. Coordinates incidents with other business units and may act as Incident Commander of serious incidents. Develops new methods, and playbooks, as well as sophisticated scripts, applications, and tools, and trains others in their use. May participate in an incident management team, responding to security events in line with Oracle incident response playbooks. Investigates purported intrusions and breaches, and oversees root cause analysis. Coordinates incidents with other business units and may act as incident commander of serious incidents. Participates in developing new methods, playbooks throughout Oracle. Evaluates existing and proposed technical architectures for security risk, provides technical advice to support the design and development of secure architectures and recommends security controls to mitigate those risks. Evaluations of internal security architecture may include design assessment, risk assessment, and threat modeling. Brings advanced-level skills to research, evaluate, track, and manage information security threats and vulnerabilities in situations where in-depth analysis of ambiguous information is required, and where computer programming/scripting knowledge is required. Work with Senior management to develop and implement a multi-year security roadmap Focus on operational and strategic level tasks, and provide counsel and guidance to the junior level security operations engineers in the department.

Minimum of 8 years related experience in an information security role supporting security programs and security engineering/architecture in complex enterprise environments. Hands on experience with enterprise security architecture, engineering and implementation required. Knowledge of compliance program security controls, like ISO 27001, SOC 2, HITRUST, and FedRAMP, as applied to cloud SaaS, PaaS and IaaS operations. Familiarity with SDLC principles and scripting & programming languages (such as Terraform, Python, and Ruby). Strong knowledge of: Cloud architecture and security principles. Risk Management Frameworks. *nix and Windows system administration. Experience with: Logging and log analysis. Identity management principles and technology. Preferred but not required qualifications include: Bachelor-level university degree or equivalent experience in a relevant field from an accredited university, or equivalent. Strong knowledge of web technologies, middleware, database, OS, firewalls, network communication protocols and methods. Knowledge of database security principles. Knowledge of encryption technologies and architectures. Expert level experience in evaluating and assessing security threats across a variety of environments and industries. Expert level understanding of secure networking principles, routers, switches and load ity and Inclusion:

An Oracle career can span industries, roles, Countries and cultures, giving you the opportunity to flourish in new roles and innovate, while blending work life in. Oracle has thrived through 40+ years of change by innovating and operating with integrity while delivering for the top companies in almost every industry.

In order to nurture the talent that makes this happen, we are committed to an inclusive culture that celebrates and values diverse insights and perspectives, a workforce that encourages thought leadership and innovation.

Oracle offers a highly competitive suite of Employee Benefits crafted on the principles of parity, consistency, and affordability. The overall package includes certain core elements such as Medical, Life Insurance, access to Retirement Planning, and much more. We also encourage our employees to engage in the culture of giving back to the communities where we live and do business.

At Oracle, we believe that innovation starts with diversity and inclusion and to build the future we need talent from various backgrounds, perspectives, and abilities. We ensure that individuals with disabilities are provided reasonable accommodation to successfully participate in the job application, interview process, and in potential roles. To perform crucial job functions.

That’s why we’re committed to crafting a workforce where all individuals can do their best work. It’s when everyone’s voice is heard and valued that we’re encouraged to go beyond what’s been done before.

Career Level - IC3

Responsible for advanced planning, design and build of security systems, applications, environments and architectures; oversees the implementation of security systems, applications, environments and architectures and ensures compliance with information security standards and corporate security policies and procedures. Provides technical advice and direction to support the design and development of secure architectures. May participate in an incident management team, bringing advanced-level skills to respond to security events in line with Oracle incident response playbooks. Investigates purported intrusions and breaches, and oversees root cause analysis. Coordinates incidents with other business units and may act as Incident Commander of serious incidents. Develops new methods, and playbooks, as well as sophisticated scripts, applications, and tools, and trains others in their use. May participate in an incident management team, responding to security events in line with Oracle incident response playbooks. Investigates purported intrusions and breaches, and oversees root cause analysis. Coordinates incidents with other business units and may act as incident commander of serious incidents. Participates in developing new methods, playbooks throughout Oracle. Evaluates existing and proposed technical architectures for security risk, provides technical advice to support the design and development of secure architectures and recommends security controls to mitigate those risks. Evaluations of internal security architecture may include design assessment, risk assessment, and threat modeling. Brings advanced-level skills to research, evaluate, track, and manage information security threats and vulnerabilities in situations where in-depth analysis of ambiguous information is required, and where computer programming/scripting knowledge is required. Work with Senior management to develop and implement a multi-year security roadmap Focus on operational and strategic level tasks, and provide counsel and guidance to the junior level security operations engineers in the department.