Director – Security Engineering

Who are we?

The Service Excellence team at Oracle Analytics Cloud is on the verge of transforming the development paradigms at the 45 years old Software Giant. With the world moving towards the Cloud, Oracle is at the forefront with tremendous portfolio of Cloud offerings.

However, this transformation happens not just at the product level, but also the process of conceptualizing, developing and deploying the products for the Cloud. Using a combination of cutting edge technologies, continuous process improvements, and innovative business transformation methodologies, a small group of us are blazing the trail on the Service Excellence philosophy.

Who are we looking for?

A Security leader who wants to challenge the norm of Security and manage our Oracle Analytics Cloud Service Excellence (OASE) Security Architecture, Pen testing and engineering teams. 

Prior experience in mentoring and managing a Security team supporting a complex cloud product is essential per-requisites for you to be successful in this role. The manager will design and manage continuous improvement programs and deliverables. If you are looking for a place where you can bring in your Security skills, creativity and use the latest cloud tools and frameworks look no further.

Responsibilities displayed in the job posting

As OASE Director of Security Architecture, Pen-testing & Engineering, you will lead a team with the ability to flex up as needed. You will have a deep background in all aspects of security architecture, pen-testing and engineering including infrastructure, application, cloud, and mobile. 

 You will work multi-functionally with the Oracle Analytics product, development and operations team and key partners in Oracle Infrastructure Cloud teams - Operations, Applications, Data Management, Release management, Compliance and Legal to ensure alignment. You will also help represent information security on various projects and key driver on Security automation for services within organization. 

 Strategic Planning – Develops and maintains a comprehensive vision and strategy for security architecture, pen-testing and engineering to accomplish department objectives of protecting our systems and data while facilitating new and existing business models highly dependent on technology.

Program Management - Lead a portfolio of architecture related services including the pipeline of projects/tasks to make sure services are kept secure, built evolve, and change them as needed for release features and scale out. 

Disclaimer:

Certain U.S. based or U.S. customer or client-facing roles may be required to comply with applicable requirements, such as immunization/occupational health mandates, and/or drug testing requirements.

Range and benefit information provided in this posting are specific to the stated locations only

US: Hiring Range in USD from: $146,300 to $306,400 per annum. May be eligible for bonus, equity, and compensation deferral.


Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business.
Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.

Oracle US offers a comprehensive benefits package which includes the following:
1. Medical, dental, and vision insurance, including expert medical opinion
2. Short term disability and long term disability
3. Life insurance and AD&D
4. Supplemental life insurance (Employee/Spouse/Child)
5. Health care and dependent care Flexible Spending Accounts
6. Pre-tax commuter and parking benefits
7. 401(k) Savings and Investment Plan with company match
8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
9. 11 paid holidays
10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
11. Paid parental leave
12. Adoption assistance
13. Employee Stock Purchase Plan
14. Financial planning and group legal
15. Voluntary benefits including auto, homeowner and pet insurance

The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.
As part of Oracle's onboarding process and consistent with applicable law, US-based employees are required to complete identity verification, which involves the collection and processing of their biometric information. Accommodations to this requirement may be granted following an individualized assessment.

Leadership and Services – Direct a team that includes:

• Manage a team of Security experts in the a variety of time zones 
• Align work with the OASE Security team members to business needs 
• Provide the team members mentoring and guidance on their career growth.
• Ensure the timely execution of critical Security activities with Oracle analytics organization.
• Continuously guide the team in building innovative best practices and solutions using the best of breed technologies that has pervasive impact on all of Oracle Analytics organization.
• Work closely with the Product, Development, PM, and other Oracle Analytics organization leaders and teams to deliver on key programs for customers on time and without negative impact.
• Develop professional relationships at all levels driving cultural change to align managed services delivery with our cloud delivery principles and values.
• Security technical and project leadership for fine grained solutions including developing robust security reference architectures
• Leverage existing solutions and global design to drive standardization and simplification to reduce implementation timelines, taxing of teams and costs
• Identify critical path decisions, make recommendations, and influence program leaders / business process owners
• Communicate with internal and external contributing organizations
• Understand technical issues and the implications to the business and be able to communicate them to management and other business leaders
• Drive consideration of cybersecurity tools and datasets to enhance detective and preventive control sets, through automation
• Routinely collaborate with other team members in security software engineering, identity and access management, security systems administration/tools management, application security, and our cybersecurity active defense group to defend our Services from constantly evolving threats
• Coordinate closely with the OA Development, OASE Release management teams to provide regular metrics and reporting to measure the efficiency and effectiveness of the services, facilitate appropriate resource allocation, and increase the overall maturity of related security capabilities.
• Collaborate with other corporate functions including Internal Audit, Legal and Compliance, Privacy, and Enterprise Sourcing to ensure that the organization maintains a strong security posture

Minimum Requirements

• 10+ years as an engineer with hands on security architecture, pen-testing, engineering experience
• 4+ years as a Director or VP Level management at a very large organization, such as Fortune 500 or similar
• Experience leading first line managers and directors with different accountability across multiple departments with a scope of 20+ direct reports

Critical Skills

• Strong leadership skills planning, organizing, leading, and measuring service driven teams
• Good interpersonal and communications skills to build/ maintain ongoing business relationships
• Experience with Security, standards, policies, procedures, patterns, risk assessments and engineering
• Experience with compliance regulations/laws, security frameworks and standards (e.g., NIST, HIPAA, ISO, COBIT, OWASP, ITIL, etc.)
• Ability to exercise and mentor others on good professional judgment and security-related ethics 
• Experience with highly sensitive regulated data associated with industries such as healthcare
• Experience with driving AI and Automation in all areas of  Security services and engineering 

Additional Knowledge & Skills

• Knowledge of the healthcare, distribution, or software industries is a plus
• Experience with law enforcement, defense, or intelligence community a plus
• OSCP, SANS/GIAC, CISSP or other similar professional certifications are a plus
• Ability to obtain  and maintain a federal security clearance strongly preferred