Lead Principal Security Engineer
Oracle · United States · 5d ago
Key Responsibilities
Security Monitoring - Security Tool Design and Development:
–Oversees comprehensive security assessments across a wide range of complex products and services.
–Drives research and development of cutting-edge testing tools and methodologies, staying at the forefront of security innovation.
–Provides expert guidance and leadership in security design and coding (e.g., reviewing code, writing code for complex investigation), influencing Oracle's security strategy and roadmap.
–Proactively participates in reviews of security alerts.
Event Response:
–Uses deep expertise to recognize and escalate more nuanced, highly complex security violations, leveraging advanced technologies and industry best practices.
–Oversees the containment and mitigation of high-impact security events, ensuring effective response and recovery.
–Contributes to in-depth post-event reviews, identifying systemic vulnerabilities and driving continuous improvement initiatives.
Compliance:
–Coordinates comprehensive compliance assessments, identifying and addressing high-complexity security compliance gaps.
–Oversees the review of security compliance deliverables, ensuring alignment with internal and external obligations.
–Implements compliance strategies, staying abreast of internal and external obligations.
–Oversees the management of Oracle-wide inventory systems, implementing systems and controls to track and secure company assets.
Business Continuity Support:
–Strategizes business continuity and disaster recovery plans, aligning them with Oracle's goals and internal and external obligations.
–Implements comprehensive plans, processes, and procedures to safeguard critical systems and data, leveraging advanced technologies and risk management frameworks.
–Oversees Oracle's readiness for certifications and audits, driving continuous improvement and ensuring compliance with relevant standards and regulations.
Data Security and Privacy:
–Oversees the implementation of robust data security frameworks, ensuring the effective utilization of encryption, hashing, masking, access management, and other advanced techniques to ensure the confidentiality and integrity of sensitive information.
–Conducts audits to evaluate the effectiveness of existing documentation and procedures, leading efforts to continuously improve data security practices Oracle-wide.
Research and Innovation:
–Guides research, thought leadership, and collaboration with stakeholders to drive the development of cutting-edge security solutions that address emerging and future threats.
–Monitors the global security landscape, identifying trends, risks, and opportunities for Oracle to maintain a competitive edge in security practices.
–Drives the exploration and adoption of innovative techniques and technologies to solve highly complex and newly emerging security problems.
Core Responsibilities
Planning & Execution:
–Manages and provides direction on timelines, deliverables, and budgets when applicable for critical high-impact projects or initiatives that impact the line of business, ensuring timely completion and adherence to requirements.
–Anticipates and plans for shifts in resources or timelines based on changing business priorities, ensuring optimal outcomes.
Collaboration & Partnership:
–Influences cross-functional leaders and external stakeholders to gain alignment on strategic objectives.
–Fosters partnerships with key business leaders, stakeholders, and/or customers, identifying opportunities for expanding partnerships and promoting long-term organizational success.
–Champions transparency and inclusivity by actively seeking, listening to, and incorporating diverse perspectives.
Problem Solving:
–Leads specialized, advanced problem-solving efforts, serving as an escalation point for complex issues.
–Guides others to leverage innovative data-driven techniques to address ambiguous or novel issues, identify root causes, and drives the implementation of solutions that prevent future issues.
Continuous Learning:
–Leverages deep industry knowledge and expertise to serve as a thought leader within the organization.
–Contributes to the advancement of the field or industry through thought leadership (e.g., conference presentations, white papers, research contributions).
–Maintains and evolves expertise in relevant areas by proactively monitoring emerging trends, technologies, and industry standards, ensuring the organization remains current with best practices.
–Champions continuous learning and knowledge sharing, promoting professional development across teams. Applies new knowledge to drive advancement and mentors others to do the same.
Continuous Improvement:
–Develops innovative solutions and drives the implementation of ideas that increase the efficiency and effectiveness of processes, protocols, and workflows across the organization.
–Evaluates effectiveness of updated approaches and methods for continued improvement to enhance efficiencies and ensure changes align with organizational goals.
–Designs and develops metrics to measure success of improvement initiatives.
Performance and Development:
–Serves as a subject matter expert regarding talent needs and organizational talent strategy.
–Imparts leadership and expert knowledge throughout the talent development pipeline, including candidate interviews, candidate assessment, and hiring decisions, ensuring alignment with organizational talent strategy.
Key Responsibilities
System Design & Architecture - System Scalability:
–Mentor the team in the architecture and design of highly scalable, interdependent distributed systems, ensuring horizontal and vertical scalability and overall performance, including leveraging distributed state management tools.
–Lead the identification of performance and scalability bottlenecks and recommend solutions to optimize code and/or systems for large-scale data processing and high-throughput requirements to improve performance for hyper-scale systems.
–Lead collaboration with stakeholders to define system scalability requirements, ensuring the defined requirements meet customer expectations.
–Leverage deep expertise to design high-impact, interdependent systems to scale with elasticity (e.g., effectively scaling both up and down).
–Drive innovation in the use of data plane platforms.
–Evaluate whether systems are meeting nonfunctional scalability requirements, and proactively anticipate growing business needs within the business unit.
System Design & Architecture - System Reliability Design:
–Design and oversee the implementation of fault-tolerant, interdependent systems capable of withstanding in-service updates by implementing sophisticated redundancy, replication, and automatic failover capabilities.
–Lead the design and implementation of systems that effectively handle service disruptions (e.g., network partitions) by prioritizing consistency, availability, or partition tolerance.
–Guide the optimization of advanced mechanisms to handle network unreliability, including load-shedding, throttling, and rate-limiting.
–Design interdependent systems that are durable and adhere to service level objectives (SLOs), driving standards for availability and durability of other computing services within the organization
System Design & Architecture - System Reliability Performance:
–Define key performance indicators (KPIs) and telemetry to identify risks, gaps, or cyclical dependencies in running, interdependent systems.
–Drive the creation and customization of highly complex dashboards, telemetry systems, and alerting mechanisms, proactively ensuring system health and reliability.
System Design & Architecture - Correctness / Availability:
–Maintain expertise in industry standards for verifying correctness and apply existing techniques to interdependent systems.
–Formally verify complex features (e.g., via TLA+) to ensure system design correctness for various interdependent systems.
–Develop advanced strategies for data replication and synchronization, ensuring robust data integrity and availability
Operational Troubleshooting & Incident Management:
–Advise on efforts to diagnose, debug, and resolve complex issues in active, interdependent systems to support ongoing operation.
–Develop and implement comprehensive strategies to prevent interruptions, ensuring no maintenance windows are required for customers and users when resolving issues.
–Maintain expertise in dependencies, dependents, and owned systems to drive effective troubleshooting and performance.
–Set standards for operational readiness and standard operating procedures within the department, and hold third-party partners accountable for meeting those standards.
–Oversee operational support rotations, providing expert guidance in incident response and leading root cause investigations to prevent future occurrences.
Compliance & Security:
–Architect advanced security measures to protect data and applications in multi-tenant environments, and lead initiatives to enhance data and application protection.
–Guide the execution of comprehensive remediation plans to address identified security vulnerabilities.
–Ensure cloud infrastructure is in compliance with industry standards and regulations, and guide documentation efforts across projects.
Automation & Change Management:
–Develop enterprise-level automation tools and strategies (e.g., Infrastructure as Code (IaC)) and oversee their implementation.
–Drive alignment of change management plans and organizational initiatives for patching, updating, and rolling back applications, and design interdependent systems to allow for automation of these processes.
Core Responsibilities
Planning & Execution:
–Manages and provides direction on timelines, deliverables, and budgets when applicable for critical high-impact projects or initiatives that impact the line of business, ensuring timely completion and adherence to requirements. Anticipates and plans for shifts in resources or timelines based on changing business priorities, ensuring optimal outcomes.
Collaboration & Partnership:
–Influences cross-functional leaders and external stakeholders to gain alignment on strategic objectives. Fosters partnerships with key business leaders, stakeholders, and/or customers, identifying opportunities for expanding partnerships and promoting long-term organizational success. Champions transparency and inclusivity by actively seeking, listening to, and incorporating diverse perspectives.
Problem Solving:
–Leads specialized, advanced problem-solving efforts, serving as an escalation point for complex issues. Guides others to leverage innovative data-driven techniques to address ambiguous or novel issues, identify root causes, and drives the implementation of solutions that prevent future issues.
Continuous Learning:
–Leverages deep industry knowledge and expertise to serve as a thought leader within the organization. Contributes to the advancement of the field or industry through thought leadership (e.g., conference presentations, white papers, research contributions). Maintains and evolves expertise in relevant areas by proactively monitoring emerging trends, technologies, and industry standards, ensuring the organization remains current with best practices. Champions continuous learning and knowledge sharing, promoting professional development across teams. Applies new knowledge to drive advancement and mentors others to do the same.
Continuous Improvement:
–Develops innovative solutions and drives the implementation of ideas that increase the efficiency and effectiveness of processes, protocols, and workflows across the organization. Evaluates effectiveness of updated approaches and methods for continued improvement to enhance efficiencies and ensure changes align with organizational goals. Designs and develops metrics to measure success of improvement initiatives.
Performance and Development:
–Serves as a subject matter expert regarding talent needs and organizational talent strategy. Imparts leadership and expert knowledge throughout the talent development pipeline including candidate interviews, candidate assessment, and hiring decisions, ensuring alignment with organizational talent strategy.
Certain U.S. based or U.S. customer or client-facing roles may be required to comply with applicable requirements, such as immunization/occupational health mandates, and/or drug testing requirements.
Range and benefit information provided in this posting are specific to the stated locations only
US: Hiring Range in USD from: $146,300 to $306,400 per annum. May be eligible for bonus, equity, and compensation deferral.
Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business.
Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.
Oracle US offers a comprehensive benefits package which includes the following:
1. Medical, dental, and vision insurance, including expert medical opinion
2. Short term disability and long term disability
3. Life insurance and AD&D
4. Supplemental life insurance (Employee/Spouse/Child)
5. Health care and dependent care Flexible Spending Accounts
6. Pre-tax commuter and parking benefits
7. 401(k) Savings and Investment Plan with company match
8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
9. 11 paid holidays
10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
11. Paid parental leave
12. Adoption assistance
13. Employee Stock Purchase Plan
14. Financial planning and group legal
15. Voluntary benefits including auto, homeowner and pet insurance
The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.
As part of Oracle's onboarding process and consistent with applicable law, US-based employees are required to complete identity verification, which involves the collection and processing of their biometric information. Accommodations to this requirement may be granted following an individualized assessment.