Director, Security Engineering

Oracle•United States,

About The Position

The Service Excellence team at Oracle Analytics Cloud is transforming the development paradigms at Oracle. With the world moving towards the Cloud, Oracle is at the forefront with a tremendous portfolio of Cloud offerings. This transformation happens not just at the product level, but also the process of conceptualizing, developing, and deploying products for the Cloud. Using a combination of cutting-edge technologies, continuous process improvements, and innovative business transformation methodologies, a small group is blazing the trail on the Service Excellence philosophy. We are looking for a Security leader who wants to challenge the norm of Security and manage our Oracle Analytics Cloud Service Excellence (OASE) Security Architecture, Pen testing and engineering teams. Prior experience in mentoring and managing a Security team supporting a complex cloud product is essential for success in this role. The manager will design and manage continuous improvement programs and deliverables. If you are looking for a place where you can bring in your Security skills, creativity and use the latest cloud tools and frameworks, look no further.

Requirements

10+ years as an engineer with hands-on security architecture, pen-testing, engineering experience.
4+ years as a Director or VP Level management at a very large organization, such as Fortune 500 or similar.
Experience leading first line managers and directors with different accountability across multiple departments with a scope of 20+ direct reports.
Strong leadership skills planning, organizing, leading, and measuring service-driven teams.
Good interpersonal and communications skills to build/maintain ongoing business relationships.
Experience with Security, standards, policies, procedures, patterns, risk assessments and engineering.
Experience with compliance regulations/laws, security frameworks and standards (e.g., NIST, HIPAA, ISO, COBIT, OWASP, ITIL, etc.).
Ability to exercise and mentor others on good professional judgment and security-related ethics.
Experience with highly sensitive regulated data associated with industries such as healthcare.
Experience with driving AI and Automation in all areas of Security services and engineering.
12 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field OR Bachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 8 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field OR Master's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 6 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.

Nice To Haves

Knowledge of the healthcare, distribution, or software industries is a plus.
Experience with law enforcement, defense, or intelligence community a plus.
OSCP, SANS/GIAC, CISSP or other similar professional certifications are a plus.
Ability to obtain and maintain a federal security clearance strongly preferred.
13 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field OR Bachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 9 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field OR Master's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 7 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.
4 years of experience in a leadership role with direct reports.
3 years of experience working with operating budgets and/or project financials.
5 years of experience working on high-impact projects related to cloud or internet software security.
5 years of experience working with one or more of the following programming or scripting languages (e.g., Go, Java, Python, or C/C++).
1 year of experience with AWS Solution, Azure 900 Fundamentals, OCI Fundamentals, or equivalent cloud experience.
Information security or equivalent certifications (e.g., Certified Oracle Cloud Infrastructure Security Professional, Certificate of Cloud Security Knowledge [CCSK], Certified Information Security Manager [CISM], Certified Information Systems Security Professional [CISSP], Certified Ethical Hacker [CEH], Certified Cloud Security Professional [CCSP], Offensive Security Certified Professional [OSCP], Cisco Certified Network Associate [CCNA], Certified Information Systems Auditor [CISA], CompTIA Security+).

Responsibilities

Lead a team with the ability to flex up as needed.
Have a deep background in all aspects of security architecture, pen-testing and engineering including infrastructure, application, cloud, and mobile.
Work multi-functionally with the Oracle Analytics product, development and operations team and key partners in Oracle Infrastructure Cloud teams - Operations, Applications, Data Management, Release management, Compliance and Legal to ensure alignment.
Help represent information security on various projects and be a key driver on Security automation for services within the organization.
Develops and maintains a comprehensive vision and strategy for security architecture, pen-testing and engineering to accomplish department objectives of protecting our systems and data while facilitating new and existing business models highly dependent on technology.
Lead a portfolio of architecture related services including the pipeline of projects/tasks to make sure services are kept secure, built, evolve, and change them as needed for release features and scale out.
Direct a team that includes managing a team of Security experts in a variety of time zones.
Align work with the OASE Security team members to business needs.
Provide team members mentoring and guidance on their career growth.
Ensure the timely execution of critical Security activities with the Oracle analytics organization.
Continuously guide the team in building innovative best practices and solutions using the best of breed technologies that have a pervasive impact on all of Oracle Analytics organization.
Work closely with the Product, Development, PM, and other Oracle Analytics organization leaders and teams to deliver on key programs for customers on time and without negative impact.
Develop professional relationships at all levels driving cultural change to align managed services delivery with our cloud delivery principles and values.
Provide security technical and project leadership for fine-grained solutions including developing robust security reference architectures.
Leverage existing solutions and global design to drive standardization and simplification to reduce implementation timelines, taxing of teams and costs.
Identify critical path decisions, make recommendations, and influence program leaders / business process owners.
Communicate with internal and external contributing organizations.
Understand technical issues and their implications to the business and be able to communicate them to management and other business leaders.
Drive consideration of cybersecurity tools and datasets to enhance detective and preventive control sets, through automation.
Routinely collaborate with other team members in security software engineering, identity and access management, security systems administration/tools management, application security, and our cybersecurity active defense group to defend our Services from constantly evolving threats.
Coordinate closely with the OA Development, OASE Release management teams to provide regular metrics and reporting to measure the efficiency and effectiveness of the services, facilitate appropriate resource allocation, and increase the overall maturity of related security capabilities.
Collaborate with other corporate functions including Internal Audit, Legal and Compliance, Privacy, and Enterprise Sourcing to ensure that the organization maintains a strong security posture.