Information Security Snr Manager

Oracle•Reston, VA

22h•Hybrid

About The Position

Behind every mission-critical Cloud service is a sophisticated SaaS architecture supporting the largest companies in the world, employing the most advanced software engineering. We are proud to support those services and team with customers who depend on them, continually innovating and challenging the status quo. Our team environment is progressive, flexible, professionally challenging, rewarding, and fun. We are looking for an experienced SOC Manager to lead and evolve our security operations efforts in reshaping the cloud services landscape across industry verticals to revolutionize the delivery of Cloud Services to the world’s most critical organizations. The SaaS Cloud Security (SCS) organization is responsible for securing enterprise-grade software services on behalf of our customers at scale. In this role, you will lead a team of security analysts responsible for 24x7x365 monitoring, detection, and response to protect the Oracle SaaS environment. You will drive SOC modernization with a strong emphasis on automation, AI-enabled workflows, emerging threats, continuous procedure evaluation , and cross-organization collaboration . You will also champion “ shift-left ” security by partnering with engineering, operations, and security stakeholders to prevent incidents earlier through improved controls, instrumentation, and resilient design. (Modernization focus aligned to the SOC automation/AI direction in the source.) Career Level Manager (People Leader)

Requirements

Demonstrated 5+ years of experience leading security operations / incident response teams in enterprise environments (people leadership, hiring, coaching, performance management).
Strong knowledge of incident detection and response practices, including escalation, evidence handling, and operational reporting/trend analysis.
Experience utilizing enterprise security solutions including but not limited to SIEM , security detection and response tools, and endpoint security products.
Experience modernizing a SOC: automation/SOAR program development, use-case lifecycle management, alert quality improvements, and measurable outcomes (e.g., MTTD/MTTR).
Ability to analyze attacker tactics, techniques, and procedures (TTPs); strong log analysis, deduction, analytical, and problem-solving skills.
Knowledge of Information Security standards and access controls such as ISO27001/2, PCI DSS , and other international standards.
Strong technical experience with Linux or similar Unix platforms, as well as with Windows.
Strong organizational skills and detail-orientation essential; strong presentation, written and verbal communication skills.
Knowledge of virtualization and scripting.
US Citizenship required

Nice To Haves

University degree preferred, not required.
Industry certifications are preferred; CISSP/CISM, GIAC
Knowledge of application security highly desirable
Hold or ability to obtain TS/SCI clearance for Critical-Sensitive Positions; FS Poly clearance highly desirable.

Responsibilities

Lead and manage SOC operations to collectively support 24x7x365 monitoring and response coverage; ensure consistent shift handoffs and operational continuity.
Ensure the confidentiality, availability, and integrity of cloud data and systems; reinforce practices that respect and protect customer data.
Drive SOC modernization initiatives across people, process, and technology (operating model, metrics/KPIs, quality assurance, and continuous improvement).
Oversee monitoring of security controls to detect and prevent infiltration of company systems and exfiltration of company data by adversaries; ensure effective escalation and coordination for remediation and forensics.
Mature detection engineering and operations by improving correlation across disparate log sources, baselining, and expanding behavior-based alerting aligned to current attacker TTPs.
Establish and continuously evaluate SOC procedures (SOPs/runbooks), incident severity classification, escalation criteria, and communications processes; run recurring exercises and lessons learned.
Lead automation of SOC workflows using SOAR tools and/or scripts; prioritize high-value playbooks (enrichment, deduplication, triage assistance, containment with guardrails).
Champion AI-enabled SOC capabilities (e.g., alert clustering, assisted triage, summarization) with appropriate governance and analyst-in-the-loop practices; measure impact on quality and speed.
Maintain awareness of latest industry trends and threat intelligence ; direct hunts/initiatives that address emerging threats and translate learnings into durable detections and playbooks.
Provide management with monitoring reports and trend analysis; drive actionable outcomes from metrics (noise reduction, coverage gaps, staffing/training needs).
Provide excellent customer service to Operations and partner teams reporting policy violations, potential incidents, and requesting security solution support.
Drive cross-organization collaboration with security, customer support, cloud operation and engineering teams to implement “shift-left” improvements that reduce incident volume upstream (instrumentation, guardrails, secure defaults, response-ready architectures).
Perform other duties as assigned.

Benefits

Medical, dental, and vision insurance, including expert medical opinion
Short term disability and long term disability
Life insurance and AD&D
Supplemental life insurance (Employee/Spouse/Child)
Health care and dependent care Flexible Spending Accounts
Pre-tax commuter and parking benefits
401(k) Savings and Investment Plan with company match
Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
11 paid holidays
Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
Paid parental leave
Adoption assistance
Employee Stock Purchase Plan
Financial planning and group legal
Voluntary benefits including auto, homeowner and pet insurance