Lead Principal Security Engineer

Oracle•United States,

About The Position

This role involves overseeing comprehensive security assessments, driving research and development of testing tools and methodologies, and providing expert guidance in security design and coding. The position requires proactive participation in security alert reviews and the ability to recognize and escalate complex security violations. The engineer will oversee the containment and mitigation of high-impact security events, contribute to post-event reviews, and coordinate compliance assessments. Responsibilities also include implementing compliance strategies, managing Oracle-wide inventory systems, strategizing business continuity and disaster recovery plans, and overseeing Oracle's readiness for certifications and audits. Additionally, the role involves overseeing the implementation of robust data security frameworks, conducting audits for data security practices, guiding research and innovation in security solutions, monitoring the global security landscape, and driving the adoption of innovative techniques to solve complex security problems. The core responsibilities include managing project timelines, deliverables, and budgets, anticipating resource shifts, influencing cross-functional leaders, fostering partnerships, and championing transparency. The role also involves leading advanced problem-solving efforts, guiding others in data-driven techniques, serving as a thought leader, contributing to industry advancement, and maintaining expertise in emerging trends. Continuous improvement of processes and workflows, and serving as a subject matter expert in talent needs and organizational talent strategy are also key aspects of this position.

Requirements

15 years of experience in software development
Bachelor's of Technology (B.Tech) Degree in Computer Science, Computer Engineering, Software Engineering, Electrical/Electronics Engineering, Computer Information Systems, Information Systems, Information Technology, Telecommunications, Mathematics, Physics, or related field AND 11 years of experience in software development
Bachelor's Degree in Computer Science, Computer Engineering, Software Engineering, Electrical/Electronics Engineering, Computer Information Systems, Information Systems, Information Technology, Telecommunications, Mathematics, Physics, or related field AND 11 years of experience in software development
Master's of Technology (M.Tech) Degree in Computer Science, Computer Engineering, Software Engineering, Electrical/Electronics Engineering, Computer Information Systems, Information Systems, Information Technology, Telecommunications, Mathematics, Physics, or related field AND 9 years of experience in software development
Master's Degree in Computer Science, Computer Engineering, Software Engineering, Electrical/Electronics Engineering, Computer Information Systems, Information Systems, Information Technology, Telecommunications, Mathematics, Physics, or related field AND 9 years of experience in software development
Doctorate in Computer Science, Computer Engineering, Software Engineering, Electrical/Electronics Engineering, Computer Information Systems, Information Systems, Information Technology, Telecommunications, Mathematics, Physics, or related field AND 7 year of experience in software development.
Data Management: Demonstrated ability in or knowledge of data management, including designing, operationalizing, securing, and monitoring data pipelines.
Data Integration: Demonstrated ability in or knowledge of data integration, including specifying and using services to load and manage data from various sources.
5 year of academic or professional experience with cloud platforms (e.g., AWS, Azure, Google, Oracle Cloud).
10 years of experience working in testing and automation at the system level.
4 year of experience working with delivering and operating large-scale distributed systems.

Nice To Haves

16 years of experience in software development
Bachelor's of Technology (B.Tech) Degree in Computer Science, Computer Engineering, Software Engineering, Electrical/Electronics Engineering, Computer Information Systems, Information Systems, Information Technology, Telecommunications, Mathematics, Physics, or related field AND 12 years of experience in software development
Bachelor's Degree in Computer Science, Computer Engineering, Software Engineering, Electrical/Electronics Engineering, Computer Information Systems, Information Systems, Information Technology, Telecommunications, Mathematics, Physics, or related field AND 12 years of experience in software development
Master's of Technology (M.Tech) Degree in Computer Science, Computer Engineering, Software Engineering, Electrical/Electronics Engineering, Computer Information Systems, Information Systems, Information Technology, Telecommunications, Mathematics, Physics, or related field AND 10 years of experience in software development
Master's Degree in Computer Science, Computer Engineering, Software Engineering, Electrical/Electronics Engineering, Computer Information Systems, Information Systems, Information Technology, Telecommunications, Mathematics, Physics, or related field AND 10 years of experience in software development
Doctorate in Computer Science, Computer Engineering, Software Engineering, Electrical/Electronics Engineering, Computer Information Systems, Information Systems, Information Technology, Telecommunications, Mathematics, Physics, or related field AND 8 years of experience in software development.
5 year of experience with cloud platforms (e.g., AWS, Azure, Google, Oracle Cloud).
People Leadership / Management Experience

Responsibilities

Oversees comprehensive security assessments across a wide range of complex products and services.
Drives research and development of cutting-edge testing tools and methodologies, staying at the forefront of security innovation.
Provides expert guidance and leadership in security design and coding (e.g., reviewing code, writing code for complex investigation), influencing Oracle's security strategy and roadmap.
Proactively participates in reviews of security alerts.
Uses deep expertise to recognize and escalate more nuanced, highly complex security violations, leveraging advanced technologies and industry best practices.
Oversees the containment and mitigation of high-impact security events, ensuring effective response and recovery.
Contributes to in-depth post-event reviews, identifying systemic vulnerabilities and driving continuous improvement initiatives.
Coordinates comprehensive compliance assessments, identifying and addressing high-complexity security compliance gaps.
Oversees the review of security compliance deliverables, ensuring alignment with internal and external obligations.
Implements compliance strategies, staying abreast of internal and external obligations.
Oversees the management of Oracle-wide inventory systems, implementing systems and controls to track and secure company assets.
Strategizes business continuity and disaster recovery plans, aligning them with Oracle's goals and internal and external obligations.
Implements comprehensive plans, processes, and procedures to safeguard critical systems and data, leveraging advanced technologies and risk management frameworks.
Oversees Oracle's readiness for certifications and audits, driving continuous improvement and ensuring compliance with relevant standards and regulations.
Oversees the implementation of robust data security frameworks, ensuring the effective utilization of encryption, hashing, masking, access management, and other advanced techniques to ensure the confidentiality and integrity of sensitive information.
Conducts audits to evaluate the effectiveness of existing documentation and procedures, leading efforts to continuously improve data security practices Oracle-wide.
Guides research, thought leadership, and collaboration with stakeholders to drive the development of cutting-edge security solutions that address emerging and future threats.
Monitors the global security landscape, identifying trends, risks, and opportunities for Oracle to maintain a competitive edge in security practices.
Drives the exploration and adoption of innovative techniques and technologies to solve highly complex and newly emerging security problems.
Manages and provides direction on timelines, deliverables, and budgets when applicable for critical high-impact projects or initiatives that impact the line of business, ensuring timely completion and adherence to requirements.
Anticipates and plans for shifts in resources or timelines based on changing business priorities, ensuring optimal outcomes.
Influences cross-functional leaders and external stakeholders to gain alignment on strategic objectives.
Fosters partnerships with key business leaders, stakeholders, and/or customers, identifying opportunities for expanding partnerships and promoting long-term organizational success.
Champions transparency and inclusivity by actively seeking, listening to, and incorporating diverse perspectives.
Leads specialized, advanced problem-solving efforts, serving as an escalation point for complex issues.
Guides others to leverage innovative data-driven techniques to address ambiguous or novel issues, identify root causes, and drives the implementation of solutions that prevent future issues.
Leverages deep industry knowledge and expertise to serve as a thought leader within the organization.
Contributes to the advancement of the field or industry through thought leadership (e.g., conference presentations, white papers, research contributions).
Maintains and evolves expertise in relevant areas by proactively monitoring emerging trends, technologies, and industry standards, ensuring the organization remains current with best practices.
Champions continuous learning and knowledge sharing, promoting professional development across teams.
Applies new knowledge to drive advancement and mentors others to do the same.
Develops innovative solutions and drives the implementation of ideas that increase the efficiency and effectiveness of processes, protocols, and workflows across the organization.
Evaluates effectiveness of updated approaches and methods for continued improvement to enhance efficiencies and ensure changes align with organizational goals.
Designs and develops metrics to measure success of improvement initiatives.
Serves as a subject matter expert regarding talent needs and organizational talent strategy.
Imparts leadership and expert knowledge throughout the talent development pipeline, including candidate interviews, candidate assessment, and hiring decisions, ensuring alignment with organizational talent strategy.
Mentor the team in the architecture and design of highly scalable, interdependent distributed systems, ensuring horizontal and vertical scalability and overall performance, including leveraging distributed state management tools.
Lead the identification of performance and scalability bottlenecks and recommend solutions to optimize code and/or systems for large-scale data processing and high-throughput requirements to improve performance for hyper-scale systems.
Lead collaboration with stakeholders to define system scalability requirements, ensuring the defined requirements meet customer expectations.
Leverage deep expertise to design high-impact, interdependent systems to scale with elasticity (e.g., effectively scaling both up and down).
Drive innovation in the use of data plane platforms.
Evaluate whether systems are meeting nonfunctional scalability requirements, and proactively anticipate growing business needs within the business unit.
Design and oversee the implementation of fault-tolerant, interdependent systems capable of withstanding in-service updates by implementing sophisticated redundancy, replication, and automatic failover capabilities.
Lead the design and implementation of systems that effectively handle service disruptions (e.g., network partitions) by prioritizing consistency, availability, or partition tolerance.
Guide the optimization of advanced mechanisms to handle network unreliability, including load-shedding, throttling, and rate-limiting.
Design interdependent systems that are durable and adhere to service level objectives (SLOs), driving standards for availability and durability of other computing services within the organization.
Define key performance indicators (KPIs) and telemetry to identify risks, gaps, or cyclical dependencies in running, interdependent systems.
Drive the creation and customization of highly complex dashboards, telemetry systems, and alerting mechanisms, proactively ensuring system health and reliability.
Maintain expertise in industry standards for verifying correctness and apply existing techniques to interdependent systems.
Formally verify complex features (e.g., via TLA+) to ensure system design correctness for various interdependent systems.
Develop advanced strategies for data replication and synchronization, ensuring robust data integrity and availability.
Advise on efforts to diagnose, debug, and resolve complex issues in active, interdependent systems to support ongoing operation.
Develop and implement comprehensive strategies to prevent interruptions, ensuring no maintenance windows are required for customers and users when resolving issues.
Maintain expertise in dependencies, dependents, and owned systems to drive effective troubleshooting and performance.
Set standards for operational readiness and standard operating procedures within the department, and hold third-party partners accountable for meeting those standards.
Oversee operational support rotations, providing expert guidance in incident response and leading root cause investigations to prevent future occurrences.
Architect advanced security measures to protect data and applications in multi-tenant environments, and lead initiatives to enhance data and application protection.
Guide the execution of comprehensive remediation plans to address identified security vulnerabilities.
Ensure cloud infrastructure is in compliance with industry standards and regulations, and guide documentation efforts across projects.
Develop enterprise-level automation tools and strategies (e.g., Infrastructure as Code (IaC)) and oversee their implementation.
Drive alignment of change management plans and organizational initiatives for patching, updating, and rolling back applications, and design interdependent systems to allow for automation of these processes.