Manager, Security Research

Oracle•United States,

13d•$114,600 - $234,600

About The Position

The Manager, Security Research guides and supervises a team conducting in-depth security assessments and vulnerability research across on-premises and cloud-based systems. The role includes overseeing reverse engineering, such as network protocol analysis and static and dynamic analysis; determining security models; identifying and documenting vulnerabilities; and developing exploits. The manager reviews threat assessment reports and presents findings to senior management. The role evaluates complex systems and strategic security concerns in infrastructure and software engineering designs. It coordinates proof-of-concept tool development at the intersection of application security, advises teams on secure product design, and oversees the creation of scalable systems and automated tools for finding security weaknesses, including tools enhanced by AI and binary analysis. The manager leads application security and security research thought leadership, supports engineering teams in triaging and fixing issues, shares best practices, and helps team members establish expertise through publications and conference presentations. The role also monitors attacker tactics, techniques, and procedures; assesses their relevance to Oracle products; and maintains current technical knowledge of emerging technologies. As a people manager, the role plans and delegates team work, manages priorities and resources, builds cross-team partnerships, addresses operational and technical issues, promotes continuous learning and process improvement, coaches team members, supports performance and career development, and contributes to hiring and talent management. Oracle US lists a hiring range of $114,600 to $234,600 per year. The role may also be eligible for bonus, equity, and compensation deferral.

Responsibilities

Guide and supervise in-depth security assessments and vulnerability research on on-premises and cloud-based systems, including reverse engineering, network protocol analysis, and static and dynamic analysis.
Ensure the team determines security models, identifies vulnerabilities, creates exploits, and documents findings.
Review and align threat assessment reports and present assessment and research findings to senior management.
Guide and mentor the team in evaluating complex systems and strategic security concerns in infrastructure and software engineering designs.
Coordinate and supervise development of proof-of-concept tools at the intersection of application security.
Provide and supervise recommendations to other teams on secure product development and design.
Review directives and guidance intended to prevent security issues from recurring or emerging.
Support development of automated security tools and oversee use of technologies such as AI, including proof-of-concept binary analysis tools for engineering teams.
Supervise development of systems and tools for identifying security vulnerabilities and concerns at scale.
Lead the team in application security and its relationship to security research and application security tools.
Mentor collaboration with engineering teams to triage and fix identified security issues.
Share security best practices and techniques, and help team members build expertise through papers and conference presentations.
Keep the team current on attacker tactics, techniques, and procedures; emulate them in technical risk assessments and respond to new threat scenarios.
Assess whether emerging attack patterns are relevant to Oracle products and identify potential mitigations.
Maintain current technical knowledge of emerging technologies, including AI, and mentor junior team members in software security.
Create and own execution plans for team work and multiple projects or initiatives, monitoring timelines and budgets when applicable.
Delegate work, help the team prioritize, identify resource needs, and adapt plans to changing priorities and business needs.
Build collaborative partnerships across teams and guide team members in relationships with business leaders, stakeholders, and customers.
Promote active listening and an inclusive culture.
Lead the team in identifying and addressing moderately complex operational and technical issues, and direct analysis of information from multiple sources to troubleshoot errors.
Seek learning opportunities, use feedback and training to develop skills, identify team skill gaps, and foster knowledge-sharing.
Recommend process, protocol, and workflow improvements; review team ideas and seek input on alternative approaches.
Coach and direct team members in line with performance management expectations, facilitate goal setting, and identify development opportunities.
Lead candidate interviews, assess promotion eligibility, and manage talent resources.