Principal Security Engineer, Security Data & Reporting

Oracle•Nashville, TN

About The Position

The Principal Security Engineer provides technical leadership and hands-on engineering for security data platforms, reporting applications, and analytics that help operational teams and leadership understand enterprise security posture and make informed risk decisions. The role designs, builds, and operates automated data pipelines, repeatable security metric calculations, and reporting solutions that turn data from multiple systems into accurate, traceable, and actionable information. Working with security subject matter experts, engineering teams, and program leadership, this engineer translates complex measurement needs into secure, reliable, and maintainable solutions. The role resolves integration and data-quality challenges, applies architectural judgment, and independently delivers complex engineering initiatives. It develops and integrates AI-enabled capabilities to improve analysis and reporting, with appropriate validation, human review, and data-access controls. The Principal Security Engineer owns solutions from design through deployment, ongoing operation, and continuous improvement, while providing technical guidance and strengthening shared engineering practices.

Requirements

One of the following experience and education combinations: 11 years of experience in IT security or a related field; a bachelor's degree in Computer Science, Information Technology, Computer Security, Engineering, or a related field plus 7 years of relevant IT security experience; or a master's degree in one of those fields or a related field plus 5 years of relevant IT security experience.
Relevant IT security experience may include developing security reporting solutions, cloud, endpoint, or logging security; vulnerability and risk assessment; identity and access management; or compliance.
Demonstrated knowledge across multiple cybersecurity domains and experience working with security subject matter experts to interpret controls, risks, data sources, and measurement limitations.
Strong SQL and relational database skills, including schema design, data modeling, query development, and performance optimization.
Experience building and maintaining automated data pipelines, API integrations, and data transformation processes.
Proficiency in a programming or scripting language used for integration and automation, such as Python.
Experience developing dashboards, reporting applications, or analytical tools for operational and leadership audiences.
Hands-on experience developing and integrating AI-enabled application features, including evaluating output quality and implementing appropriate data-access and security controls.
Experience implementing data validation, reconciliation, and monitoring to support trustworthy reporting.
Understanding of authentication, authorization, role-based access, and secure handling of sensitive data.
Experience applying testing, version control, documentation, and deployment practices to production solutions.
Ability to translate ambiguous requirements into practical technical solutions, identify dependencies, and communicate tradeoffs clearly.

Nice To Haves

Experience developing applications with Oracle APEX, including SQL and PL/SQL.
Experience with Oracle Database, Oracle Cloud Infrastructure, or comparable cloud data and application platforms.
Experience integrating data from multiple cybersecurity domains, such as vulnerability management, asset management, identity and access management, endpoint security, security monitoring, or cloud security.
Experience implementing security posture metrics, executive reporting, and historical trend analysis.
Experience applying AI-enabled capabilities to enterprise data analysis and reporting, including validating outputs and enforcing appropriate data-access controls.
Familiarity with security frameworks such as NIST CSF, NIST 800-53, ISO 27001, or CIS Controls.
Experience establishing a new data or reporting capability and transitioning manual processes into supported automation.
Experience working across a large organization with distributed data ownership and multiple stakeholder groups.
Relevant security certifications, such as CISSP, CCSP, CCSK, CISM, or Certified Oracle Cloud Infrastructure Security Professional.

Responsibilities

Design, build, and maintain automated integrations that collect data from security tools, enterprise applications, APIs, databases, and other source systems.
Establish centralized data structures and ingestion workflows for reliable security measurement, historical analysis, and reporting, with validation, error handling, monitoring, and recovery capabilities.
Partner with security and engineering teams to assess source-system coverage, data availability, refresh requirements, integration dependencies, and ownership.
Replace manual data collection with supported automation while maintaining data quality, validation, and clear accountability.
Evolve integration architecture to accommodate additional data sources, metrics, and reporting needs while balancing immediate delivery with long-term maintainability.
Translate security measurement requirements into documented data models, transformation logic, and repeatable metric calculations.
Normalize and reconcile data across systems, addressing inconsistent definitions, duplicate records, incomplete coverage, and differences in reporting periods.
Implement and validate metric calculations, baselines, and trends using definitions and targets agreed with security subject matter experts and program leadership.
Maintain traceability from reported metrics to source data, calculation logic, and applicable scope; preserve historical results and manage calculation changes so reporting remains explainable and comparable.
Investigate and communicate data-quality issues, measurement limitations, and assumptions, and recommend improvements to security reporting.
Develop and maintain dashboards and reporting applications using Oracle APEX or comparable technologies.
Translate leadership and operational reporting needs into clear, usable views, incorporate stakeholder feedback, and provide appropriate drill-down capabilities.
Build data submission, validation, review, and publication workflows when automated source integration is not available.
Evaluate whether visualizations communicate intended security outcomes and iteratively improve reporting usability, performance, and maintainability.
Design, develop, and integrate AI-enabled features into security data platforms, dashboards, and reporting workflows.
Evaluate and apply generative AI, large language models, and other analytical techniques for natural-language exploration, contextual analysis, reporting automation, anomaly detection, and forecasting where appropriate.
Connect AI-enabled functionality to authoritative security data and metric definitions, maintaining source traceability and audience-specific access controls.
Establish methods to evaluate accuracy, reliability, and usefulness, including appropriate human review of generated interpretations and recommendations.
Monitor and improve AI-enabled features as data, models, and requirements evolve, using defined measures to assess effectiveness.
Design and implement role-based access and least-privilege permissions for data contributors, reviewers, administrators, and reporting audiences.
Partner with identity, infrastructure, and security teams to integrate authentication and authorization with enterprise standards.
Apply secure credential handling and controls to protect sensitive security data; implement logging and auditability for relevant data changes, administrative actions, and reporting workflows.
Incorporate security requirements into application design, development, testing, and operation, including AI-enabled functionality.
Own developed integrations and reporting applications through deployment, operation, maintenance, and continuous improvement.
Establish testing, version control, deployment practices, and technical documentation that support reliable changes and maintainable solutions.
Monitor data freshness, processing failures, completeness, and reporting availability; investigate issues and coordinate resolution with relevant teams.
Support scheduled reporting and leadership review cycles by validating readiness, addressing issues within agreed delivery windows, and communicating delivery risks.
Develop runbooks and recovery procedures, coordinate database, hosting, and platform requirements, and incorporate operational lessons into engineering practices.
Independently scope and deliver complex engineering initiatives, identify dependencies, estimate effort, and communicate progress, risks, and tradeoffs.
Work with security subject matter experts to understand controls, operational processes, and source data, and identify gaps in requirements, data coverage, and proposed solutions.
Build partnerships across security, engineering, infrastructure, and program teams, aligning implementation plans with stakeholder needs and establishing clear ownership and delivery expectations.
Apply technical judgment to resolve ambiguity and adapt plans as priorities or constraints change; escalate unresolved issues with impact assessments and recommended options.
Expand relevant technical knowledge, mentor colleagues, document and share solutions, and contribute to shared engineering practices.