Security Engineer 3

Oracle•Austin, TX

11h•Remote

About The Position

Responsible for basic planning, design and build of security systems, applications, environments and architectures; oversees the implementation of network and computer security and ensures compliance with corporate security policies and procedures. Oversees the implementation of security systems, applications, environments and architectures and ensures compliance with information security standards and corporate security policies and procedures. Assist in development of incident response capabilities, training, and tool validation. May research, evaluate, track, and manage information security threats and vulnerabilities in situations where analysis of well-understood information is required and where computer programming/scripting knowledge is required. May participate in an incident management team, responding to security events in line with Oracle incident response playbooks. Investigates purported intrusions and breaches, and oversees root cause analysis. Coordinates incidents with other business units and may assist the Incident Commander during serious incidents. Participates in developing new methods, and playbooks, as well as basic scripts, applications, and tools. Research industry trends and constantly assess current controls and threat posture of new and existing products and services. Recommend and implement new security controls across Oracle’s line of business (LOB). Improve current processes and workflows to minimize manual efforts. May telecommute. (385.34261) Employer will accept a Master's degree in Computer Science, Cyber Security, Engineering, or related technical field and 3 years of experience in the job offered or in a Security Engineer-related occupation. Position requires: Application, Cloud and Network Security; Secure Code Review and SAST scans, including Burpsuite, Sync, Checkmarx, Veracode, and Coverity; Risk Assessment and Risk Mitigation; Pen Testing and Security Architecture Reviews; Datacenter security operations, including device and hardware security; Windows and Linux server OS administration; Firewall and Network device, port configuration, SD-WAN – Cisco Meraki, and Multi-cloud; ITIL (Information Technology Infrastructure Library) v3; Threat modeling and Vulnerability management; and Security tooling and Automation. Qualifications Disclaimer: Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates. Range and benefit information provided in this posting are specific to the stated locations only US: Hiring Range in USD from: $82,200 to $178,100 per annum. May be eligible for bonus and equity. Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. Oracle US offers a comprehensive benefits package which includes the following: 1. Medical, dental, and vision insurance, including expert medical opinion 2. Short term disability and long term disability 3. Life insurance and AD&D 4. Supplemental life insurance (Employee/Spouse/Child) 5. Health care and dependent care Flexible Spending Accounts 6. Pre-tax commuter and parking benefits 7. 401(k) Savings and Investment Plan with company match 8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation. 9. 11 paid holidays 10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours. 11. Paid parental leave 12. Adoption assistance 13. Employee Stock Purchase Plan 14. Financial planning and group legal 15. Voluntary benefits including auto, homeowner and pet insurance The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.

Requirements

Master's degree in Computer Science, Cyber Security, Engineering, or related technical field
3 years of experience in the job offered or in a Security Engineer-related occupation
Application, Cloud and Network Security
Secure Code Review and SAST scans, including Burpsuite, Sync, Checkmarx, Veracode, and Coverity
Risk Assessment and Risk Mitigation
Pen Testing and Security Architecture Reviews
Datacenter security operations, including device and hardware security
Windows and Linux server OS administration
Firewall and Network device, port configuration, SD-WAN – Cisco Meraki, and Multi-cloud
ITIL (Information Technology Infrastructure Library) v3
Threat modeling and Vulnerability management
Security tooling and Automation

Responsibilities

planning, design and build of security systems, applications, environments and architectures
implementation of network and computer security
ensuring compliance with corporate security policies and procedures
implementation of security systems, applications, environments and architectures
ensuring compliance with information security standards and corporate security policies and procedures
development of incident response capabilities, training, and tool validation
research, evaluate, track, and manage information security threats and vulnerabilities
participate in an incident management team, responding to security events in line with Oracle incident response playbooks
investigates purported intrusions and breaches, and oversees root cause analysis
coordinates incidents with other business units and may assist the Incident Commander during serious incidents
developing new methods, and playbooks, as well as basic scripts, applications, and tools
research industry trends and constantly assess current controls and threat posture of new and existing products and services
recommend and implement new security controls across Oracle’s line of business (LOB)
improve current processes and workflows to minimize manual efforts

Benefits

Medical, dental, and vision insurance, including expert medical opinion
Short term disability and long term disability
Life insurance and AD&D
Supplemental life insurance (Employee/Spouse/Child)
Health care and dependent care Flexible Spending Accounts
Pre-tax commuter and parking benefits
401(k) Savings and Investment Plan with company match
Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
11 paid holidays
Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
Paid parental leave
Adoption assistance
Employee Stock Purchase Plan
Financial planning and group legal
Voluntary benefits including auto, homeowner and pet insurance