Senior Director, Security Architecture

Oracle•Reston, VA

About The Position

Oracle seeks a Senior Director of Security Architecture to lead enterprise-wide product security architecture for Oracle Cloud and Applications. You will set the strategy and operate a modern, risk-based security review program, champion a cloud-first threat modeling methodology, and leverage Oracle's world leading AI capabilities to increase consistency, coverage, and speed—while keeping expert human judgment at the core. Partnering with Engineering, Product, Security, Compliance, and Cloud Operations, you will define patterns, standards, and guardrails that enable teams to build securely and ship faster. You will lead a high-performing team, establish measurable outcomes, and represent security architecture in executive forums, audits, and customer engagements.

Responsibilities

Develop a cloud-first threat model and attack tree methodology; support engineers through pattern-led, pre-reviewed development plans.
Deliver best-in-class, risk-based, human-led security review processes across services and products, from design through production.
Define and govern secure-by-design architecture standards, reusable security patterns, and reference implementations for cloud-native services.
Evolve security processes using applied AI where appropriate, including creation and curation of review materials, highlighting areas of interest, and comparing expressed designs with pre-developed patterns.
Integrate security architecture into SDLC and platform workflows (design reviews, SDL gates, IaC, CI/CD), prioritizing automation and developer experience.
Partner with Engineering, Product, Cloud Ops/SRE, Identity, Data, Privacy, and Compliance to mitigate risk, meet regulatory obligations, and improve resilience.
Establish KPIs/OKRs (risk reduction, review SLAs, defect escape rates, MTTR) and report progress and risk posture to leadership.
Lead talent strategy: hire, develop, and mentor a diverse team; foster a culture of pragmatism, empathy for builders, and continuous improvement.
Conduct and oversee high-impact architecture reviews, M&A due diligence, and vendor/third-party security assessments; guide build-vs-buy decisions.
Translate emerging threats and standards into actionable guidance (e.g., cloud multi-tenancy, IAM, secrets, data protection, PQC readiness).
Drive incident learnings back into design patterns and controls; ensure auditability and documentation for internal/external reviews.
Champion responsible use of AI and data handling in security tooling and processes, aligned with Oracle’s security, privacy, and compliance guidelines.

Benefits

Medical, dental, and vision insurance, including expert medical opinion
Short term disability and long term disability
Life insurance and AD&D
Supplemental life insurance (Employee/Spouse/Child)
Health care and dependent care Flexible Spending Accounts
Pre-tax commuter and parking benefits
401(k) Savings and Investment Plan with company match
Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
11 paid holidays
Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
Paid parental leave
Adoption assistance
Employee Stock Purchase Plan
Financial planning and group legal
Voluntary benefits including auto, homeowner and pet insurance