Senior Principal Security Engineer

Oracle•Nashville, TN

About The Position

Security Architecture is comprised of security experts who are focused and specialized in securing all aspects of OCI Cloud. As security experts, we are sought out by our partner engineering organizations to provide guidance on designing their products, services and features. We set OCI wide security standards and hold a high security requirement bar for all services to ensure the highest level of security to our customers. We are currently looking for a highly motivated security engineer with expertise in Cloud security to join our team. This candidate would be involved in architecture, design, prototyping and development of the security aspects of Oracle Cloud's products and services. You should be a security-minded leader who can work with architects and/or a development teams as they design new capabilities to ensure that security requirements are set and the design implements the necessary controls to increase security posture for the service. As a member of the Security Architecture team, you will be required to have a firm grasp on security technologies, trends in cloud security practices, and ability to communicate complex technical security requirements clearly to the development teams, risk assessment, risk mitigation and security tools/automation.

Requirements

A minimum of 8+ years of experience with at least 5+ years in Cloud Security required and 2+ years in AI and ML is good to have. Or a BS or MS in Computer Science/Engineering with a focus on AI/Security, or a related field with a minimum of 8 years of experience in the field is required.
Experience in architecture, design, deployment, and handling of standard security practices and policies is required.
Expertise in Encryption, Key management, Cybersecurity fundamentals (e.g., access controls, common software vulnerabilities, and security best practices), Deployment Methodologies, and Security Standards Compliance Certification (STIG, FedRAMP, PCI-DSS), etc.
Very good understanding of concepts related to Docker, Container, Serverless Computing, and Kubernetes.
Ability to design large scalable systems for cloud customers with focus on security.
Excellent written and verbal communication skills, strong analytical and problem-solving skills.

Nice To Haves

A strong background in AI, machine learning, and deep learning.
Experience in applying AI technology to security domain.
Experience as a security leader for a cloud product or set of cloud services, with expertise in IaaS, PaaS.
Experience with architecture security reviews for products or services operating in a cloud environment, especially those which are reliant on homegrown or third-party LLMs and APIs is a plus.
Expertise in concepts of Multi-tenancy, Cloud Security and Virtualization, Access Management, OAuth, Cloud SSO, Identity Provisioning, Identity Governance etc.
Network security, VPN/Firewalls and software-defined networking experience is a plus.
Experience operating within and supporting a security assurance and assessment program

Responsibilities

Conduct threat modeling, security architecture reviews, risk assessment and provide guidance on mitigating the identified issues.
Create and maintain technical security standards and patterns and set the benchmark for AI security requirement bar at OCI.
Stay up-to-date on the latest advancements in AI technologies and apply them to improve OCI's security posture.
Provide expert security guidance to service teams to ensure their products, services and feature are secure by default.
Lead OCI-wide cloud security initiatives to enhance overall cloud security posture.
Provide mentorship to junior engineers on the team.

Benefits

Medical, dental, and vision insurance, including expert medical opinion
Short term disability and long term disability
Life insurance and AD&D
Supplemental life insurance (Employee/Spouse/Child)
Health care and dependent care Flexible Spending Accounts
Pre-tax commuter and parking benefits
401(k) Savings and Investment Plan with company match
Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
11 paid holidays
Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
Paid parental leave
Adoption assistance
Employee Stock Purchase Plan
Financial planning and group legal
Voluntary benefits including auto, homeowner and pet insurance