Senior Security Risk Engineer

Oracle • Nashville, TN

3d

About The Position

Oracle Security & GRC is hiring a Senior Security Risk Engineer to build and scale security risk intelligence and automation. The role connects information from security assessments, audits, incidents, supplier monitoring, and recovery testing to help assess exposure, evaluate control effectiveness, and identify high-impact actions.

Working with risk analysts, security engineers, and program owners, the engineer will design and deliver integrations, data pipelines, analytical tools, and automated workflows. Initial priorities include supplier intelligence, control-health analysis, reuse of resiliency evidence, and supplier onboarding automation. The role will shape an evolving engineering capability by developing practical ideas from proof of concept through supported operation.

Success is measured by improved visibility into material exposure, earlier identification of recurring weaknesses, reduced manual evidence gathering, and clearer evidence that actions have reduced risk. The role is suited to an engineer with strong software and data skills, security judgment, curiosity, and the ability to turn ambiguous problems into useful, maintainable solutions.

Requirements

• At least 8 years of experience in IT security, vulnerability and risk assessment, identity and access management, compliance, or a related field; alternatively, a relevant bachelor's degree and at least 4 years of such experience; or a relevant master's degree and at least 2 years of such experience.
• Demonstrated ability in or knowledge of incident management and response, including timely handling and escalation to minimise business impact.
• Demonstrated experience providing security monitoring, incident detection, and response services.
• Demonstrated ability in or knowledge of scripting languages, including writing and maintaining scripts to improve system efficiency.
• Demonstrated ability to apply security architecture principles to build and manage secure environments.
• Demonstrated ability in or knowledge of cloud security, including protecting cloud infrastructure and data using risk management frameworks.
• Demonstrated ability in or knowledge of cryptography, including applying encryption techniques and ensuring secure communications.
• Demonstrated skill in deploying and managing machine identity security and PKI solutions.
• Demonstrated ability in or knowledge of security investigation, including assessing threats and vulnerabilities and enhancing security practices.
• Demonstrated ability in or knowledge of security assessment, including conducting and interpreting vulnerability and risk analyses.
• Demonstrated ability in or knowledge of cybersecurity and privacy principles, including applying data-protection best practices and regulations.

Nice To Haves

• At least 2 years of experience working on projects related to cloud or internet software security.
• At least 2 years of experience working with one or more programming or scripting languages such as Go, Java, Python, or C/C++.
• Preferred education and experience: 8 years of experience in IT security, vulnerability and risk assessment, identity and access management, compliance, or a related field; alternatively, a relevant bachelor's degree and at least 4 years of such experience, or a relevant master's degree and at least 2 years of such experience.

Responsibilities

• Design, build, and maintain integrations and data pipelines that collect, normalise, and connect security, compliance, supplier, and resiliency information from APIs, enterprise platforms, and operational systems.
• Develop repeatable analysis to identify control gaps, recurring weaknesses, shared dependencies, and material changes in exposure.
• Work with risk analysts and domain specialists to translate risk scenarios and expected control outcomes into practical data models, analytical methods, and monitoring capabilities.
• Build workflows that connect risk signals to validation, accountable ownership, decisions, remediation, and evidence of closure.
• Engineer supplier intelligence and onboarding capabilities that support proportionate triage, assessment reuse, investigation, and timely escalation.
• Connect incident, recovery-test, and service evidence to help identify resiliency gaps and dependencies across teams and services.
• Preserve source traceability and make data coverage, freshness, quality, and analytical confidence visible so conclusions can be assessed and challenged.
• Develop tools and reporting that explain what has changed, why it matters, and what action or decision is needed.
• Apply automation and, where appropriate, AI-assisted techniques to evidence extraction, enrichment, and analysis, with validation and human review proportionate to the use case.
• Take prototypes into reliable operation through secure design, appropriate access controls, testing, monitoring, documentation, and clear support arrangements.
• Collaborate across security engineering, compliance automation, risk, resiliency, and business teams to reuse existing capabilities and deliver scalable solutions.
• Measure the impact of delivered capabilities through improved coverage, reduced manual effort, faster analysis, and demonstrable support for risk reduction.

Benefits

• Competitive benefits supporting employees with flexible medical, life insurance, and retirement options.
• Volunteer programs that encourage employees to give back to their communities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed