Senior Security Risk Engineer

Oracle•Nashville, TN

About The Position

Oracle Security & GRC is seeking a Senior Security Risk Engineer to build and scale security risk intelligence and automation. The role connects information from security assessments, audits, incidents, supplier monitoring, and recovery testing to help the organization understand exposure, evaluate control effectiveness, and identify high-impact actions. Working with risk analysts, security engineers, and program owners, the engineer will design and deliver integrations, data pipelines, analytical tools, and automated workflows. Initial priorities include supplier intelligence, control-health analysis, reuse of resiliency evidence, and supplier onboarding automation. The role will help shape an evolving engineering capability by taking practical ideas from proof of concept through supported operation. Success means improved visibility into material exposure, earlier identification of recurring weaknesses, less manual evidence gathering, and clearer evidence that actions have reduced risk. The position suits an engineer who combines software and data skills with security judgment, curiosity, and the ability to turn ambiguous problems into useful, maintainable solutions.

Responsibilities

Design, build, and maintain integrations and data pipelines that collect, normalize, and connect security, compliance, supplier, and resiliency information from APIs, enterprise platforms, and operational systems.
Develop repeatable analysis to identify control gaps, recurring weaknesses, shared dependencies, and material changes in exposure.
Work with risk analysts and domain specialists to translate risk scenarios and expected control outcomes into practical data models, analytical methods, and monitoring capabilities.
Build workflows connecting risk signals to validation, accountable ownership, decisions, remediation, and evidence of closure.
Engineer supplier intelligence and onboarding capabilities that support proportionate triage, assessment reuse, investigation, and timely escalation.
Connect incident, recovery-test, and service evidence to help identify resiliency gaps and dependencies across teams and services.
Preserve source traceability and make data coverage, freshness, quality, and analytical confidence visible so conclusions can be assessed and challenged.
Develop tools and reporting that explain what has changed, why it matters, and what action or decision is needed.
Apply automation and, where appropriate, AI-assisted techniques to evidence extraction, enrichment, and analysis, with validation and human review proportionate to the use case.
Take prototypes into reliable operation through secure design, appropriate access controls, testing, monitoring, documentation, and clear support arrangements.
Collaborate across security engineering, compliance automation, risk, resiliency, and business teams to reuse existing capabilities and deliver scalable solutions.
Measure delivered capabilities through improved coverage, reduced manual effort, faster analysis, and demonstrable support for risk reduction.