Senior DevSecops Engineer

Employer Description
An Oracle career can span industries, roles, Countries and cultures, giving you the opportunity to flourish in new roles and innovate, while blending work life in. Oracle has thrived through 40+ years of change by innovating and operating with integrity while delivering for the top companies in almost every industry.

In order to nurture the talent that makes this happen, we are committed to an inclusive culture that celebrates and values diverse insights and perspectives, a workforce that inspires thought leadership and innovation.

Oracle offers a highly competitive suite of Employee Benefits designed on the principles of parity, consistency, and affordability. The overall package includes certain core elements such as Medical, Life Insurance, access to Retirement Planning, and much more. We also encourage our employees to engage in the culture of giving back to the communities where we live and do business.

At Oracle, we believe that innovation starts with diversity and inclusion and to create the future we need talent from various backgrounds, perspectives, and abilities. We ensure that individuals with disabilities are provided reasonable accommodation to successfully participate in the job application, interview process, and in potential roles. to perform crucial job functions.

That s why we re committed to creating a workforce where all individuals can do their best work. It s when everyone s voice is heard and valued that we re inspired to go beyond what s been done before.

Oracle is an Equal Employment Opportunity Employer*. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.

Job Description
The CSS Security Operations team can provide you with the opportunity to build and operate a suite of managed
cloud security services in a multi-tenant cloud environment. CSS is committed to providing the best in managed
security cloud solutions that meet the needs of our customers who are tackling some of the world s biggest
challenges.
Are you interested in securing complex workloads and platformWe are looking for hands-on security engineers with
expertise and passion in solving difficult security problems in distributed, multi-tenant services. These are exciting
times in our space - we are growing fast, and working on ambitious new initiatives.
As a Security Engineer you will work closely with other engineers from to build and operate services that are
fundamentally sound and efficient. You should be familiar with security at all levels of the software, hardware, and
network stack; while being exceptionally deep in a few. Intellectual curiosity and an excitement for the challenges of
securing complex systems are a must. You should value simplicity and usability as well as security and work
comfortably in a collaborative, agile environment.

Things you will do:
Design, implementation and operation of the solutions delivery toolchain
SOP and Best Practices development and documentation.
Design, implementation and operation of new secure cloud services
Monitoring security posture of customer infrastructure hosted on Oracle Cloud
Level 3 Incident response and production support
Security testing, vulnerability assessment and vulnerability advisory communications
Stay ahead of on security threats and mitigation strategies

Basic Qualifications:
Bachelors or Masters Degree in Computer Science or related field
demonstrated ability in security engineering or related field or equivalent experience
Strong application / product / software security background
Good cloud infrastructure automation (Terraform, Chef, or similar) background
Proficient Linux administration, supervising and solving
Comfortable with writing non-trivial code in one of Python, Go, Ruby or other high-level language
Experience in working in a DevOps model using any of the major cloud providers Azure, AWS, GCP, OCI, etc.
Experience with penetration testing, network audits and intrusion detection systems
Excellent organizational, verbal, and written communication skills

Preferred Qualifications:
CCNA / CCNP, SANS, OCSP, CISSP, CISA, Firewall and Cloud certifications.
Strong experience of working on SIEM tools like Splunk to analyze logs and correlate events.
Solid fundamentals in networking concepts.
Knowledge of networking and security concepts such as IPSec, SSL VPN, Subnets, Security rules, WAF, Load Balancers,FastConnect, network routing, etc (Preferably Oracle Cloud exposure).
Oracle products knowledge.
Large scale, distributed environments experience
Kubernetes and Docker experience
Site Reliability engineering experience
Responsible for the planning, design and build of security architectures; oversees the implementation of network and computer security and ensures compliance with corporate security policies and procedures.

Responsible for advanced planning, design and build of security systems, applications, environments and architectures; oversees the implementation of security systems, applications, environments and architectures and ensures compliance with information security standards and corporate security policies and procedures. Provides technical advice and direction to support the design and development of secure architectures. May participate in an incident management team, bringing advanced-level skills to respond to security events in line with Oracle incident response playbooks. Investigates purported intrusions and breaches, and oversees root cause analysis. Coordinates incidents with other business units and may act as Incident Commander of serious incidents. Develops new methods, and playbooks, as well as sophisticated scripts, applications, and tools, and trains others in their use. May participate in an incident management team, responding to security events in line with Oracle incident response playbooks. Investigates purported intrusions and breaches, and oversees root cause analysis. Coordinates incidents with other business units and may act as incident commander of serious incidents. Participates in developing new methods, playbooks throughout Oracle. Evaluates existing and proposed technical architectures for security risk, provides technical advice to support the design and development of secure architectures and recommends security controls to mitigate those risks. Evaluations of internal security architecture may include design assessment, risk assessment, and threat modeling. Brings advanced-level skills to research, evaluate, track, and manage information security threats and vulnerabilities in situations where in-depth analysis of ambiguous information is required, and where computer programming/scripting knowledge is required. Work with Senior management to develop and implement a multi-year security roadmap Focus on operational and strategic level tasks, and provide counsel and guidance to the junior level security operations engineers in the department.

Minimum of 8 years related experience in an information security role supporting security programs and security engineering/architecture in complex enterprise environments. Hands on experience with enterprise security architecture, engineering and implementation required. Knowledge of compliance program security controls, like ISO 27001, SOC 2, HITRUST, and FedRAMP, as applied to cloud SaaS, PaaS and IaaS operations. Familiarity with SDLC principles and scripting & programming languages (such as Terraform, Python, and Ruby). Strong knowledge of: Cloud architecture and security principles. Risk Management Frameworks. *nix and Windows system administration. Experience with: Logging and log analysis. Identity management principles and technology. Preferred but not required qualifications include: Bachelor-level university degree or equivalent experience in a relevant field from an accredited university, or equivalent. Strong knowledge of web technologies, middleware, database, OS, firewalls, network communication protocols and methods. Knowledge of database security principles. Knowledge of encryption technologies and architectures. Expert level experience in evaluating and assessing security threats across a variety of environments and industries. Expert level understanding of secure networking principles, routers, switches and load balancers.


Diversity and Inclusion:

An Oracle career can span industries, roles, Countries and cultures, giving you the opportunity to flourish in new roles and innovate, while blending work life in. Oracle has thrived through 40+ years of change by innovating and operating with integrity while delivering for the top companies in almost every industry.

In order to nurture the talent that makes this happen, we are committed to an inclusive culture that celebrates and values diverse insights and perspectives, a workforce that encourages thought leadership and innovation.

Oracle offers a highly competitive suite of Employee Benefits crafted on the principles of parity, consistency, and affordability. The overall package includes certain core elements such as Medical, Life Insurance, access to Retirement Planning, and much more. We also encourage our employees to engage in the culture of giving back to the communities where we live and do business.

At Oracle, we believe that innovation starts with diversity and inclusion and to build the future we need talent from various backgrounds, perspectives, and abilities. We ensure that individuals with disabilities are provided reasonable accommodation to successfully participate in the job application, interview process, and in potential roles. To perform crucial job functions.

That s why we re committed to crafting a workforce where all individuals can do their best work. It s when everyone s voice is heard and valued that we re encouraged to go beyond what s been done before.

Career Level - IC3

Responsible for advanced planning, design and build of security systems, applications, environments and architectures; oversees the implementation of security systems, applications, environments and architectures and ensures compliance with information security standards and corporate security policies and procedures. Provides technical advice and direction to support the design and development of secure architectures. May participate in an incident management team, bringing advanced-level skills to respond to security events in line with Oracle incident response playbooks. Investigates purported intrusions and breaches, and oversees root cause analysis. Coordinates incidents with other business units and may act as Incident Commander of serious incidents. Develops new methods, and playbooks, as well as sophisticated scripts, applications, and tools, and trains others in their use. May participate in an incident management team, responding to security events in line with Oracle incident response playbooks. Investigates purported intrusions and breaches, and oversees root cause analysis. Coordinates incidents with other business units and may act as incident commander of serious incidents. Participates in developing new methods, playbooks throughout Oracle. Evaluates existing and proposed technical architectures for security risk, provides technical advice to support the design and development of secure architectures and recommends security controls to mitigate those risks. Evaluations of internal security architecture may include design assessment, risk assessment, and threat modeling. Brings advanced-level skills to research, evaluate, track, and manage information security threats and vulnerabilities in situations where in-depth analysis of ambiguous information is required, and where computer programming/scripting knowledge is required. Work with Senior management to develop and implement a multi-year security roadmap Focus on operational and strategic level tasks, and provide counsel and guidance to the junior level security operations engineers in the department.