Senior Principal Security Engineer

Oracle is a leading company in AI and cloud solutions, seeking a highly motivated security engineer with expertise in Cloud security. The role involves architecture, design, prototyping, and development of security aspects for Oracle Cloud's products and services, while providing guidance and mentorship to teams to enhance overall security posture.

Responsibilities:

• Conduct threat modeling, security architecture reviews, risk assessment and provide guidance on mitigating the identified issues
• Create and maintain technical security standards and patterns and set the benchmark for AI security requirement bar at OCI
• Stay up-to-date on the latest advancements in AI technologies and apply them to improve OCI's security posture
• Provide expert security guidance to service teams to ensure their products, services and feature are secure by default
• Lead OCI-wide cloud security initiatives to enhance overall cloud security posture
• Provide mentorship to junior engineers on the team

Requirements:

• A minimum of 8+ years of experience with at least 5+ years in Cloud Security required and 2+ years in AI and ML is good to have
• Or a BS or MS in Computer Science/Engineering with a focus on AI/Security, or a related field with a minimum of 8 years of experience in the field is required
• Experience in architecture, design, deployment, and handling of standard security practices and policies is required
• A strong background in AI, machine learning, and deep learning
• Experience in applying AI technology to security domain
• Experience as a security leader for a cloud product or set of cloud services, with expertise in IaaS, PaaS
• Experience with architecture security reviews for products or services operating in a cloud environment, especially those which are reliant on homegrown or third-party LLMs and APIs is a plus
• Expertise in concepts of Multi-tenancy, Cloud Security and Virtualization, Access Management, OAuth, Cloud SSO, Identity Provisioning, Identity Governance etc
• Expertise in Encryption, Key management, Cybersecurity fundamentals (e.g., access controls, common software vulnerabilities, and security best practices), Deployment Methodologies, and Security Standards Compliance Certification (STIG, FedRAMP, PCI-DSS), etc
• Very good understanding of concepts related to Docker, Container, Serverless Computing, and Kubernetes
• Ability to design large scalable systems for cloud customers with focus on security
• Network security, VPN/Firewalls and software-defined networking experience is a plus
• Experience operating within and supporting a security assurance and assessment program
• Excellent written and verbal communication skills, strong analytical and problem-solving skills