Director, Security Engineering

Oracle is a cloud and enterprise technology company providing data, infrastructure, applications, and AI-powered solutions. The Director of Security Engineering will lead Oracle Analytics Cloud’s security architecture, penetration testing, and engineering teams, while developing security strategies, managing programs, and driving automation and collaboration across product, development, operations, compliance, and legal functions.

Responsibilities:

• Manage a team of Security experts in the a variety of time zones
• Align work with the OASE Security team members to business needs
• Provide the team members mentoring and guidance on their career growth
• Ensure the timely execution of critical Security activities with Oracle analytics organization
• Continuously guide the team in building innovative best practices and solutions using the best of breed technologies that has pervasive impact on all of Oracle Analytics organization
• Work closely with the Product, Development, PM, and other Oracle Analytics organization leaders and teams to deliver on key programs for customers on time and without negative impact
• Develop professional relationships at all levels driving cultural change to align managed services delivery with our cloud delivery principles and values
• Security technical and project leadership for fine grained solutions including developing robust security reference architectures
• Leverage existing solutions and global design to drive standardization and simplification to reduce implementation timelines, taxing of teams and costs
• Identify critical path decisions, make recommendations, and influence program leaders / business process owners
• Communicate with internal and external contributing organizations
• Understand technical issues and the implications to the business and be able to communicate them to management and other business leaders
• Drive consideration of cybersecurity tools and datasets to enhance detective and preventive control sets, through automation
• Routinely collaborate with other team members in security software engineering, identity and access management, security systems administration/tools management, application security, and our cybersecurity active defense group to defend our Services from constantly evolving threats
• Coordinate closely with the OA Development, OASE Release management teams to provide regular metrics and reporting to measure the efficiency and effectiveness of the services, facilitate appropriate resource allocation, and increase the overall maturity of related security capabilities
• Collaborate with other corporate functions including Internal Audit, Legal and Compliance, Privacy, and Enterprise Sourcing to ensure that the organization maintains a strong security posture

Requirements:

• Applicants are required to read, write, and speak the following languages: English
• Prior experience in mentoring and managing a Security team supporting a complex cloud product is essential per-requisites for you to be successful in this role
• You will have a deep background in all aspects of security architecture, pen-testing and engineering including infrastructure, application, cloud, and mobile
• 10+ years as an engineer with hands on security architecture, pen-testing, engineering experience
• 4+ years as a Director or VP Level management at a very large organization, such as Fortune 500 or similar
• Experience leading first line managers and directors with different accountability across multiple departments with a scope of 20+ direct reports
• Strong leadership skills planning, organizing, leading, and measuring service driven teams
• Good interpersonal and communications skills to build/ maintain ongoing business relationships
• Experience with Security, standards, policies, procedures, patterns, risk assessments and engineering
• Experience with compliance regulations/laws, security frameworks and standards (e.g., NIST, HIPAA, ISO, COBIT, OWASP, ITIL, etc.)
• Ability to exercise and mentor others on good professional judgment and security-related ethics
• Experience with highly sensitive regulated data associated with industries such as healthcare
• Experience with driving AI and Automation in all areas of  Security services and engineering
• 12 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field
• Bachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 8 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field
• Master's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 6 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field
• Knowledge of the healthcare, distribution, or software industries is a plus
• Experience with law enforcement, defense, or intelligence community a plus
• OSCP, SANS/GIAC, CISSP or other similar professional certifications are a plus
• Ability to obtain  and maintain a federal security clearance strongly preferred
• 13 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field
• Bachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 9 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field
• Master's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 7 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field
• 4 years of experience in a leadership role with direct reports
• 3 years of experience working with operating budgets and/or project financials
• 5 years of experience working on high-impact projects related to cloud or internet software security
• 5 years of experience working with one or more of the following programming or scripting languages (e.g., Go, Java, Python, or C/C++)
• 1 year of experience with AWS Solution, Azure 900 Fundamentals, OCI Fundamentals, or equivalent cloud experience
• Information security or equivalent certifications (e.g., Certified Oracle Cloud Infrastructure Security Professional, Certificate of Cloud Security Knowledge [CCSK], Certified Information Security Manager [CISM], Certified Information Systems Security Professional [CISSP], Certified Ethical Hacker [CEH], Certified Cloud Security Professional [CCSP], Offensive Security Certified Professional [OSCP], Cisco Certified Network Associate [CCNA], Certified Information Systems Auditor [CISA], CompTIA Security+)