Director, Security Engineering

Director, Security Engineering

Anthony, NM, United States

Up to $260,000/ year

Oracle

Description

Oversees the creation of advanced testing tools and their integration into engineering workflows, ensuring teams are fully equipped to identify and address critical security weaknesses efficiently. Develops and refines escalation protocols for security violations, overseeing communication with executive leadership and key stakeholders. Provides high-level oversight on compliance assessments. Directs teams on using advanced tools and techniques for data security such as encryption, hashing, masking, and access management to ensure the confidentiality and integrity of sensitive information.

Responsibilities

Security Monitoring - Security Tool Design and Development:

-Drives execution of a comprehensive security strategy, ensuring that Oracle's goals are met.

-Directs lines of business working on security assessments across a wide range of complex products and services, prioritizing critical vulnerabilities and coordinating mitigation efforts.

-Oversees the creation of advanced testing tools and their integration into engineering workflows, ensuring lines of business are fully equipped to identify and address critical security weaknesses efficiently.

-Leads security design and code reviews at an Oracle-wide level, ensuring strict adherence to internal and external obligations, and strengthening security posturing.

Event Response:

-Develops and refines escalation protocols for security violations, overseeing communication with executive leadership and key stakeholders.

-Establishes and enforces comprehensive protocols for event containment and mitigation, coordinating high-level cross-functional response efforts.

-Directs post-event review sessions at a strategic level to identify significant improvement areas, integrating feedback into ongoing security processes.

Compliance:

-Provides high-level oversight on compliance assessments.

-Ensures adherence to internal and external obligations across Oracle.

-Oversees strategic management of inventory, operability, and accountability of company assets, driving implementation of advanced tracking systems.

Business Continuity Support:

-Drives the strategic development of business continuity and disaster recovery plans, processes, and procedures.

-Verifies the availability and resilience of critical systems and data, directing strategies to handle major disruptions.

-Leads improvements to meet evolving standards regarding certifications and audits.

Data Security and Privacy:

-Directs lines of business on using advanced tools and techniques for data security such as encryption, hashing, masking, and access management to ensure the confidentiality and integrity of sensitive information.

-Drives the review of documentation and procedures, identifying and implementing improvements in data security practices.

Research and Innovation:

-Directs industry security knowledge advancement, encouraging the use of research and innovation to develop cutting-edge security solutions.

-Guides line of business's efforts on addressing evolving threats and vulnerabilities.

-Advises lines of business on using novel techniques that solve unique security problems through creative and effective solutions.

Core Responsibilities

Planning & Execution:

-Oversees and guides multiple teams on managing complex projects or initiatives, monitoring timelines, deliverables, and budgets when applicable to ensure strategic objectives are met.

-Serves as a role model for appropriately delegating work, setting priorities, and ensuring alignment with business needs.

-Coaches others on adjusting resources or project timelines in anticipation of business changes.

Collaboration & Partnership:

-Role models leading cross-functional collaborative efforts to ensure alignment of expectations and strategic objectives.

-Empowers team to build and maintain partnerships with business leaders, stakeholders, and/or customers to address barriers and contribute to organizational success.

-Drives transparency and inclusivity by modeling actively seeking, listening to, and leveraging diverse perspectives.

Problem Solving:

-Shares problem-solving strategies across teams, providing oversight on complex operational and/or technical issues, as needed.

-Coaches teams on analyzing highly complex data and/or information to identify solutions to ambiguous issues and provides direction on identifying root causes to prevent recurrence of issues.

Continuous Learning:

-Pursues strategic learning opportunities to maintain expertise and apply best practices at the organizational level.

-Creates opportunities for team members and leaders to build their expertise in new areas, coaching them to build innovative skills.

-Identifies skill gap trends across the organization, and upholds a culture that places significant emphasis on sharing knowledge and pursuing learning opportunities that advance the organization.

-Evaluates efficiency of learning strategies and recommends adjustments as needed.

Continuous Improvement:

-Empowers team to own the development and implementation of ideas that increase the efficiency and effectiveness of processes, protocols, and workflows across the department.

-Coaches teams to gain buy-in for ideas and to seek feedback on approaches and methods for continued improvement.

-Prioritizes and reviews the roadmap of improvement initiatives to ensure alignment with strategic direction and maximize return on investments.

Performance and Development:

-Serves as a role model for driving performance across teams through tailored feedback and coaching in alignment with performance management processes, guidelines, and expectations.

-Drives consistency in the application of talent development procedures and socializes performance expectations across the organization.

-Ensures that individual development goals are aligned with organizational strategic initiatives.

-Collaborates with HR to implement talent strategy through hiring and promotion processes.

Qualifications

Minimum Job Qualifications Education and/or Experience: 12 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related fieldORBachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 8 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related fieldORMaster's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 6 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.

Job Skills: Same skills as prior level.

Preferred Job Qualifications Education and/or Experience: 13 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related fieldORBachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 9 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related fieldORMaster's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 7 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field. People Leadership / Management Experience: 4 years of experience in a leadership role with direct reports. Budget Experience: 3 years of experience working with operating budgets and/or project financials. Cloud or Internet Software Security Experience: 5 years of experience working on high-impact projects related to cloud or internet software security. Programming/Scripting Experience: 5 years of experience working with one or more of the following programming or scripting languages (e.g., Go, Java, Python, or C/C++). Cloud Experience: 1 year of experience with AWS Solution, Azure 900 Fundamentals, OCI Fundamentals, or equivalent cloud experience. Information Security Certifications: Information security or equivalent certifications (e.g., Certified Oracle Cloud Infrastructure Security Professional, Certificate of Cloud Security Knowledge [CCSK], Certified Information Security Manager [CISM], Certified Information Systems Security Professional [CISSP], Certified Ethical Hacker [CEH], Certified Cloud Security Professional [CCSP], Offensive Security Certified Professional [OSCP], Cisco Certified Network Associate [CCNA], Certified Information Systems Auditor [CISA], CompTIA Security+).