Senior Manager, Security Engineering (Reston)

Guides the creation of testing tools and facilitates their integration into engineering workflows, ensuring team is equipped to identify and address security-related weaknesses efficiently. Establishes protocols for security violation escalation, managing communication with senior leadership and stakeholders. Conducts compliance assessments and coaches employees providing compliance assessments. Guides employees on using advanced tools and techniques for data security such as encryption, hashing, masking, and access management to ensure the confidentiality and integrity of sensitive information.Only Oracle brings together the data, infrastructure, applications, and expertise to power everything from industry innovations to life-saving care. And with AI embedded across our products and services, we help customers turn that promise into a better future for all. Discover your potential at a company leading the way in AI and cloud solutions that impact billions of lives.True innovation starts when everyone is empowered to contribute. That’s why we’re committed to growing a workforce that promotes opportunities for all with competitive benefits that support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs.We’re committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing View email address on apply.placed-app.com or by calling View phone number on apply.placed-app.com in the United States.Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans’ status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.Minimum Job QualificationsEducation and/or Experience:9 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related fieldORBachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 5 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related fieldORMaster's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 3 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.Job Skills:Same skills as prior level plus;Incident Management and Response Demonstrated ability in or knowledge of incident management and response, including timely handling and escalation of incidents to minimize business impact.Threat Modeling Demonstrated ability in or knowledge of threat modeling, including applying techniques to identify and mitigate security risks and vulnerabilities.Cloud Security Demonstrated ability in or knowledge of cloud security, including protecting cloud infrastructure and data using risk management frameworks.Preferred Job QualificationsEducation and/or Experience:11 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related fieldORBachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 7 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related fieldORMaster's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 5 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.Job Skills:Same skills as prior level.People Leadership / Management Experience:3 years of experience in a leadership role with direct reports.Budget Experience:2 years of experience working with operating budgets and/or project financials.Cloud or Internet Software Security Experience:3 years of experience working on high-impact projects related to cloud or internet software security.Programming/Scripting Experience:3 years of experience working with one or more of the following programming or scripting languages (e.g., Go, Java, Python, or C/C++).Cloud Experience:6 months of experience with AWS Solution, Azure 900 Fundamentals, OCI Fundamentals, or equivalent cloud experience.Information Security Certifications:Information security or equivalent certifications (e.g., Certified Oracle Cloud Infrastructure Security Professional, Certificate of Cloud Security Knowledge [CCSK], Certified Information Security Manager [CISM], Certified Information Systems Security Professional [CISSP], Certified Ethical Hacker [CEH], Certified Cloud Security Professional [CCSP], Offensive Security Certified Professional [OSCP], Cisco Certified Network Associate [CCNA], Certified Information Systems Auditor [CISA], CompTIA Security+).

/* Font Definitions */
@font-face
{font-family:Wingdings;
}
@font-face
{font-family:Cambria Math;
}
@font-face
{font-family:Calibri;
}
@font-face
{font-family:Oracle Sans Light;
}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:0in;
line-height:107%;
font-size:11.0pt;
font-family:Calibri,sans-serif;}
p.MsoFooter, li.MsoFooter, div.MsoFooter
{
margin:0in;
font-size:11.0pt;
font-family:Calibri,sans-serif;}
p
{margin-right:0in;
margin-left:0in;
font-size:12.0pt;
font-family:Times New Roman,serif;}
p.text-start, li.text-start, div.text-start
{
margin-right:0in;
margin-left:0in;
font-size:12.0pt;
font-family:Times New Roman,serif;}
span.FooterChar
{
}
.MsoChpDefault
{font-family:Calibri,sans-serif;}
.MsoPapDefault
{margin-bottom:8.0pt;
line-height:107%;}
/* Page Definitions */
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}

Key
Responsibilities
Security
Monitoring - Security Tool Design and Development: –
Drives
security strategy, ensuring that organizational goals are met.–
Oversees
employees working on security assessments across a wide range of complex
products and services.–
Guides
the creation of testing tools and facilitates their integration into
engineering workflows, ensuring the team is equipped to identify and address
security-related weaknesses efficiently.–
Chairs
security design and evaluation (e.g., traffic capturing, alerts), ensuring
adherence to internal and external obligations, and strengthening security
posturing.Event
Response:
–
Establishes
protocols for security violation escalation, managing communication with senior
leadership and stakeholders.–
Develops
and enforces protocols to contain and mitigate security events, coordinating
cross-functional response efforts.–
Leads
post-event review meetings to identify improvement areas, ensuring feedback is
incorporated into ongoing security processes.–
Provides
guidance to stakeholders who come to the security team with security events or
concerns.Compliance: –
Conducts
compliance assessments and coaches employees providing compliance assessments.–
Ensures
team's security compliance deliverables adhere to internal and external
obligations.–
Oversees
inventory, operability, and accountability of company assets, implementing
robust tracking systems.Business
Continuity Support:
–
Guides
the development of business continuity and disaster recovery plans, processes,
and procedures.–
Ensures
the availability and resilience of critical systems and data, overseeing
efforts to withstand disruptions.–
Directs
readiness assessments for certifications and audits, implementing improvements
to meet evolving standards.Data
Security and Privacy:
–
Guides
employees on using advanced tools and techniques for data security such as
encryption, hashing, masking, and access management to ensure the
confidentiality and integrity of sensitive information.–
Oversees
the review of documentation and procedures, identifying and implementing
improvements in data security practices.Research
and Innovation:
–
Drives
industry security knowledge advancement, fostering research and innovation
efforts.–
Aligns
the team on emerging trends, ensuring shared knowledge of evolving threats and
vulnerabilities.–
Promotes
novel techniques to solve unique security problems, encouraging creative and
effective solutions.Core
Responsibilities
Planning
& Execution:
–
Manages
multiple medium- to large-scale projects or initiatives across teams, ensuring
timelines, deliverables, and budgets when applicable are monitored and met.–
Provides
direction to teams on project work, setting priorities, and aligning with
business needs.–
Guides
teams on adjusting plans to accommodate resource or timeline changes.Co]]> <