Senior Security Engineer

Senior Security Engineer

Senior Security Engineer-220001TA

**Applicants are required to read, write, and speak the following languages**: English, Spanish

**Preferred Qualifications**

The **Senior Security Engineer** is part of the Advanced Customer Services (ACS) Security and Risk Management team, responsible for security architecture, engineering, and automation for the services provided by the ACS Organization for ACS, Managed Cloud Services (MCS) and Managed Security Services (MSS) customers. Within the ACS Security and Risk Management team, you will join a diverse organization responsible for keeping Oracle’s Federal, Commercial, and other regulated environments’ data secure. As a member of this world-class team,





you’ll design and implement security solutions to improve efficiency, performance, and reliability with an eye to automation and continuous integration, continuous delivery, and continuous deployment (CI/CD), as well as play a key role in the management of security risks in the solutions and services provided by our broader group, Advanced Customer Services.

We are looking for an engineer with a focus on both Information Security and DevOps/Site Reliability who will partner across departments to drive a DevSecOps approach, vulnerability remediation, and ensure compliance through our cloud and on-prem environments. Additionally, you will promote improvements in configuration management, provisioning, software deployment, vulnerability identification, and security compliance.

DevSecOps is the practice that automates, monitors, and applies security at all phases of the SDLC, and we want you to be part of it at Oracle.

**Key responsibilities include**:

- Design and implement security automation to improve efficiency,





performance, and reliability.
- Promote improvements in configuration management, provisioning, software deployment, vulnerability identification, and security compliance.
- Investigate purported intrusions and breaches and oversee root cause analysis.
- Bring advanced-level skills to research, evaluate, track, and manage information security threats and vulnerabilities in situations where in-depth analysis of ambiguous information is required and/or where scripting is required (e.g. Ruby, Python, shell, terraform, etc).
- Work with senior management to develop and implement a multi-year security roadmap in accordance with DevSecOps philosophy.






- Contribute to the drive towards DevOps methodology with development and maintenance of CI/CD pipelines, automation, and API integrations.

**What we like to see**
- Established IT experience in a security-related role supporting complex architecture
- Proven experience engineering Cloud solutions in an Infosec, Developer, Site Reliability, or related DevOps role
- Experience implementing DevOps technologies and principles, especially CI/CD (e.g. Chef, Artifactory, Ansible)
- Familiarity with scripting and programming languages such as Ruby, Python, Terraform, and shell scripting.
- Strong knowledge of *nix and Windows system administration, cloud architecture and security principles, and Risk management frameworks
- Experience with commercial security products and closing the gaps through development, automation, API integrations,





and researching and closing vulnerabilities via patching.

**What we love to see**
- Experience with EDR (Endpoint Detection & Response), Vulnerability Management and Micro-Segmentation tools.
- Knowledge of database security principles
- Knowledge of encryption technologies and architectures
- Experience with myriad DevOps tools such as Chef, Jenkins, Ant, Maven, Ansible, Puppet, CircleCI, and Bamboo
- Exposure to security standards such as NIST 800-53 or PCI DSS and security controls like ISO 27001, SOC 2, and HITRUST as applied to Cloud SaaS, PaaS, and IaaS operations
- Security Certifications such as CISSP, Security+, CCSP, GCIH, CISA, or CISM and/or willingness to get relevant certifications






- Excellent written and verbal communication skills
- Ability to adjust and adapt to changing priorities in a dynamic environment
- BS in related field from accredited university, or equivalent.

**Detailed Description and Job Requirements**

Responsible for the planning, design and build of security architectures; oversees the implementation of network and computer security and ensures compliance with corporate security policies and procedures.

Minimum of 12 years related experience in an information security role supporting security programs and security engineering/architecture in complex enterprise environments. Hands on experience with enterprise security architecture, engineering and implementation required. Knowledge of compliance program security controls,





like ISO 27001, SOC 2, HITRUST, and FedRAMP, as applied to cloud SaaS, PaaS and IaaS operations. Familiarity with SDLC principles and scripting & programming languages (such as Terraform, Python, and Ruby). Expert level knowledge of: Cloud architecture and security principle

▶️ Senior Security Engineer
🖊️ Oracle
📍 Santiago