About this role

Oracle Security & GRC is seeking a Senior Security Risk Engineer to help build and scale our approach to security risk intelligence and automation.

Our teams hold valuable information across security assessments, audits, incidents, supplier monitoring and recovery testing. This role will connect that information and build dependable capabilities that help us understand exposure, evaluate control effectiveness and identify where action will make the greatest difference.

Working alongside risk analysts, security engineers and program owners, you will design and deliver integrations, data pipelines, analytical tools and automated workflows. Initial priorities include supplier intelligence, control-health analysis, reuse of resiliency evidence and supplier onboarding automation.

You will help shape an evolving engineering capability, taking practical ideas from proof of concept through to supported operation. Success means better visibility of material exposure, earlier identification of recurring weaknesses, less manual evidence gathering and clearer evidence that action has reduced risk.

This role suits an engineer who combines strong software and data skills with security judgment, curiosity and the ability to turn an ambiguous problem into a useful, maintainable solution.

Minimum Job Qualifications
Education and/or Experience:
8 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, a related field

Bachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 4 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

Master's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field. AND 2 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.

Job Skills:
Same skills as proir level plus;
Incident Management and Response Demonstrated ability in or knowledge of incident management and response, including timely handling and escalation of incidents to minimize business impact.
Security Operations Services Demonstrated experience providing security monitoring, incident detection, and response services.
Scripting Languages Demonstrated ability in or knowledge of scripting languages, including writing and maintaining scripts to improve system efficiency.
Security Architecture Principles Demonstrated ability to apply security architecture principles to build and manage secure environments.
Cloud Security Demonstrated ability in or knowledge of cloud security, including protecting cloud infrastructure and data using risk management frameworks.
Cryptography Demonstrated ability in or knowledge of cryptography, including applying encryption techniques and ensuring secure communications.
Machine Identity Security Demonstrated skill in deploying and managing machine identity security and PKI solutions.
Security Investigation Demonstrated ability in or knowledge of security investigation, including assessing threats and vulnerabilities and enhancing security practices.
Security Assessment Demonstrated ability in or knowledge of security assessment, including conducting and interpreting vulnerability and risk analyses.
Cybersecurity and Privacy Principles Demonstrated ability in or knowledge of cybersecurity and privacy principles, including applying best practices and regulations for data protection.

Preferred Job Qualifications
Education and/or Experience:
8 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

Master's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 2 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.

Cloud or Internet Software Security Experience:
2 years of experience working on projects related to cloud or internet software security.

Programming/Scripting Experience:
2 years of experience working with one or more of the following programming or scripting languages (e.g., Go, Java, Python, or C/C++).