Senior Manager, Security Engineering

Oracle

Job Location:

Reston, VA - USA

Monthly Salary: Not Disclosed

Posted on: 15 hours ago

Vacancies: 1 Vacancy

Job Summary

Description
Guides the creation of testing tools and facilitates their integration into engineering workflows ensuring team is equipped to identify and address security-related weaknesses efficiently. Establishes protocols for security violation escalation managing communication with senior leadership and stakeholders. Conducts compliance assessments and coaches employees providing compliance assessments. Guides employees on using advanced tools and techniques for data security such as encryption hashing masking and access management to ensure the confidentiality and integrity of sensitive information.

Responsibilities

KeyResponsibilities

SecurityMonitoring - Security Tool Design and Development:

Drivessecurity strategy ensuring that organizational goals are met.

Overseesemployees working on security assessments across a wide range of complexproducts and services.

Guidesthe creation of testing tools and facilitates their integration intoengineering workflows ensuring the team is equipped to identify and addresssecurity-related weaknesses efficiently.

Chairssecurity design and evaluation (e.g. traffic capturing alerts) ensuringadherence to internal and external obligations and strengthening securityposturing.

EventResponse:

Establishesprotocols for security violation escalation managing communication with seniorleadership and stakeholders.

Developsand enforces protocols to contain and mitigate security events coordinatingcross-functional response efforts.

Leadspost-event review meetings to identify improvement areas ensuring feedback isincorporated into ongoing security processes.

Providesguidance to stakeholders who come to the security team with security events orconcerns.

Compliance:

Conductscompliance assessments and coaches employees providing compliance assessments.

Ensuresteams security compliance deliverables adhere to internal and externalobligations.

Overseesinventory operability and accountability of company assets implementingrobust tracking systems.

BusinessContinuity Support:

Guidesthe development of business continuity and disaster recovery plans processesand procedures.

Ensuresthe availability and resilience of critical systems and data overseeingefforts to withstand disruptions.

Directsreadiness assessments for certifications and audits implementing improvementsto meet evolving standards.

DataSecurity and Privacy:

Guidesemployees on using advanced tools and techniques for data security such asencryption hashing masking and access management to ensure theconfidentiality and integrity of sensitive information.

Overseesthe review of documentation and procedures identifying and implementingimprovements in data security practices.

Researchand Innovation:

Drivesindustry security knowledge advancement fostering research and innovationefforts.

Alignsthe team on emerging trends ensuring shared knowledge of evolving threats andvulnerabilities.

Promotesnovel techniques to solve unique security problems encouraging creative andeffective solutions.

CoreResponsibilities

Planning& Execution:

Managesmultiple medium- to large-scale projects or initiatives across teams ensuringtimelines deliverables and budgets when applicable are monitored and met.

Providesdirection to teams on project work setting priorities and aligning withbusiness needs.

Guidesteams on adjusting plans to accommodate resource or timeline changes.

Collaboration& Partnership:

Drivescross-functional partnerships to align expectations and shared objectivesacross multiple teams.

Coachesteam members to develop strategic relationships with business leadersstakeholders and external partners to foster collaboration and long-termsuccess.

Promotesinclusivity by actively seeking and listening to diverse perspectives ensuringothers feel heard and respected.

ProblemSolving:

Providesdirection to multiple teams on addressing complex operational and/or technicalissues as well as providing guidance on analyzing complex data and/orinformation to identify solutions.

Reviewsand provides insights into unresolved or critical issues helping the team toidentify potential solutions.

ContinuousLearning:

Modelsengaging in continuous learning to deepen expertise and stay ahead of industrytrends integrating best practices into strategic planning.

Leveragesfeedback to drive personal and team skill improvements.

Identifiesskill gaps across teams and empowers team members to pursue learning andknowledge sharing opportunities that build their expertise in new areas andcoaches them to apply learnings to advance the organization.

ContinuousImprovement:

Drivesteam to collaborate on develop and implement ideas to increase the efficiencyand effectiveness of processes protocols and workflows within and acrossteams providing oversight.

Guidesteam to adopt new ideas for alternative approaches and methods and encouragesfeedback for continued improvement.

Performanceand Development:

Drivesperformance across teams by providing feedback and coaching in alignment withperformance management processes guidelines and expectations.

Discussesdevelopment goals with team members shares opportunities to facilitate careerdevelopment and ensures individual goals are aligned with broaderorganizational goals.

Developsand manages talent acquisition pipeline by leading candidate interviews monitoringpromotion eligibility and/or orchestrating talent resources.

Qualifications
Minimum Job Qualifications
Education and/or Experience:
9 years of experience in IT security (e.g. cloud endpoint logging) vulnerability and risk assessment identity and access management compliance or related field

OR

Bachelors Degree in Computer Science Information Technology Computer Security Engineering or related field AND 5 years of experience in IT security (e.g. cloud endpoint logging) vulnerability and risk assessment identity and access management compliance or related field

OR

Masters Degree in Computer Science Information Technology Computer Security Engineering or related field AND 3 years of experience in IT security (e.g. cloud endpoint logging) vulnerability and risk assessment identity and access management compliance or related field.

Job Skills:
Same skills as prior level plus;
Incident Management and Response Demonstrated ability in or knowledge of incident management and response including timely handling and escalation of incidents to minimize business impact.
Threat Modeling Demonstrated ability in or knowledge of threat modeling including applying techniques to identify and mitigate security risks and vulnerabilities.
Cloud Security Demonstrated ability in or knowledge of cloud security including protecting cloud infrastructure and data using risk management frameworks.

Preferred Job Qualifications
Education and/or Experience:
11 years of experience in IT security (e.g. cloud endpoint logging) vulnerability and risk assessment identity and access management compliance or related field

OR

Bachelors Degree in Computer Science Information Technology Computer Security Engineering or related field AND 7 years of experience in IT security (e.g. cloud endpoint logging) vulnerability and risk assessment identity and access management compliance or related field

OR

Masters Degree in Computer Science Information Technology Computer Security Engineering or related field AND 5 years of experience in IT security (e.g. cloud endpoint logging) vulnerability and risk assessment identity and access management compliance or related field.

Job Skills:
Same skills as prior level.

People Leadership / Management Experience:
3 years of experience in a leadership role with direct reports.

Budget Experience:
2 years of experience working with operating budgets and/or project financials.

Cloud or Internet Software Security Experience:
3 years of experience working on high-impact projects related to cloud or internet software security.

Programming/Scripting Experience:
3 years of experience working with one or more of the following programming or scripting languages (e.g. Go Java Python or C/C).

Cloud Experience:
6 months of experience with AWS Solution Azure 900 Fundamentals OCI Fundamentals or equivalent cloud experience.

Information Security Certifications:
Information security or equivalent certifications (e.g. Certified Oracle Cloud Infrastructure Security Professional Certificate of Cloud Security Knowledge CCSK Certified Information Security Manager CISM Certified Information Systems Security Professional CISSP Certified Ethical Hacker CEH Certified Cloud Security Professional CCSP Offensive Security Certified Professional OSCP Cisco Certified Network Associate CCNA Certified Information Systems Auditor CISA CompTIA Security).

Required Experience:

Senior Manager

DescriptionGuides the creation of testing tools and facilitates their integration into engineering workflows ensuring team is equipped to identify and address security-related weaknesses efficiently. Establishes protocols for security violation escalation managing communication with senior leadershi...