Principal Security Engineer

Oracle is looking for a Principal Security Engineer to help design and deliver security capabilities across products and services. In this Reston, VA onsite role, you will lead security assessments, build and apply advanced testing approaches, and support incident response, compliance activities, and data security initiatives.

What you’ll do

• Perform security assessments of products and services by analyzing potential vulnerabilities and proposing mitigation strategies.
• Develop advanced testing tools and methodologies to proactively identify and address security weaknesses.
• Drive in-depth security design and coding, including reviewing code and writing code for complex investigations, with advanced guidance to improve outcomes.
• Review security alerts and help ensure complex security violations are recognized, escalated, and handled promptly.
• Take appropriate action to contain and mitigate security events by coordinating with relevant teams and stakeholders.
• Contribute to post-event reviews by providing insights and recommendations to strengthen future response processes.
• Support compliance assessments by evaluating the effectiveness of security controls and processes.
• Review security compliance deliverables and recommend improvements to better align with internal and external obligations.
• Ensure compliance with internal and external obligations in collaboration with stakeholders, including maintaining security-compliant inventory systems.
• Provide guidance for business continuity and disaster recovery plans, processes, and procedures, considering potential risks and vulnerabilities.
• Ensure execution of business continuity plans to support critical systems and data during disruptions, implementing appropriate measures and controls.
• Assess readiness for certification and/or audit and recommend actions to improve preparedness.
• Recommend best practices and apply data security techniques, including encryption, hashing, masking, and access management, to protect the confidentiality and integrity of sensitive information.
• Review documentation and procedures related to data security and recommend improvements to enhance overall security posture.
• Stay current on emerging trends and evolving threats, identifying implications for the organization and recommending next steps.
• Explore and evaluate novel techniques and technologies to solve complex security challenges.

Planning, collaboration, and continuous improvement

• Manage and coordinate moderately complex tasks by monitoring timelines and deliverables for a moderately sized project or initiative.
• Delegate, monitor, and prioritize work across multiple projects, providing technical oversight and adjusting plans when resources or timelines change.
• Collaborate across the organization to align expectations and achieve shared objectives.
• Apply knowledge of business leaders, stakeholders, and customers to help ensure proposed solutions meet their needs.
• Support inclusivity by seeking and listening to diverse perspectives so others feel heard and respected.
• Identify and address moderately complex issues by analyzing a wide range of information in line with standard practices.
• Proactively escalate unresolved or critical issues with a thorough assessment and potential solutions.
• Review, contribute to, and document problem solving strategies.
• Pursue ongoing learning through training and feedback, staying abreast of industry trends and best practices.
• Coach and mentor junior team members to support continuous learning and knowledge sharing across teams.
• Recommend and collaborate on process improvements to increase efficiency and effectiveness, evaluating impact on key stakeholders.
• Solicit feedback from others to refine approaches and improve processes.
• Contribute to the talent development pipeline by participating in candidate interviews, assessing candidates, and providing hiring recommendations.

Technologies and tools

• Encryption
• Hashing
• Masking
• Access management