Senior Security Engineer

The Senior Security Engineer will help strengthen Oracle’s security posture by running penetration testing and attack simulations, translating results into actionable fixes, and advancing offensive-security tooling and processes.

Responsibilities

• Conduct penetration testing and attack simulations across business critical infrastructure, including internal servers, networks, and applications, to identify and resolve security flaws.
• Experiment with techniques attackers could use to exploit information security vulnerabilities.
• Use standard methodologies and techniques for penetration testing, including developing standard tool-sets and automating testing.
• Complete security testing activities.
• Prepare threat assessment reports that document penetration test findings and present results to management.
• Verify potential targets for exploit.
• Build tools for offensive security, including tools based on AI.
• Recommend and implement new security controls across Oracle’s line of business.
• Improve current processes and workflows to reduce manual effort.
• Research, evaluate, track, and manage information security threats and vulnerabilities in scenarios that require deeper analysis and where computer programming or scripting knowledge is needed.
• May participate in an incident management team and respond to security events in line with Oracle incident response playbooks.
• Demonstrate advanced knowledge of industry security practices, using self-study and training to expand capability.
• Stay updated on emerging trends to address evolving threats and vulnerabilities.
• Explore novel techniques to solve unique security problems.
• Independently manage work by monitoring timelines and deliverables so projects and initiatives remain on track and meet requirements.
• Proactively prioritize work and adapt to resource or timeline changes by suggesting adjustments to preserve project efficiency.
• Collaborate across teams to align expectations and achieve shared objectives.
• Build and maintain understanding of business, stakeholder, and/or customer needs to support effective partnerships.
• Actively listen to diverse perspectives and ask questions to ensure understanding.
• Identify and address standard and non-standard issues according to standard practices, escalating more complex issues as appropriate.
• Analyze data and/or information from multiple sources to troubleshoot standard and non-standard errors.
• Contribute to knowledge sharing and best practices.
• Support continuous learning through active development of knowledge, new skills, and/or tools, while staying current with industry trends and best practices.
• Seek out and leverage feedback and training to improve skills.
• Contribute to a culture of continuous learning and knowledge sharing with team members.
• Develop ideas and recommend updates to improve the efficiency and effectiveness of processes, protocols, and workflows within the team.
• Seek input from team members on alternative approaches and methods for improving work.

Key Responsibilities

• Penetration Testing
• Security Research
• Research and Innovation

Location

Nashville, TN (onsite)