Lead Principal Security Engineer

Key Responsibilities
Security Monitoring - Security Tool Design and Development:
– Oversees comprehensive security assessments across a wide range of complex products and services.
– Drives research and development of cutting-edge testing tools and methodologies, staying at the forefront of security innovation.
– Provides expert guidance and leadership in security design and coding (e.g., reviewing code, writing code for complex investigation), influencing Oracle's security strategy and roadmap.
– Proactively participates in reviews of security alerts.
Event Response:
– Uses deep expertise to recognize and escalate more nuanced, highly complex security violations, leveraging advanced technologies and industry best practices.
– Oversees the containment and mitigation of high-impact security events, ensuring effective response and recovery.
– Contributes to in-depth post-event reviews, identifying systemic vulnerabilities and driving continuous improvement initiatives.
Compliance:
– Coordinates comprehensive compliance assessments, identifying and addressing high-complexity security compliance gaps.
– Oversees the review of security compliance deliverables, ensuring alignment with internal and external obligations.
– Implements compliance strategies, staying abreast of internal and external obligations.
– Oversees the management of Oracle-wide inventory systems, implementing systems and controls to track and secure company assets.
Business Continuity Support:
– Strategizes business continuity and disaster recovery plans, aligning them with Oracle's goals and internal and external obligations.
– Implements comprehensive plans, processes, and procedures to safeguard critical systems and data, leveraging advanced technologies and risk management frameworks.
– Oversees Oracle's readiness for certifications and audits, driving continuous improvement and ensuring compliance with relevant standards and regulations.
Data Security and Privacy:
– Oversees the implementation of robust data security frameworks, ensuring the effective utilization of encryption, hashing, masking, access management, and other advanced techniques to ensure the confidentiality and integrity of sensitive information.
– Conducts audits to evaluate the effectiveness of existing documentation and procedures, leading efforts to continuously improve data security practices Oracle-wide.
Research and Innovation:
– Guides research, thought leadership, and collaboration with stakeholders to drive the development of cutting-edge security solutions that address emerging and future threats.
– Monitors the global security landscape, identifying trends, risks, and opportunities for Ora