Lead Principal Security Engineer

Oracle; Denver (CO); On-site; USD 140,000 - 230,000; Full time

Job summary

Oracle is seeking an experienced security engineering leader in Denver to oversee security monitoring, event response, and data protection across Oracle's product portfolio. You will guide design, coding reviews, and tool development to advance cryptography, compliance, and resilience.

This role emphasizes cross-functional collaboration, continuous learning, and innovation, with responsibility for planning, execution, and improvement of security programs and incident response.

Qualifications

• Security leadership and guidance across complex product and service environments.
• Experience influencing security strategy and roadmaps.
• Proven ability to review code and contribute to secure design and testing processes.

Responsibilities

• Oversees comprehensive security assessments across a wide range of complex products and services.
• Drives research and development of cutting-edge testing tools and methodologies.
• Provides expert guidance and leadership in security design and coding, influencing Oracle’s security strategy and roadmap.
• Proactively participates in reviews of security alerts.
• Oversees containment and mitigation of high-impact security events.
• Contributes to post-event reviews to identify systemic vulnerabilities and drive improvements.

Job description

Job Description

Key Responsibilities

Security Monitoring – Security Tool Design and Development

• • Oversees comprehensive security assessments across a wide range of complex products and services.
• • Drives research and development of cutting-edge testing tools and methodologies, staying at the forefront of security innovation.
• • Provides expert guidance and leadership in security design and coding (e.g., reviewing code, writing code for complex investigation), influencing Oracle’s security strategy and roadmap.
• • Proactively participates in reviews of security alerts.

Event Response

• • Uses deep expertise to recognize and elevate more nuanced, highly complex security violations, leveraging advanced technologies and industry best practices.
• • Oversees the containment and mitigation of high-impact security events, ensuring effective response and recovery.
• • Contributes to in-depth post-event reviews, identifying systemic vulnerabilities and driving continuous improvement initiatives.

Compliance

• • Coordinates comprehensive compliance assessments, identifying and addressing high-complexity security compliance gaps.
• • Oversees the review of security compliance deliverables, ensuring alignment with internal and external obligations.
• • Implements compliance strategies, staying abreast of internal and external obligations.
• • Oversees the management of Oracle-wide inventory systems, implementing systems and controls to track and secure company assets.

Business Continuity Support

• • Strategizes business continuity and disaster recovery plans, aligning them with Oracle’s goals and internal and external obligations.
• • Implement comprehensive plans, processes, and procedures to safeguard critical systems and data, leveraging advanced technologies and risk management frameworks.
• • Oversees Oracle’s readiness for certifications and audits, driving continuous improvement and ensuring compliance with relevant standards and regulations.

Data Security and Privacy

• • Oversees the implementation of robust data security frameworks, ensuring the effective utilization of encryption, hashing, masking, access management, and other advanced techniques to ensure the confidentiality and integrity of sensitive information.
• • Conducts audits to evaluate the effectiveness of existing documentation and procedures, leading efforts to continuously improve data security practices Oracle-wide.

Research and Innovation

• • Guides research, thought leadership, and collaboration with stakeholders to drive the development of cutting-edge security solutions that address emerging and future threats.
• • Monitors the global security landscape, identifying trends, risks, and opportunities for Oracle to maintain a competitive edge in security practices.
• • Drives the exploration and adoption of innovative techniques and technologies to solve highly complex and newly emerging security problems.

Core Responsibilities

Planning & Execution

• • Manages and provides direction on timelines, deliverables, and budgets when applicable for critical high-impact projects or initiatives that impact the line of business, ensuring timely completion and adherence to requirements.
• • Anticipates and plans for shifts in resources or timelines based on changing business priorities, ensuring optimal outcomes.

Collaboration & Partnership

• • Influences cross-functional leaders and external stakeholders to gain alignment on strategic objectives.
• • Fosters partnerships with key business leaders, stakeholders, and/or customers, identifying opportunities for expanding partnerships and promoting long-term organizational success.
• • Champions transparency and inclusivity by actively seeking, listening to, and incorporating diverse perspectives.

Problem Solving

• • Leads specialized, advanced problem-solving efforts, serving as an escalation point for complex issues.
• • Guides others to leverage innovative data-driven techniques to address ambiguous or novel issues, identify root causes, and drives the implementation of solutions that prevent future issues.

Continuous Learning

• • Leverages deep industry knowledge and expertise to serve as a thought leader within the organization.
• • Contributes to the advancement of the field or industry through thought leadership (e.g., conference presentations, white papers, research contributions).
• • Maintains and evolves expertise in relevant areas by proactively monitoring emerging trends, technologies, and industry standards, ensuring the organization remains current with best practices.
• • Champions continuous learning and knowledge sharing, promoting professional development across teams. Applies new knowledge to drive advancement and mentors others to do the same.

Continuous Improvement

• • Develops innovative solutions and drives the implementation of ideas that increase the efficiency and effectiveness of processes, protocols, and workflows across the organization.
• • Evaluates effectiveness of updated approaches and methods for continued improvement to enhance efficiencies and ensure changes align with organizational goals.
• • Designs and develops metrics to measure success of improvement initiatives.

Performance and Development

• • Serves as a subject matter expert regarding talent needs and organizational talent strategy.
• • Imparts leadership and expert knowledge throughout the talent development pipeline, including candidate interviews, candidate assessment, and hiring decisions, ensuring alignment with organizational talent strategy.

Responsibilities

Key Responsibilities

System Design & Architecture – System Scalability

• -Mentor the team in the architecture and design of highly scalable, interdependent distributed systems, ensuring horizontal and vertical scalability and overall performance, including leveraging distributed state management tools.

• -Lead the identification of performance and scalability bottlenecks and recommend solutions to optimize code and/or systems for large-scale data processing and high-throughput requirements to improve performance for hyper-scale systems.

• -Lead collaboration with stakeholders to define system scalability requirements, ensuring the defined requirements meet customer expectations.

• -Leverage deep expertise to design high-impact, interdependent systems to scale with elasticity (e.g., effectively scaling both up and down).

• -Drive innovation in the use of data plane platforms.

• -Evaluate whether systems are meeting nonfunctional scalability requirements, and proactively anticipate growing business needs within the business unit.

System Design & Architecture – System Reliability Design

• -Design and oversee the implementation of fault-tolerant, interdependent systems capable of withstanding in-service updates by implementing sophisticated redundancy, replication, and automatic failover capabilities.

• -Lead the design and implementation of systems that effectively handle service disruptions (e.g., network partitions) by prioritizing consistency, availability, or partition tolerance.

• -Guide the optimization of advanced mechanisms to handle network unreliability, including load-shedding, throttling, and rate-limiting.

• -Design interdependent systems that are durable and adhere to service level objectives (SLOs), driving standards for availability and durability of other computing services within the organization

System Design & Architecture – System Reliability Performance

• -Define key performance indicators (KPIs) and telemetry to identify risks, gaps, or cyclical dependencies in running, interdependent systems.

• -Drive the creation and customization of highly complex dashboards, telemetry systems, and alerting mechanisms, proactively ensuring system health and reliability.

System Design & Architecture – Correctness / Availability

• -Maintain expertise in industry standards for verifying correctness and apply existing techniques to interdependent systems.

• -Formally verify complex features (e.g., via TLA ) to ensure system design correctness for various interdependent systems.

• -Develop advanced strategies for data replication and synchronization, ensuring robust data integrity and availability

Operational Troubleshooting & Incident Management

• -Advise on efforts to diagnose, debug, and resolve complex issues in active, interdependent systems to support ongoing operation.

• -Develop and implement comprehensive strategies to prevent interruptions, ensuring no maintenance windows are required for customers and users when resolving issues.

• -Maintain expertise in dependencies, dependents, and owned systems to drive effective troubleshooting and performance.

• -Set standards for operational readiness and standard operating procedures within the department, and hold third-party partners accountable for meeting those standards.

• -Oversee operational support rotations, providing expert guidance