Senior Security Operations Analyst - Night Shift

Oracle Corporation; Reston (VA); In loco; USD 110.000 - 160.000; Tempo pieno

Descrizione del lavoro

Oracle Reston is seeking a security professional to develop and execute programs that reduce information security risk and strengthen our security posture. You will support incident response, threat and vulnerability management, risk management, security policy development, and digital forensics.

The role requires at least 3 years in information systems with 2+ years in related security areas. Onsite work five days a week in Reston, VA, with opportunities to advance security program management

Competenze

• Three years of experience in information systems with at least two years in one of the listed areas.
• Experience in information security risk management, program management, or governance.

Mansioni

• Respond to security events and follow incident response playbooks.
• Assess and manage information security risks and compliance.
• Conduct threat and vulnerability assessments and monitor remediation.
• Perform digital forensics data collection and preservation as needed.
• Support security education, training and awareness programs.

Conoscenze

Information security risk management

Incident management and response

Threat and vulnerability management

Security policy development

Information security education andaw

Formazione

Bachelor's degree in information systems or related field

Descrizione del lavoro

Develops and executes programs and processes to reduce information security risk and strengthen Oracle’s security posture.Supports the strengthening of Oracle’s security posture, focusing on the following: incident response;threat and vulnerability management; risk management; security policy development and enforcement; digital forensics

Incident Management and response: Responds to security events, identifying possible intrusions and responding in line with Oracle incident response playbooks.

Threat and Vulnerability Management: May research, evaluate, track, and manage information security threats and vulnerabilities in situations where analysis of well‑understood information is required.Risk Management: Assesses the information security risk associated with existing and proposed business operational programs, systems, applications, practices and procedures in complex, business‑critical environments. May conduct and document complex information security risk assessments. May assist in the creation and implementation of security solutions and programs.Digital Forensics: May conduct data collection, preservation, and forensic analysis of digital media independently, where a basic understanding of forensic techniques is required.

Other areas of focus may include duties managing Information Security Education, Training and Awareness programs. In a Corporate Security role, may manage the creation, review and approval of corporate information security policies.

Minimum qualifications: 3 years of experience in information systems with at least 2 years in one of the following: Information security risk management; information security program management; Industry/Government security compliance program management; threat and vulnerability management; incident management and response; security policy development and enforcement; privacy, information security education, training and awareness (ISETA), information security solutions development, etc.

Preferred but not required qualifications include: Experience managing security incidents and vulnerabilities through their life cycle. Experience designing and developing automated process for responding to possible network intrusions. Experience with at least 1 automation language or framework (Python, Ruby, SALT, Terraform, etc.). Possess at least one of the following certifications: CEH, CFR, CCNA Cyber Ops, CCNA-Security, CySA+, GCIA, GCIH, GICSP, Cloud+, SCYBER, PenTest+

Security Clearance required, onsite 5 days a week in Reston, VA.