Principal Security Architecture Specialist

As a Senior Security Consultant, you will review architectures and designs to identify security flaws and opportunities for hardening. You will be part of a team of dedicated security professionals who work autonomously, but support each other and all of NetSuite teams and products. The Security Consulting team owns and drives its own Security Design Review, Security Champions and Oracle Corporate Security compliance programs. We are integrated with the product and engineering teams; integrated into the Software Development Lifecycle, providing security guidance and acting as a single point of contact for all things security.

Career Level - IC4

Provides advanced level skills and knowledge in the design and review of products, applications, and integrations ensuring  requirements are in line with Corporate information security policies and processes, as well as Line of Business (including Cloud) security standards. 

Evaluates existing and proposed technical architectures for security risk, provides advanced technical advice to support the design and development of secure architectures and identifies security controls to mitigate those risks.

Provides technical leadership regarding security protocols related to all aspects of enterprise and cloud computing.
Evaluations of security architectures and designs through design reviews and threat modeling.

Identifies and prioritizes security design issues.

Collaborates with software engineers, architects and business leaders to make our products better, helping them balance product and security risk decisions.

Understands both the technical and business security risk of the organization.

Work with architecture teams to proactively design and develop safe architectural patterns into a standard catalog of solutions. 

Promote application security reference architecture standards. 

Foster a security culture by educating product and business leaders on the importance of security. 

Stays informed on current security trends and share that knowledge with the rest of the security and engineering teams.
May train and mentor other staff.

Minimum Qualifications:

B.S. in Computer Science, Computer Engineering, or related field, or sufficient related experience. 

10+ years in the field of software development and/or application security. 

Existing knowledge of product security and/or willingness to learn. 

Programming experience with one or more programming language. 

Familiarity with application security concepts (e.g. OWASP Top 10).

Experience in an IC leadership role in engineering, architecture, or security. 

Understand risk and how to make sound decisions. 

Effective at facilitating group discussions. 

Able to adapt communication style to suit technical and non-technical audiences.

Bonus:

Experience working in an Agile development environment.

Familiarity with application security projects (e.g. OWASP Top 10) and industry standards such as ISO27K, BSIMM, etc.

Recognized industry certification and/or continuing education programs are a major plus.

Range and benefit information provided in this posting are specific to the stated locations only

CA: Hiring Range in CAD from: $76,700 to $167,600 per annum.


Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle’s differing products, industries and lines of business.
Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.
 

This job requires proficiency in the English language. Oracle is a global company with operations in dozens of countries around the world and our teams, including the team this position is part of, are comprised of individuals located in various jurisdictions. As is required of employees in all jobs at Oracle in North America, candidates for this position are required to understand, and communicate, in English so that in the course of performing their work, they can interact with teammates in other locations who are not fluent in the French language.

As a world leader in cloud solutions, Oracle uses tomorrow’s technology to tackle today’s problems. True innovation starts with diverse perspectives and various abilities and backgrounds.

When everyone’s voice is heard, we’re inspired to go beyond what’s been done before. It’s why we’re committed to expanding our inclusive workforce that promotes diverse insights and perspectives.

We’ve partnered with industry-leaders in almost every sector—and continue to thrive after 40+ years of change by operating with integrity.

Oracle careers open the door to global opportunities where work-life balance flourishes. We offer a highly competitive suite of employee benefits designed on the principles of parity and consistency. We put our people first with flexible medical, life insurance and retirement options. We also encourage employees to give back to their communities through our volunteer programs.

We’re committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by calling +1 888 404 2494, option one.

Disclaimer:

Oracle is an Equal Employment Opportunity Employer*. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans’ status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.

* Which includes being a United States Affirmative Action Employer