Principal Security Analyst

Team: 
The Security Evaluations team is responsible for the independent (formal) global security evaluations of Oracle products (mostly FIPS 140 and Common Criteria), including their use in Oracle cloud services, an important aspect of Oracle's commitment to security. The team is part of Oracle's Global Product Security group, under the management of the Chief Security Officer. This group is responsible for managing cross-product security activities and the security assurance for Oracle products and cloud services.

The Security Evaluations team (SecEval) are experts in government security evaluations and assurance standards. We are looking for someone to join the team that brings a similar level of “expertise” as the rest of the team. 

 

Qualifications:

• Three to Five years’ experience in a FIPS lab:
  • performing validations of FIPS 140 

OR

• the equivalent amount of time managing validations as a vendor.

• Solid understanding of FIPS validation methodologies and processes 
• Comfortable preparing some technical evidence as needed and/or repeating of developer tests to support evaluations and validations.
• The ideal candidate will have the ability to translate security certification jargon to development teams and interpret consultants/labs advice.
• Knowledge of operating systems, particularly Linux, preferred.
• Solid knowledge of cryptography preferred.
• Experience with Common Criteria a plus
• A working knowledge of any of the following technologies are advantages to the candidate: relational databases (particularly Oracle DBMS), identity and access management products, and cloud service technologies. Knowledge of OpenSSL and other cryptographic modules is also helpful.
• The successful candidate should possess excellent time management and organizational skills as well as demonstrable verbal and written communication expertise.
• Strong knowledge of Procurement Management processes are key skills for the candidate. PMP or PRINCE2 a plus.
• CSSLP, CISM or CISSP a plus.
• Education Requirements:
  • US/Canada: BS (essential) or MS (preferred) degree or equivalent experience relevant to functional area

Must be willing to travel up to 10% in US, Canada and worldwide.

Career Level - IC4

As a Principal Security Analyst in the Security Evaluations team, you will be mainly responsible for managing security evaluations and validations for Oracle.   Duties in support of these responsibilities and other duties include:

• Track progress of approved security evaluation and validation projects against budget and schedule, performing continuous risk analysis.  
• Finance and resource budget preparation, maintenance, and reporting
• Collaborate with Legal and Procurement departments on activity with all third parties including contracts and Statements of Work
• Participate in international evaluation communities and technical working groups, and other appropriate external working groups as assigned.  The ability and willingness to influence a community of external participants is critical in this role.
• Some testing or evidence development (authoring of FIPS specialized documentation) and/or editing/reviewing of this evidence may be required.

Disclaimer:

Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.

Range and benefit information provided in this posting are specific to the stated locations only

CA: Hiring Range in CAD from: $76,700 to $167,600 per annum.
US: Hiring Range in USD from: $96,800 to $223,400 per annum. May be eligible for bonus and equity.

Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle’s differing products, industries and lines of business.
Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.

Oracle US offers a comprehensive benefits package which includes the following:
1. Medical, dental, and vision insurance, including expert medical opinion
2. Short term disability and long term disability
3. Life insurance and AD&D
4. Supplemental life insurance (Employee/Spouse/Child)
5. Health care and dependent care Flexible Spending Accounts
6. Pre-tax commuter and parking benefits
7. 401(k) Savings and Investment Plan with company match
8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
9. 11 paid holidays
10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
11. Paid parental leave
12. Adoption assistance
13. Employee Stock Purchase Plan
14. Financial planning and group legal
15. Voluntary benefits including auto, homeowner and pet insurance

The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.
 

This job requires proficiency in the English language. Oracle is a global company with operations in dozens of countries around the world and our teams, including the team this position is part of, are comprised of individuals located in various jurisdictions. As is required of employees in all jobs at Oracle in North America, candidates for this position are required to understand, and communicate, in English so that in the course of performing their work, they can interact with teammates in other locations who are not fluent in the French language.

For applicants located in the Province of Quebec, a basic proficiency of the French language is required.