Senior Manager, Security Engineering

hackajob is collaborating with Oracle to connect them with exceptional professionals for this role.

Description

Guides the creation of testing tools and facilitates their integration into engineering workflows, ensuring team is equipped to identify and address security-related weaknesses efficiently. Establishes protocols for security violation escalation, managing communication with senior leadership and stakeholders. Conducts compliance assessments and coaches employees providing compliance assessments. Guides employees on using advanced tools and techniques for data security such as encryption, hashing, masking, and access management to ensure the confidentiality and integrity of sensitive information.

Responsibilities

Key
Responsibilities

Security
Monitoring - Security Tool Design and Development:

• Drives

security strategy, ensuring that organizational goals are met.

• Oversees

employees working on security assessments across a wide range of complex
products and services.

• Guides

the creation of testing tools and facilitates their integration into
engineering workflows, ensuring the team is equipped to identify and address
security-related weaknesses efficiently.

• Chairs

security design and evaluation (e.g., traffic capturing, alerts), ensuring
adherence to internal and external obligations, and strengthening security
posturing.

Event
Response:

• Establishes

protocols for security violation escalation, managing communication with senior
leadership and stakeholders.

• Develops

and enforces protocols to contain and mitigate security events, coordinating
cross-functional response efforts.

• Leads

post-event review meetings to identify improvement areas, ensuring feedback is
incorporated into ongoing security processes.

• Provides

guidance to stakeholders who come to the security team with security events or
concerns.

Compliance

• Conducts

compliance assessments and coaches employees providing compliance assessments.

• Ensures

team's security compliance deliverables adhere to internal and external
obligations.

• Oversees

inventory, operability, and accountability of company assets, implementing
robust tracking systems.

Business
Continuity Support:

• Guides

the development of business continuity and disaster recovery plans, processes,
and procedures.

• Ensures

the availability and resilience of critical systems and data, overseeing
efforts to withstand disruptions.

• Directs

readiness assessments for certifications and audits, implementing improvements
to meet evolving standards.

Data
Security and Privacy:

• Guides

employees on using advanced tools and techniques for data security such as
encryption, hashing, masking, and access management to ensure the
confidentiality and integrity of sensitive information.

• Oversees

the review of documentation and procedures, identifying and implementing
improvements in data security practices.

Research
and Innovation:

• Drives

industry security knowledge advancement, fostering research and innovation
efforts.

• Aligns

the team on emerging trends, ensuring shared knowledge of evolving threats and
vulnerabilities.

• Promotes

novel techniques to solve unique security problems, encouraging creative and
effective solutions.

Core
Responsibilities

Planning
& Execution:

• Manages

multiple medium- to large-scale projects or initiatives across teams, ensuring
timelines, deliverables, and budgets when applicable are monitored and met.

• Provides

direction to teams on project work, setting priorities, and aligning with
business needs.

• Guides

teams on adjusting plans to accommodate resource or timeline changes.

Collaboration
& Partnership:

• Drives

cross-functional partnerships to align expectations and shared objectives
across multiple teams.

• Coaches

team members to develop strategic relationships with business leaders,
stakeholders, and external partners to foster collaboration and long-term
success.

• Promotes

inclusivity by actively seeking and listening to diverse perspectives, ensuring
others feel heard and respected.

Problem
Solving:

• Provides

direction to multiple teams on addressing complex operational and/or technical
issues as well as providing guidance on analyzing complex data and/or
information to identify solutions.

• Reviews

and provides insights into unresolved or critical issues, helping the team to
identify potential solutions.

Continuous
Learning:

• Models

engaging in continuous learning to deepen expertise and stay ahead of industry
trends, integrating best practices into strategic planning.

• Leverages

feedback to drive personal and team skill improvements.

• Identifies

skill gaps across teams, and empowers team members to pursue learning and
knowledge sharing opportunities that build their expertise in new areas and
coaches them to apply learnings to advance the organization.

Continuous
Improvement:

• Drives

team to collaborate on, develop, and implement ideas to increase the efficiency
and effectiveness of processes, protocols, and workflows within and across
teams, providing oversight.

• Guides

team to adopt new ideas for alternative approaches and methods and encourages
feedback for continued improvement.

Performance
and Development:

• Drives

performance across teams by providing feedback and coaching in alignment with
performance management processes, guidelines, and expectations.

• Discusses

development goals with team members, shares opportunities to facilitate career
development, and ensures individual goals are aligned with broader
organizational goals.

• Develops

and manages talent acquisition pipeline by leading candidate interviews, monitoring
promotion eligibility, and/or orchestrating talent resources.

Qualifications
Minimum Job Qualifications
Education and/or Experience:

9 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

OR

Bachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 5 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

OR

Master's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 3 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.

Job Skills

Same skills as prior level plus;

Incident Management and Response Demonstrated ability in or knowledge of incident management and response, including timely handling and escalation of incidents to minimize business impact.

Threat Modeling Demonstrated ability in or knowledge of threat modeling, including applying techniques to identify and mitigate security risks and vulnerabilities.

Cloud Security Demonstrated ability in or knowledge of cloud security, including protecting cloud infrastructure and data using risk management frameworks.

Preferred Job Qualifications
Education and/or Experience:

11 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

OR

Bachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 7 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

OR

Master's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 5 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.

Job Skills

Same skills as prior level.

People Leadership / Management Experience

3 years of experience in a leadership role with direct reports.

Budget Experience

2 years of experience working with operating budgets and/or project financials.

Cloud or Internet Software Security Experience

3 years of experience working on high-impact projects related to cloud or internet software security.

Programming/Scripting Experience

3 years of experience working with one or more of the following programming or scripting languages (e.g., Go, Java, Python, or C/C++).

Cloud Experience

6 months of experience with AWS Solution, Azure 900 Fundamentals, OCI Fundamentals, or equivalent cloud experience.

. click apply for full job details