Principal Security Analyst

Join Our Team as a Principal Security Analyst!

Are you a driven hardware and firmware security expert? At Oracle Cloud Infrastructure (OCI), we are seeking a talented individual to play a pivotal role in our Security Assurance program. You will engage in technical security reviews and have the chance to work on code-level security matters.

As part of the OCI Hardware Development team, you will contribute to the development of Oracle's cutting-edge AI hardware platforms while adhering to Oracle's software and hardware security standards throughout the component lifecycle- from selection to vulnerability management.

Job Responsibilities:

• Monitor vendor advisories from Intel, AMD, NVIDIA, ARM, etc. for hardware and firmware vulnerabilities.
• Conduct risk analysis and threat modeling to assess vulnerabilities applicable to Oracle's hardware products.
• Drive and oversee the mitigation of vulnerabilities across OCI teams.
• Communicate risks and mitigation plans to internal stakeholders and customers.
• Utilize Python for managing internal tools for vulnerability management.
• Assist engineering teams in planning security reviews of hardware/firmware technologies.
• Conduct inbound hardware/firmware security reviews and product release security evaluations.
• Produce reports and track the progress of individual reviews.
• Identify and enhance security review processes.
• Collaborate with the Chief Security Architect and internal partners.
• Engage with Oracle’s ecosystem to ensure adoption of security requirements.
• Serve as a technical resource for third-party partners and develop necessary tools.
• Opportunity to assess code quality with the Core Firmware Engineering team.
• Involvement in Architectural Risk Analysis and threat analysis.

Required Qualifications:

• B.S. in Computer Science, Computer Engineering, or related field.
• 7+ years of experience in software engineering and/or security.
• Experience in security assessments and the ability to review forensic reports.
• Expertise in secure firmware/software development lifecycle.
• Highly motivated with the ability to manage multiple tasks under pressure.
• Strong problem-solving skills paired with a strategic mindset.
• Proficiency in analyzing and communicating hardware security vulnerabilities.
• Excellent communication skills, both written and oral.
• Experience with modern server platform hardware and firmware.
• Programming skills in C/C++, Linux, bash, Python, and Java.

Salary Range: The expected salary range is between $96,800 and $223,400 per annum, with eligibility for bonus and equity opportunities.

Join Oracle, a leader in AI and cloud solutions, and be a part of shaping the future of technology!

The role is open for applications, and we welcome your interest in becoming part of our innovative team.