Logo
Oracle

Offensive Security Manager

Oracle, Poland, New York, United States

Save Job

Be among the first 25 applicants

Overview Job Description: Manage a team that is responsible for advanced security testing of Oracle applications and services (primarily SaaS-related) including but not limited to covert red team operations, security research and white box penetration testing, exploit development, and black box penetration testing. Additionally, the ability to provide hands-on help in the form of security research or red teaming is a bonus.

Responsibilities This team is responsible for ensuring the protection of Oracle's SaaS applications and services.

Oracle SaaS (a.k.a. Oracle Cloud applications), built on machine learning, offers the most complete application suite with the best technology, enabling fast innovation with a modern UX and customer-first approach and one of the top strategic cloud services for Oracle.

The SCS organization is responsible for securing enterprise-grade software services on behalf of our 25,000 customers, processing over 60 billion transactions per day. You will have the opportunity to work in a cloud-scale environment using the latest security technologies/tools and collaborate with the best minds in the industry, to collectively stay ahead of and respond to increasing threats to cloud services. And you will manage and lead a team in conducting proactive security research and white box penetration testing, including the development of working proof of concept exploits; reactive security research based on industry trends as well as security incidents related to Oracle; covert red team operations; black box penetration tests; and other types of work involving collaboration with various security and engineering teams within Oracle SaaS.

About you:

Successful applicants will possess the knowledge necessary to successfully manage a team of offensive security engineers.

The team that is hiring will have members who may possess different sets of advanced offensive security skills. Some of those advanced skills include:

Red team custom implant development primarily in a Linux environment (non-Linux OS environments also present but less numerous)

Red team campaign execution

Red team infrastructure support (i.e., Terraform, Ansible, cloud products, etc.)

Security research and code review

Proof of concept exploit/malware development

Minimum Qualifications

6+ years of experience in information security with at least 2 years experience managing a team recently

BS in Computer Science, or equivalent experience

Strong knowledge of offensive security principles and methodologies

Ability to lead a small team in achieving exceptional results

Ability to work in a collaborative, cross-functional team environment

Ability to prioritize and handle concurrent assignments or projects

Excellent team player, willing to share knowledge and skills with peers and team members

Strong presentation, written and verbal communication skills

Ability to supervise the development, deployment and execution of controls and defenses to ensure the security and risk mitigation of company infrastructure technology and information systems

Ability to identify security architecture, goals, objectives and metrics; analyze business needs and priorities for protection of critical systems

Ability to monitor security programs and assurance, (i.e., threat and vulnerabilities management, incident response management, management of forensic investigations)

Ability to evaluate potential business impacts from security breaches and provides guidance to business decision-makers

In depth knowledge of security vulnerabilities including a detailed understanding of the OWASP top 10, secure design and secure coding principles

Preferred Qualifications

Deep familiarity with Linux and attack tooling is required

Experience with security testing tools including static analysis, web application testing, infrastructure and network testing, and manual security testing

Proficient in programming and scripting languages including any of the following: Java, C#, C, Go, Rust, Scala, Ruby, Python, Bash/sh, Powershell, JavaScript, or other object-oriented languages

Experience leading red team campaigns from start to finish with high success rate and low detection rate

Experience in building covert command and control (C2) implants designed to evade host-based and network-based detection capabilities

Proven ability (i.e., published CVEs, etc.) to discover and exploit complex security vulnerabilities and vulnerability chains to achieve remote code execution (RCE)

Experience with AI red teaming or penetration testing

Advanced security certifications relevant to white box penetration testing and red team operations such as: OSCP, OSCE, OSWE, OSEP, OSED, OSEE, OSCE3, CRTP, CRTE, CRTM, GXPN

Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans status or any other characteristic protected by law.

Qualifications: Career Level - M2

About Us: As a world leader in cloud solutions, Oracle uses tomorrow’s technology to tackle today’s challenges. We’ve partnered with industry-leaders in almost every sector—and continue to thrive after 40+ years of change by operating with integrity. We know that true innovation starts when everyone is empowered to contribute. That’s why we’re committed to growing an inclusive workforce that promotes opportunities for all. Oracle careers open the door to global opportunities where work-life balance flourishes. We offer competitive benefits based on parity and consistency and support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs. We’re committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing accommodation-request_mb@oracle.com or by calling +1 888 404 2494 in the United States.

Seniority level: Mid-Senior level

Employment type: Full-time

Job function: Other, Information Technology, and Management

Industries: IT Services and IT Consulting

Referrals increase your chances of interviewing at Oracle by 2x

Cyber Security Manager | Warsaw (Full remote)

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

#J-18808-Ljbffr