Overview
of Team and Projects\:
SaaS Security Services team works on the cloud security initiatives across all
Oracle SaaS deployments. This includes service availability for FA-SaaS, Identity/
access/ SSO integrations for SaaS applications, security incident management
and response, security scans for vulnerabilities, fixes and deployment, life
cycle management for IAM deployments, WAF configuration and deployment across
SaaS fleet, Secrets management and BreakGlass lifecycle management, Managing
security deployments a Cloud@Customer etc.
SSS org also indulges in various projects and tools for automation to build new
processes and enhance existing systems i.e. job control for various routines
for across the fleet changes, Terraform for building/ deploying apps on OCI,
Automating updates/ remediation via devops tools i.e. jenkins,
Apex/ Jet based User Interfaces for front ending apps as needed, Building EM/
JC / ODIN dashboards and metric extensions for monitoring etc.
Work is very interesting and offers ample learning/ skill
building opportunities in security/ cloud area.
Requirements\:
-5 years of information security and / or application
security experience.
-Excellent scripting experience in shell/ perl/ python etc and
must have worked on developing automation tools
-Extensive knowledge of web technologies and concepts
-Exposure to Web Application Vulnerabilities including a
detailed understanding of the OWASP top 10
-Experience of application penetration testing
-Expertise in one or multiple areas such as operating
systems, web services, programming languages, network devices, application
vulnerabilities
and attack vectors
-Evaluate applications for appropriate and effective use of
security controls, using techniques such as SAST and DAST vulnerability
scanners
-Strong understanding of TCP/IP, web protocols and
networking concepts, Deep Knowledge of networking i.e. DNS records, LoadBalancers,
subnets etc
Added Advantages
-Knowledge of cloud security, security certifications i.e. CISSP, CISK, CISP
-Any Cloud architect Certification i.e. AWS, OCI etc.
-Deep knowledge of encryption and cryptographic algorithms including current
industry standards for encryption, hashing, certificates etc
-Knowledge of Java programming is a huge plus
!|!Work with Oracle*s world class technology to develop, implement, and support Oracle*s global infrastructure.
As a member of the IT organization, assist with the analyze of existing complex programs and formulate logic for new complex internal systems. Prepare flowcharting, perform coding, and test/debug programs. Develop conversion and system implementation plans. Recommend changes to development, maintenance, and system standards.
Leading contributor individually and as a team member, providing direction and mentoring to others. Work is non-routine and very complex, involving the application of advanced technical/business skills in area of specialization. BS or equivalent experience in programming on enterprise or department servers or systems.
As part of Oracle's employment process candidates will be required to complete a pre-employment screening process, prior to an offer being made. This will involve identity and employment verification, salary verification, professional references, education verification and professional qualifications and memberships (if applicable).
As part of Oracle's employment process candidates will be required to successfully complete a pre-employment screening process. This will involve identity and employment verification, professional references, education verification and professional qualifications and memberships (if applicable).!|!
Get email alerts for the latest"Senior Security Engineer jobs in Cz-cz,czech rep-prague"
