Job Description

:Minimum Qualifications

• 6+ years of experience in security engineering, detection engineering, or cloud security.
• Strong expertise in application security, API security, and SaaS-specific threat detection.
• Experience with SIEM, SOAR, and detection-as-code tools (e.g., Splunk, OpenSearch, KQL, Sigma).
• Proficiency in log analysis, security telemetry engineering, and anomaly detection in cloud applications.
• Experience integrating security controls into SaaS applications and microservices.
• Good programming and automation skills.

Preferred Qualifications

• Experience with automated threat simulations, MITRE ATT&CK mappings, and adversary emulation.
• Knowledge of risk quantification methods and security metrics for executive reporting.
• Familiarity with cloud-native security tools.
• Hands-on experience in threat intelligence-driven detection engineering.
• Security certifications (e.g., GIAC GCDA/GCFA, AWS Security Specialty, GCP Security Engineer, OSCP).

Career Level - IC4Responsibilities: 1. SaaS-Application Centric Detection Research & Engineering

• Develop and refine application-layer security detections for FAaaS, Spectra, and other critical LoBs, focusing on business logic abuse, API security threats, and identity-based attacks.
• Research and engineer detections for SaaS-specific attack vectors.
• Leverage detection-as-code frameworks (e.g., Sigma, OpenSearch, KQL) to automate the development and tuning of detection rules.
• Work closely with application security teams to enhance telemetry and ensure that security observability is embedded in SaaS products.

2. Proactive Security Controls & Mitigative Capabilities

• Move beyond traditional monitoring by implementing proactive security controls to mitigate threats before exploitation.
• Collaborate with development teams to integrate security controls into SaaS applications for real-time anomaly detection and automated response.
• Drive continuous security validation efforts through automated adversary simulation and detection effectiveness testing.

3. Cross-Team Integration & Real-Time Threat Intelligence Sharing

• Drive collaboration between Detection Engineering, Incident Response, and Red Teams by aligning detection research with real-world attack simulations and post-incident learnings.
• Develop automated feedback loops to reduce false positives, false negatives, and coverage gaps.
• Work with Incident Response to develop automated triage and enrichment mechanisms for SaaS security incidents.

4. Risk-Based Detection Engineering & Security Metrics

• Shift towards a risk-based detection approach, ensuring that high-impact threats are prioritized based on their potential financial and reputational consequences.
• Provide executive-level visibility into detection efficacy by quantifying the impact of mitigated threats and aligning detection efforts with business risk.
• Develop security dashboards and reporting to communicate detection outcomes, including risk coverage, adversary trends, and operational efficiency.

5. Proactive Threat Hunting & Data Anomaly Analysis

• Expand threat hunting and anomaly detection capabilities to identify previously unknown threats affecting SaaS customers and cloud applications.
• Utilize advanced data analytics and behavioral anomaly detection to identify stealthy attacks that evade traditional detection methods.
• Reduce reliance on SOC-driven escalations by proactively analyzing security telemetry for signs of compromise.
• Work closely with data scientists to enhance the use of ML/AI-driven security analytics for predictive threat detection.

About Us:As a world leader in cloud solutions, Oracle uses tomorrow's technology to tackle today's problems. True innovation starts with diverse perspectives and various abilities and backgrounds.When everyone's voice is heard, we're inspired to go beyond what's been done before. It's why we're committed to expanding our inclusive workforce that promotes diverse insights and perspectives.We've partnered with industry-leaders in almost every sector-and continue to thrive after 40+ years of change by operating with integrity.Oracle careers open the door to global opportunities where work-life balance flourishes. We offer a highly competitive suite of employee benefits designed on the principles of parity and consistency. We put our people first with flexible medical, life insurance and retirement options. We also encourage employees to give back to their communities through our volunteer programs.We're committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by calling +1 888 404 2494, option one.Disclaimer:Oracle is an Equal Employment Opportunity Employer*. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans' status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.

• Which includes being a United States Affirmative Action Employer

Oracle