Description

Key Responsibilities

• Conduct security reviews of OCI services, SaaS applications, architectures, integrations, and configurations.
• Identify security risks, control gaps, and remediation opportunities.
• Evaluate solutions against enterprise security standards, policies, and regulatory requirements.
• Provide security guidance for secure deployment and adoption of cloud and SaaS services.

Security Domains Reviewed

• Identity & Access Management (IAM)
• Network Security
• Data Protection & Encryption
• Logging & Monitoring
• Compute & Container Security
• API Security
• SaaS Security Posture Management (SSPM)
• AI / GenAI Security
• Third-Party & Vendor Risk

Security Standards & Governance

• Map OCI and SaaS implementations to enterprise controls and industry frameworks (NIST, ISO 27001, CSA CCM, CIS).
• Validate compliance with secure configuration baselines and reference architectures.
• Support development and maintenance of OCI and SaaS security standards, guardrails, and onboarding requirements.
• Assess new cloud and SaaS capabilities and provide security recommendations.

Cloud & SaaS Security Engineering

• Support implementation of OCI-native security controls and governance capabilities.
• Assist with security automation through Infrastructure-as-Code (Terraform) and policy-as-code frameworks.
• Support deployment and integration of security monitoring, posture management, and compliance capabilities.
• Partner with platform engineering teams to embed security into deployment and operational processes.

SaaS Security Governance

• Perform SaaS onboarding assessments and certification reviews.
• Evaluate SaaS architectures, integrations, data flows, and security controls.
• Conduct SaaS posture reviews and assess configuration drift, identity governance, and data protection controls.
• Support SaaS inventory management, Shadow IT discovery, and vendor security assessments.

Collaboration & Stakeholder Engagement

• Partner with cloud engineering, architecture, DevOps, security operations, compliance, procurement, and risk teams.
• Document findings, recommendations, and evidence to support governance and certification decisions.
• Provide security expertise during design reviews, onboarding activities, exception management, and remediation efforts.

Required Experience & Skills

• Experience performing cloud security assessments within OCI or comparable cloud platforms.
• Strong understanding of:
• Identity & Access Management
• Network Security
• Data Protection
• Cloud Logging & Monitoring
• Container & Platform Security
• Experience conducting SaaS security reviews and certifications.
• Familiarity with:
• OCI security services
• SSPM platforms
• CASB technologies
• Cloud governance frameworks
• Experience reviewing Infrastructure-as-Code (Terraform) and cloud architecture designs.
• Knowledge of cloud shared responsibility models and secure-by-design principles.
• Strong written and verbal communication skills.

Preferred Experience

• Oracle Cloud Infrastructure certifications.
• Experience with:
• OCI Cloud Guard
• Security Zones
• Oracle SaaS platforms
• SaaS Security Posture Management (SSPM)
• Policy-as-Code and automated compliance tooling
• Experience supporting AI/GenAI security assessments.
• Experience working with GitHub, CI/CD pipelines, and cloud security automation

Key Skills

Education

Any Graduate