You own cloud and SaaS security assessments, governance, and engineering for OCI environments.
This role is on-site.
Responsibilities
Conduct security reviews of OCI services, SaaS applications, architectures, and configurations to identify risks and control gaps.
Map implementations to enterprise controls and industry frameworks including NIST, ISO 27001, CSA CCM, and CIS.
Support implementation of OCI-native security controls and assist with security automation using Infrastructure-as-Code (Terraform) and policy-as-code.
Perform SaaS onboarding assessments, certification reviews, and posture management to evaluate configuration drift and data protection.
Partner with platform engineering, DevOps, and compliance teams to embed security into deployment and operational processes.
Required Skills
5+ years of experience performing cloud security assessments within OCI or comparable cloud platforms.
Strong understanding of Identity & Access Management (IAM), Network Security, Data Protection, and Cloud Logging & Monitoring.
Experience conducting SaaS security reviews and certifications, including familiarity with SSPM platforms and CASB technologies.
Proficiency in reviewing Infrastructure-as-Code (Terraform) and cloud architecture designs.
Knowledge of cloud shared responsibility models, secure-by-design principles, and API security.
Bachelor's degree in a relevant field or equivalent experience.
Strong written and verbal communication skills for documenting findings and supporting governance decisions.
Preferred Skills
Oracle Cloud Infrastructure certifications and experience with OCI Cloud Guard, Security Zones, and Oracle SaaS platforms.
Experience with AI/GenAI security assessments and automated compliance tooling.
Experience working with GitHub, CI/CD pipelines, and cloud security automation.