Get introduced to vetted companies that are still hiring

Location

(Hybrid) Reston, VA, Seattle, WA

US Citizenship required

Description

Behind every mission-critical Cloud service is a sophisticated SaaS architecture supporting the largest companies in the world, employing the most advanced software engineering. We are proud to support those services and team with customers who depend on them, continually innovating and challenging the status quo. Our team environment is progressive, flexible, professionally challenging, rewarding, and fun.

We are looking for an experienced SOC Manager to lead and evolve our security operations efforts in reshaping the cloud services landscape across industry verticals to revolutionize the delivery of Cloud Services to the world’s most critical organizations. The SaaS Cloud Security (SCS) organization is responsible for securing enterprise-grade software services on behalf of our customers at scale.

In this role, you will lead a team of security analysts responsible for 24x7x365 monitoring, detection, and response to protect the Oracle SaaS environment. You will drive SOC modernization with a strong emphasis on automation, AI-enabled workflows, emerging threats, continuous procedure evaluation, and cross-organization collaboration. You will also champion “shift-left” security by partnering with engineering, operations, and security stakeholders to prevent incidents earlier through improved controls, instrumentation, and resilient design. (Modernization focus aligned to the SOC automation/AI direction in the source.)

Career Level

Manager (People Leader)

---

Only Oracle brings together the data, infrastructure, applications, and expertise to power everything from industry innovations to life-saving care. And with AI embedded across our products and services, we help customers turn that promise into a better future for all. Discover your potential at a company leading the way in AI and cloud solutions that impact billions of lives.

True innovation starts when everyone is empowered to contribute. That’s why we’re committed to growing a workforce that promotes opportunities for all with competitive benefits that support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs.

We’re committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing accommodation-request_mb@oracle.com or by calling 1-888-404-2494 in the United States.

Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans’ status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.

---

Seeking SOC Manager to lead 24x7 Oracle SaaS monitoring/response, modernize with automation/AI, and shift-left with engineering to prevent incidents.

---

Disclaimer:

Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.

Range and benefit information provided in this posting are specific to the stated locations only

US: Hiring Range in USD from: $120,100 to $251,600 per annum. May be eligible for bonus, equity, and compensation deferral.

Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business.
Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.

Oracle US offers a comprehensive benefits package which includes the following:
1. Medical, dental, and vision insurance, including expert medical opinion
2. Short term disability and long term disability
3. Life insurance and AD&D
4. Supplemental life insurance (Employee/Spouse/Child)
5. Health care and dependent care Flexible Spending Accounts
6. Pre-tax commuter and parking benefits
7. 401(k) Savings and Investment Plan with company match
8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
9. 11 paid holidays
10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
11. Paid parental leave
12. Adoption assistance
13. Employee Stock Purchase Plan
14. Financial planning and group legal
15. Voluntary benefits including auto, homeowner and pet insurance

The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.

Career Level - M3

---

Responsibilities

RESPONSIBILITIES/TASKS

• Lead and manage SOC operations to collectively support 24x7x365 monitoring and response coverage; ensure consistent shift handoffs and operational continuity.
• Ensure the confidentiality, availability, and integrity of cloud data and systems; reinforce practices that respect and protect customer data.
• Drive SOC modernization initiatives across people, process, and technology (operating model, metrics/KPIs, quality assurance, and continuous improvement).
• Oversee monitoring of security controls to detect and prevent infiltration of company systems and exfiltration of company data by adversaries; ensure effective escalation and coordination for remediation and forensics.
• Mature detection engineering and operations by improving correlation across disparate log sources, baselining, and expanding behavior-based alerting aligned to current attacker TTPs.
• Establish and continuously evaluate SOC procedures (SOPs/runbooks), incident severity classification, escalation criteria, and communications processes; run recurring exercises and lessons learned.
• Lead automation of SOC workflows using SOAR tools and/or scripts; prioritize high-value playbooks (enrichment, deduplication, triage assistance, containment with guardrails).
• Champion AI-enabled SOC capabilities (e.g., alert clustering, assisted triage, summarization) with appropriate governance and analyst-in-the-loop practices; measure impact on quality and speed. (Aligned to “AI and automation tools” emphasis.)
• Maintain awareness of latest industry trends and threat intelligence; direct hunts/initiatives that address emerging threats and translate learnings into durable detections and playbooks.
• Provide management with monitoring reports and trend analysis; drive actionable outcomes from metrics (noise reduction, coverage gaps, staffing/training needs).
• Provide excellent customer service to Operations and partner teams reporting policy violations, potential incidents, and requesting security solution support.
• Drive cross-organization collaboration with security, customer support, cloud operation and engineering teams to implement “shift-left” improvements that reduce incident volume upstream (instrumentation, guardrails, secure defaults, response-ready architectures).
• Perform other duties as assigned.

DESIRED QUALIFICATIONS:

• University degree preferred, not required.
• Industry certifications are preferred; CISSP/CISM, GIAC
• Demonstrated 5+ years of experience leading security operations / incident response teams in enterprise environments (people leadership, hiring, coaching, performance management).
• Strong knowledge of incident detection and response practices, including escalation, evidence handling, and operational reporting/trend analysis.
• Experience utilizing enterprise security solutions including but not limited to SIEM, security detection and response tools, and endpoint security products.
• Experience modernizing a SOC: automation/SOAR program development, use-case lifecycle management, alert quality improvements, and measurable outcomes (e.g., MTTD/MTTR).
• Ability to analyze attacker tactics, techniques, and procedures (TTPs); strong log analysis, deduction, analytical, and problem-solving skills.
• Knowledge of Information Security standards and access controls such as ISO27001/2, PCI DSS, and other international standards.
• Strong technical experience with Linux or similar Unix platforms, as well as with Windows.
• Strong organizational skills and detail-orientation essential; strong presentation, written and verbal communication skills.
• Knowledge of virtualization and scripting.
• Knowledge of application security highly desirable
• Hold or ability to obtain TS/SCI clearance for Critical-Sensitive Positions; FS Poly clearance highly desirable.