Principal Security Engineer

We need to output only HTML fragment, using

for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must include sections only when posting has real specific content. We must not repeat job title as heading. Must not include Job ID etc. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, application instructions. Also remove "About Us" maybe? The instruction says use headings for sections like About the role, Responsibilities, etc. The posting includes "Job Description" then paragraphs, then "Responsibilities", "Key Responsibilities", then bullet list, then "Minimum Qualifications", then "Preferred Qualifications", then "Qualifications Disclaimer", then "Range and benefit information", then "Oracle US offers a comprehensive benefits package", then details, then "The role will generally accept applications..." then "About Us", then EEO etc. We need to preserve all substantive information, but remove boilerplate like EEO, accommodation request, etc. Also remove "Qualifications Disclaimer" maybe? It's a legal disclaimer; might be considered boilerplate? It says "Certain U.S. based or U.S. client-facing roles may be required to comply..." That's somewhat specific but could be considered boilerplate. The instruction: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate. That includes legal disclaimer. So we should drop the "Qualifications Disclaimer" paragraph. Also remove "The role will generally accept applications..." (application instructions) - remove. Remove "About Us" maybe? It's not one of the prescribed headings but could be considered "About the role"? Actually "About Us" is company description; could be considered "About the role"? The instruction says use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we could map "About Us" to "About the role". But we need to preserve substantive info: the paragraph about Oracle bringing together data etc. That's substantive. So we can put that under

About the role

. We need to include sections only when posting has real specific content. We have content for About the role (the initial job description paragraph plus maybe the "About Us" paragraph). Responsibilities: we have bullet list. Requirements: we have Minimum Qualifications. Qualifications: we have Preferred Qualifications maybe? But we already have Requirements (minimum). Qualifications could be Preferred Qualifications. Skills: maybe we can extract skills from responsibilities? But we might not need a separate Skills section if content is thin. Benefits: we have detailed benefits. Pay: we have salary range. Schedule: not mentioned (no schedule info). So we should not create Schedule section. We must not create sections with filler like "commensurate with experience". So we need to ensure each heading has substantive content. Thus sections: About the role, Responsibilities, Requirements (minimum qualifications), Qualifications (preferred qualifications), Benefits, Pay. We must not repeat job title as heading. The job title is "Principal Hardware Security Engineer". Not used. We need to use

• for any list of duties/requirements/benefits. So for Responsibilities list, we need
  • . For Requirements (minimum qualifications) maybe it's a list; we can use
    • . For Preferred Qualifications also list. For Benefits list also. We need to use

      for prose. We must preserve all substantive information; do not invent or summarize away detail. So we need to copy the text exactly? Not necessarily exact but preserve meaning. We'll try to keep sentences. We must remove duplicated lines. There's some duplication: "Ability to effectively assess risk from findings and threat models and identify proper risk mitigation controls" appears both in Minimum and Preferred? Actually appears in Minimum? Let's check: Minimum Qualifications includes "Ability to work with most common programming languages..." etc. Preferred includes "Ability to effectively assess risk from findings and threat models and identify proper risk mitigation controls". Also Minimum includes "Ability to work with most common programming languages..." etc. There's also "Ability to succeed individually or collaboratively..." etc. We'll keep as is. We need to strip out boilerplate like "Disclaimer: Certain U.S. based..." etc. Already removed. Also remove "Range and benefit information provided in this posting are specific to the stated locations only US: Hiring Range in USD from: $106,300 - $234,600 per year. May be eligible for bonus, equity, and compensation deferral. Oracle maintains broad salary ranges..." That's substantive for Pay. We'll keep that. Benefits: list of items. Now produce HTML. Structure:

      About the role

      ... (combined description from Job Description paragraph and About Us paragraph? We'll need to include both substantive paragraphs without boilerplate.) Job Description paragraph: "The Oracle Cloud Infrastructure (OCI) team can provide you the opportunity to build and operate a suite of massive scale, integrated cloud services in a broadly distributed, multi-tenant cloud environment. OCI is committed to providing the best in cloud products that meet the needs of our customers who are tackling some of the world’s biggest challenges. As a Principal Hardware Security Engineer you will be involved in ensuring that the compute hardware that is used in the Oracle Cloud Infrastructure meets the security bar to ensure compliance with our security posture. You will be get an opportunity to define security requirements for hardware ensuring hardware does not preclude inclusion of security controls essential to meet or exceed our posture. You will work closely across Oracle, with third party vendors, and with standards organization to influence the next generation of hardware platform security. You will also works closely with OCI's operations and engineering teams, constantly striving to improve Oracle Cloud's overall operational security posture by defining the supply chain and operational requirements to establish best practices for managing security for devices in our cloud infrastructure. Our principal hardware security engineers have a blend of hardware, firmware and security skills." Note there is a typo "You will be get". We'll keep as is. About Us paragraph: "Only Oracle brings together the data, infrastructure, applications, and expertise to power everything from industry innovations to life-saving care. And with AI embedded across our products and services, we help customers turn that promise into a better future for all. Discover your potential at a company leading the way in AI and cloud solutions that impact billions of lives. True innovation starts when everyone is empowered to contribute. That’s why we’re committed to growing a workforce that promotes opportunities for all with competitive benefits that support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs. We’re committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing accommodation-request_mb@oracle.com or by calling 1-888-404-2494 in the United States. Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans’ status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law." We need to remove EEO boilerplate and accommodation request line. So we should cut out the sentences about accommodation-request and EEO. Also the line about Oracle is an EEO employer. So we keep the rest: "Only Oracle brings together the data, infrastructure, applications, and expertise to power everything from industry innovations to life-saving care. And with AI embedded across our products and services, we help customers turn that promise into a better future for all. Discover your potential at a company leading the way in AI and cloud solutions that impact billions of lives. True innovation starts when everyone is empowered to contribute. That’s why we’re committed to growing a workforce that promotes opportunities for all with competitive benefits that support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs. We’re committed to including people with disabilities at all stages of the employment process." We could keep the sentence about disabilities but not the accommodation request. That's fine. Thus About the role section will have two paragraphs maybe combined into one

      with both? Could separate but it's okay. Now Responsibilities: we have "Key Responsibilities" heading then a paragraph: "Definition of security requirements for hardware enabling OCI security posture aligning business needs and technology trends Provide independent design consulting in area of expertise to implement: requirements specified by the hardware security team features required to achieve security bar operations (provisioning, re-use, decommissioning) inline with security posture Hands on security assessments of compute devices to ensure device meets requirements. adversarial assessments of compute devices to ensure they can’t be compromised. Assess risk from findings and threat models and identify proper risk mitigation controls Work across to teams to ensure requirements, findings and recommendations are implemented Mentor junior engineers" That's a run-on sentence. We need to turn into list items. The original likely intended bullet list but not formatted. We'll need to parse into separate responsibilities. Let's split by sentences or phrases. We can create list items: - Definition of security requirements for hardware enabling OCI security posture aligning business needs and technology trends - Provide independent design consulting in area of expertise to implement: requirements specified by the hardware security team; features required to achieve security bar; operations (provisioning, re-use, decommissioning) inline with security posture - Hands on security assessments of compute devices to ensure device meets requirements - Adversarial assessments of compute devices to ensure they can’t be compromised - Assess risk from findings and threat models and identify proper risk mitigation controls - Work across teams to ensure requirements, findings and recommendations are implemented - Mentor junior engineers We need to preserve all substantive information; we can rephrase slightly but keep meaning. Now Minimum Qualifications: list: - Bachelor's degree in Electrical Engineering, Computer Science or related field or equivalent experience - 8-10+ years of experience in hardware security architecture / engineering / validation / planning or related area - Demonstrated competency in hardware/firmware with a focus on security - Competency with computer architecture - Subject Matter Expertise in one the following areas: Root Of Trust (TCG SRTM, DRTM); x86 (Intel, AMD), ARM server platform architecture, UEFI; GPU platforms, rackscale systems, clustering; Baseboard Management Controllers; SmartNICs (DPUs); Storage devices; Security concepts and standards associated; Attestation (Ex: SPDM) and measurements, cryptography, Secureboot, DICE etc. - Ability to work with most common programming languages (C, C++, Java, Python, Ruby, Go, Rust) - Ability to read and review hardware schematics for security concerns - Experience with reversing tools and ability to reverse engineer We need to keep the list as is. Preferred Qualifications: list: - Ability to read and understand x86 and/or ARM assembly language - Knowledge of vendor-specific TEE technologies such as Intel SGX - Familiarity with common embedded communications interfaces (SPI, I2C, RS232-style serial) - Basic knowledge of enterprise and/or datacenter networking architecture - Experience operating in a large-scale DevOps or CICD environment - Ability to write clear and concise product security requirements - Ability to effectively assess risk from findings and threat models and identify proper risk mitigation controls - Ability to succeed individually or collaboratively, whether working internally or with external organizations and individuals - Experience working effectively in a large and distributed company - Excellent organizational, verbal and written communication skills Note there is also "Ability to effectively assess risk from findings and threat models and identify proper risk mitigation controls" appears also in Minimum? Actually not; it's in Preferred. We'll keep. Now Benefits: list from the paragraph: - Medical, dental, and vision insurance, including expert medical opinion - Short term disability and long term disability - Life insurance and AD&D - Supplemental life insurance (Employee/Spouse/Child) - Health