Principal Security Engineer

We need to output HTML fragment with sections: headings

for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must only include sections that have real specific content. We need to parse the job description. We have: - Job Description paragraph: "The Oracle Cloud Infrastructure (OCI) team can provide you the opportunity to build and operate a suite of massive scale, integrated cloud services..." That's about the role. So we can have

About the role

with that paragraph. - Responsibilities: There's a "Key Responsibilities" heading then bullet list. We'll extract bullet points. - Minimum Qualifications: list of bullet points. - Preferred Qualifications: bullet list. - Qualifications Disclaimer: maybe not needed; it's boilerplate? It's about US based roles immunization etc. Might be considered boilerplate? It's not about responsibilities/requirements; but it's a disclaimer. The instruction says remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate. This disclaimer is legal-ish; maybe we should drop it. It's not essential. So we can omit. - Range and benefit information: includes Pay range and benefits. So we need Pay section and Benefits section. Also maybe Schedule? Not mentioned. So we omit Schedule. - There's also "About Us" section: could be considered "About the role"? Already have about the role. "About Us" is company description; maybe we can include as "About the company" but not in allowed headings list. The allowed headings are About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We could put company description under About the role? Might be okay to add another paragraph under About the role. Or we could create a separate section "About the company" but not allowed. Better to incorporate into About the role or maybe omit. The instruction: "Use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It says e.g., not exclusive. But they say "include a section ONLY when the posting has real, specific content for it". So we could add a section like "About the company" if we want, but it's not in the list; but they gave examples, not exhaustive. However safer to stick to given headings. We can put the "About Us" paragraph under About the role as additional description. - Also there is "The role will generally accept applications..." that's application instruction; we must remove. - Also "As part of Oracle's onboarding process..." that's also boilerplate/legal; remove. - Also "Only Oracle brings together..." that's About Us; we can incorporate. - Also "Oracle is an Equal Employment Opportunity Employer..." that's EEO boilerplate; remove. Thus we need sections: - About the role: combine initial paragraph + About Us paragraph maybe. - Responsibilities: list bullet points. - Requirements: maybe combine Minimum Qualifications and Preferred Qualifications? But we have separate headings Requirements and Qualifications. The instruction: Use headings Requirements, Qualifications, Skills. We need to decide what goes where. Typically Requirements = minimum qualifications, Qualifications = preferred qualifications, Skills maybe separate list of skills. But we can also put skills under Qualifications. However we have a list of skills in Minimum Qualifications (competency with hardware/firmware, computer architecture, subject matter expertise in areas, ability to work with languages, ability to read schematics, experience with reversing tools). Also Preferred Qualifications includes abilities like reading assembly, knowledge of TEE, familiarity with interfaces, basic knowledge of networking, experience operating in DevOps/CICD, ability to write clear product security requirements, ability to assess risk, ability to succeed individually/collaboratively, experience working in large distributed company, excellent organizational, verbal and written communication skills. We could treat Minimum Qualifications as Requirements, Preferred Qualifications as Qualifications, and maybe Skills as a separate list summarizing technical skills (like languages, tools). But we might just put all under Requirements and Qualifications as appropriate. We need to avoid filler like "commensurate with experience". Not present. We need to output only HTML fragment, no markdown. Let's craft:

About the role

The Oracle Cloud Infrastructure (OCI) team can provide you the opportunity to build and operate a suite of massive scale, integrated cloud services in a broadly distributed, multi-tenant cloud environment. OCI is committed to providing the best in cloud products that meet the needs of our customers who are tackling some of the world’s biggest challenges. As a Principal Hardware Security Engineer you will be involved in ensuring that the compute hardware that is used in the Oracle Cloud Infrastructure meets the security bar to ensure compliance with our security posture. You will get an opportunity to define security requirements for hardware ensuring hardware does not preclude inclusion of security controls essential to meet or exceed our posture. You will work closely across Oracle, with third party vendors, and with standards organization to influence the next generation of hardware platform security. You will also work closely with OCI's operations and engineering teams, constantly striving to improve Oracle Cloud's overall operational security posture by defining the supply chain and operational requirements to establish best practices for managing security for devices in our cloud infrastructure. Our principal hardware security engineers have a blend of hardware, firmware and security skills.

Only Oracle brings together the data, infrastructure, applications, and expertise to power everything from industry innovations to life-saving care. And with AI embedded across our products and services, we help customers turn that promise into a better future for all. Discover your potential at a company leading the way in AI and cloud solutions that impact billions of lives. True innovation starts when everyone is empowered to contribute. That’s why we’re committed to growing a workforce that promotes opportunities for all with competitive benefits that support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs. We’re committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing accommodation-request_mb@oracle.com or by calling 1-888-404-2494 in the United States.

But note the accommodation request line might be considered contact info; but it's part of About Us. Might be okay to keep. It's not boilerplate? It's contact for accommodation; could be considered useful. We'll keep. Now Responsibilities: We need to extract bullet points from "Key Responsibilities". The text: "Key Responsibilities Definition of security requirements for hardware enabling OCI security posture aligning business needs and technology trends Provide independent design consulting in area of expertise to implement: requirements specified by the hardware security team features required to achieve security bar operations (provisioning, re-use, decommissioning) inline with security posture Hands on security assessments of compute devices to ensure device meets requirements. adversarial assessments of compute devices to ensure they can’t be compromised. Assess risk from findings and threat models and identify proper risk mitigation controls Work across to teams to ensure requirements, findings and recommendations are implemented Mentor junior engineers" We need to split into sensible bullet points. Let's list: - Definition of security requirements for hardware enabling OCI security posture aligning business needs and technology trends - Provide independent design consulting in area of expertise to implement: - requirements specified by the hardware security team - features required to achieve security bar - operations (provisioning, re-use, decommissioning) inline with security posture - Hands-on security assessments of compute devices to ensure device meets requirements - Adversarial assessments of compute devices to ensure they can’t be compromised - Assess risk from findings and threat models and identify proper risk mitigation controls - Work across teams to ensure requirements, findings and recommendations are implemented - Mentor junior engineers We'll output as

• ...

. Now Requirements (minimum qualifications): List: - Bachelor's degree in Electrical Engineering, Computer Science or related field or equivalent experience - 8-10+ years of experience in hardware security architecture / engineering / validation / planning or related area - Demonstrated competency in hardware/firmware with a focus on security - Competency with computer architecture - Subject Matter Expertise in one the following areas: - Root Of Trust (TCG SRTM, DRTM) - x86 (Intel, AMD), ARM server platform architecture, UEFI - GPU platforms, rackscale systems, clustering - Baseboard Management Controllers - SmartNICs (DPUs) - Storage devices - Security concepts and standards associated - Attestation (Ex: SPDM) and measurements, cryptography, Secureboot, DICE etc. - Ability to work with most common programming languages (C, C++, Java, Python, Ruby, Go, Rust) - Ability to read and review hardware schematics for security concerns - Experience with reversing tools and ability to reverse engineer We'll output as

. Now Qualifications (preferred qualifications): List: - Ability to read and understand x86 and/or ARM assembly language - Knowledge of vendor-specific TEE technologies such as Intel SGX - Familiarity with common embedded communications interfaces (SPI, I2C, RS232-style serial) - Basic knowledge of enterprise and/or datacenter networking architecture - Experience operating in a large-scale DevOps or CICD environment - Ability to write clear and concise product security requirements - Ability to effectively assess risk from findings and threat models and identify proper risk mitigation controls - Ability to succeed individually or collaboratively, whether working internally or with external organizations and individuals - Experience working effectively in a large and distributed company - Excellent organizational, verbal and written communication skills Now Benefits: we have a list. We need to extract benefits from the paragraph after "Oracle US offers a comprehensive benefits package which includes the following:" then list. Let's extract: - Medical, dental, and vision insurance, including expert medical opinion - Short term disability and long term disability - Life insurance and AD&D - Supplemental life insurance (Employee/Spouse/Child) - Health care and dependent care Flexible Spending Accounts - Pre-tax commuter and parking benefits - 401(k) Savings and Investment Plan with company match - Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation. - 11 paid holidays - Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours. - Paid parental leave - Adoption assistance - Employee Stock Purchase Plan - Financial planning and group legal - Voluntary benefits including auto, homeowner and pet insurance We'll output as
. Now Pay: we have "US: Hiring Range in USD from: $106,300 - $234,600 per year. May be eligible for bonus, equity, and compensation deferral." Also note about broad salary ranges etc. We'll include that as Pay section. We should not include filler like "May be eligible for bonus, equity, and compensation deferral." That's specific. Thus Pay section:

US hiring range: $106,300 - $234,600 per year. May be eligible for bonus, equity, and compensation deferral.

We might also add sentence about broad salary ranges etc. But that is generic; maybe we can include as it's part of posting. It's not filler; it