Senior Manager, Signals Engineering

About the Role

The Oracle Threat Intelligence Center is responsible for tracking and monitoring threat actors—from cybercrime to Advanced Persistent Threat (APT) groups—impacting Oracle and its customers. The team's scope includes attack analysis, tracking threat actors' indicators of compromise (IOCs) and their tactics, techniques, and procedures (TTPs), aiding in security incident response, executive communication, and customer outreach.

As Senior Manager for the Signals Engineering team, you will lead the creation of innovative technologies to identify malicious actors in the environment and those abusing Oracle resources. This includes developing and maintaining large-scale malware triage systems, Agentic-driven intelligence platforms, a Threat Intelligence MCP server, cloud forensic technologies, and addressing software supply chain risks. You will also guide employees on using advanced tools and techniques for data security, such as encryption, hashing, masking, and access management, to ensure the confidentiality and integrity of sensitive information.

Responsibilities

• Large Scale Intelligence Security Systems Development:
  • Guide the development of large-scale systems to support the Oracle Threat Intelligence Center and the Cyber Defense Center.
  • Demonstrate proficiency in Python, SQL, and Cloud architecture.
  • Background in large-scale security systems development for major hyperscale clouds (OCI, AWS, Azure, GCP).
  • Deep understanding of threat intelligence and cybersecurity, including tracking adversaries' tactics, techniques, and procedures.
• Business Continuity Support:
  • Guide the development of business continuity and disaster recovery plans, processes, and procedures.
  • Ensure the availability and resilience of critical systems and data, overseeing efforts to withstand disruptions.
  • Direct readiness assessments for certifications and audits, implementing improvements to meet evolving standards.
• Malware Triage and Forensic Systems:
  • Use structured queries to pull data from logs and formulate signatures such as YARA, Snort, Suricata, and Bro/Zeek.
  • Background in static and dynamic malware analysis and research; reverse engineering skills a plus.
  • Experience in dead-box forensics.
• Research and Innovation with Agentic Solutions:
  • Drive industry security knowledge advancement, fostering research and innovation efforts.
  • Align the team on emerging trends, ensuring shared knowledge of evolving threats and vulnerabilities.
  • Promote novel techniques to solve unique security problems, encouraging creative and effective solutions.
• MCP Server Development:
  • Understand MCP deployment and maintenance from a database and RBAC perspective.
  • Experience with scalability to serve the needs of a major international organization.
• Planning & Execution:
  • Manage multiple medium- to large-scale projects or initiatives across teams, ensuring timelines, deliverables, and budgets are monitored and met.
  • Provide direction to teams on project work, setting priorities, and aligning with business needs.
  • Guide teams on adjusting plans to accommodate resource or timeline changes.
• Collaboration & Partnership:
  • Drive cross-functional partnerships to align expectations and shared objectives across multiple teams.
  • Coach team members to develop strategic relationships with business leaders, stakeholders, and external partners to foster collaboration and long-term success.
  • Promote inclusivity by actively seeking and listening to diverse perspectives, ensuring others feel heard and respected.
• Problem Solving:
  • Provide direction to multiple teams on addressing complex operational and/or technical issues.
  • Guide teams on analyzing complex data and/or information to identify solutions.
  • Review and provide insights into unresolved or critical issues, helping the team identify potential solutions.
• Continuous Learning:
  • Model continuous learning to deepen expertise and stay ahead of industry trends, integrating best practices into strategic planning.
  • Leverage feedback to drive personal and team skill improvements.
  • Identify skill gaps across teams and empower team members to pursue learning and knowledge-sharing opportunities.
  • Coach team members to apply learnings to advance the organization.
• Continuous Improvement:
  • Drive the team to collaborate on, develop, and implement ideas to increase the efficiency and effectiveness of processes, protocols, and workflows within and across teams.
  • Provide oversight and guide the team to adopt new ideas for alternative approaches and methods.
  • Encourage feedback for continued improvement.
• Performance and Development:
  • Drive performance across teams by providing feedback and coaching in alignment with performance management processes, guidelines, and expectations.
  • Discuss development goals with team members, share opportunities to facilitate career development, and ensure individual goals align with broader organizational goals.
  • Develop and manage the talent acquisition pipeline by leading candidate interviews, monitoring promotion eligibility, and/or orchestrating talent resources.

Requirements

• Experience managing the development of large-scale security systems for major hyperscale clouds (OCI, AWS, Azure, GCP).
• Proficiency in Python, SQL, and Cloud architecture.
• Deep understanding of threat intelligence and cybersecurity, including tracking adversaries' tactics, techniques, and procedures.
• Background in static and dynamic malware analysis, research, and reverse engineering (a plus).
• Experience with structured queries, log analysis, and signature formulation (e.g., YARA, Snort, Suricata, Bro/Zeek).
• Knowledge of MCP deployment and maintenance from a database and RBAC perspective.
• Scalability experience to serve the needs of a major international organization.
• Strong leadership skills, including planning, execution, collaboration, and problem-solving across multiple teams.
• Commitment to continuous learning, innovation, and fostering an inclusive team environment.

Pay

US: Hiring range in USD from $126,200 - $264,100 per year. May be eligible for bonus, equity, and compensation deferral.

Benefits

• Comprehensive medical, dental, and vision insurance, including expert medical opinion.
• Short-term and long-term disability insurance.
• Life insurance and AD&D.
• Supplemental life insurance (Employee/Spouse/Child).
• Health care and dependent care Flexible Spending Accounts.
• Pre-tax commuter and parking benefits.
• 401(k) Savings and Investment Plan with company match.
• Paid time off:
  • Flexible Vacation for salaried employees (non-overtime eligible): 13 days annually for the first three years of employment and 18 days annually for subsequent years.
  • Vacation accrual for other eligible employees: 13 days annually for the first three years and 18 days annually thereafter (prorated for employees working 20-34 hours per week; employees working fewer than 20 hours per week are not eligible).
• 11 paid holidays.
• Paid sick leave: 72 hours upon date of hire, refreshing each calendar year. Unused balance carries over up to a maximum cap of 112 hours.
• Paid parental leave.
• Adoption assistance.
• Employee Stock Purchase Plan.
• Financial planning and group legal services.
• Voluntary benefits including auto, homeowner, and pet insurance.