Sr Threat Intelligence Investigator

About the role

The Oracle Threat Intelligence Center (OTIC) tracks and monitors threat actors ranging from cybercrime groups to Advanced Persistent Threat (APT) organizations that impact OCI and its customers. The team conducts attack analysis, tracks indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs), supports security incident response, executive communication, technical writing, and customer outreach. As a Threat Intelligence Investigator you will independently track numerous groups, lead operational activities, handle large and complex datasets, and develop new solutions to enhance tracking and analysis capabilities while producing intelligence products in a fast‑paced environment.

Responsibilities

• Lead investigations through in‑depth analysis and collection of suspected adversary campaigns across the OCI environment to deliver timely, actionable intelligence and create effective remediation strategies.
• Provide detailed attribution analysis to identify threat actors and inform proactive defense strategies.
• Manage cross‑company and executive communications, translating intricate technical matters for non‑technical audiences.
• Facilitate post‑incident reviews to extract lessons learned, document new threat intelligence, and drive resolution actions with impacted teams.
• Stay current on emerging threats, vulnerabilities, security technologies, and global geopolitical issues to assess potential impact and proactively enhance Oracle’s defenses.
• Manage and maintain threat intelligence platforms (TIPs) and other cyber threat intelligence (CTI) tools to enrich data and streamline workflows.
• Collaborate with partner cloud security teams throughout the incident response lifecycle to integrate intelligence findings into mitigation plans.
• Cultivate strategic relationships with members of the threat intelligence community to expand information access and strengthen trust networks.
• Develop and refine intelligence processes to ensure timely and accurate delivery of strategic, operational, and tactical intelligence.
• Elevate analytic quality and reporting standards by providing peer review and strategic feedback to fellow investigators.
• Manage and execute a high volume of time‑sensitive intelligence requests from internal and external customers, prioritizing and delivering accurate information.
• Deliver finished intelligence analysis and assessments through written reports, enabling informed decision‑making for internal and external customers.

Preferred Qualifications

• 6–10+ years of industry experience in analytical and operational threat intelligence, including case management and response against APTs.
• Investigative experience tracking distinct APT groups and providing intelligence on their methodologies.
• Expertise in one or more areas such as national security, defense, intelligence, law enforcement, or foreign‑area/language expertise relevant to threat analysis.
• Knowledge of cloud services (storage, computing, networking).
• In‑depth knowledge of multiple operating systems (Windows, UNIX/Linux, macOS) and associated threat landscapes.
• Skilled in conducting open‑source intelligence (OSINT) research across a wide range of topics.
• Strong verbal, written, and interpersonal communication skills; ability to convey complex technical information to diverse, non‑technical stakeholders.
• Prior experience in Incident Response, Security Operations Center (SOC), and/or Digital Forensics Analysis.
• Experience with malware analysis (highly desirable).
• Strong understanding of common attack types, vectors, and corresponding mitigations.
• Proficiency in using structured queries to extract data from logs and developing detection signatures (e.g., YARA, Snort, Suricata, Bro/Zeek).
• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Information Systems, Cybersecurity, or equivalent practical experience.
• Previous experience working on a global or geographically distributed security team (a plus).
• Active TS/SCI security clearance.

Pay

Hiring range in USD: $114,600 – $234,600 per year. May be eligible for bonus, equity, and compensation deferral.

Benefits

• Medical, dental, and vision insurance, including expert medical opinion
• Short‑term and long‑term disability coverage
• Life insurance and AD&D
• Supplemental life insurance (employee/spouse/child)
• Health care and dependent care Flexible Spending Accounts
• Pre‑tax commuter and parking benefits
• 401(k) Savings and Investment Plan with company match
• Paid time off: Flexible Vacation (13 days annually for the first three years, then 18 days; prorated for part‑time)
• 11 paid holidays
• Paid sick leave: 72 hours at hire, refreshed annually, carry‑over up to 112 hours
• Paid parental leave
• Adoption assistance
• Employee Stock Purchase Plan
• Financial planning and group legal services
• Voluntary benefits including auto, homeowner, and pet insurance