Senior Security Risk Engineer

Role Overview

Oracle Security & GRC is seeking a Senior Security Risk Engineer to help build and scale our approach to security risk intelligence and automation.

Our teams hold valuable information across security assessments, audits, incidents, supplier monitoring and recovery testing. This role will connect that information and build dependable capabilities that help us understand exposure, evaluate control effectiveness and identify where action will make the greatest difference.

Working alongside risk analysts, security engineers and program owners, you will design and deliver integrations, data pipelines, analytical tools and automated workflows. Initial priorities include supplier intelligence, control-health analysis, reuse of resiliency evidence and supplier onboarding automation.

You will help shape an evolving engineering capability, taking practical ideas from proof of concept through to supported operation. Success means better visibility of material exposure, earlier identification of recurring weaknesses, less manual evidence gathering and clearer evidence that action has reduced risk.

This role suits an engineer who combines strong software and data skills with security judgment, curiosity and the ability to turn an ambiguous problem into a useful, maintainable solution.

Responsibilities

• Design, build and maintain integrations and data pipelines that collect, normalise and connect security, compliance, supplier and resiliency information from APIs, enterprise platforms and operational systems.
• Develop repeatable analysis that identifies control gaps, recurring weaknesses, shared dependencies and material changes in exposure.
• Work with risk analysts and domain specialists to translate risk scenarios and expected control outcomes into practical data models, analytical methods and monitoring capabilities.
• Build workflows that connect risk signals to validation, accountable ownership, decisions, remediation and evidence of closure.
• Engineer supplier intelligence and onboarding capabilities that support proportionate triage, assessment reuse, investigation and timely escalation.
• Connect incident, recovery-test and service evidence to help identify resiliency gaps and dependencies across teams and services.
• Preserve source traceability and make data coverage, freshness, quality and analytical confidence visible so that conclusions can be assessed and challenged.
• Develop tools and reporting that explain what has changed, why it matters and what action or decision is needed.
• Apply automation and, where appropriate, AI-assisted techniques to evidence extraction, enrichment and analysis, with validation and human review proportionate to the use case.
• Take prototypes into reliable operation through secure design, appropriate access controls, testing, monitoring, documentation and clear support arrangements.
• Collaborate across security engineering, compliance automation, risk, resiliency and business teams to reuse existing capabilities and deliver solutions that scale.
• Measure the impact of delivered capabilities through improved coverage, reduced manual effort, faster analysis and demonstrable support for risk reduction.

Application Instructions

Apply directly on Oracle Careers at Senior Security Risk Engineer↗.