Principal Security Engineer, Security Data & Reporting

The Principal Security Engineer provides technical leadership and hands-on engineering for security data platforms, reporting applications, and analytics that help operational teams and leadership understand enterprise security posture and make informed risk decisions. The role designs, builds, and operates automated data pipelines, repeatable security metric calculations, and reporting solutions that turn data from multiple systems into accurate, traceable, and actionable information.

Working with security subject matter experts, engineering teams, and program leadership, this engineer translates complex measurement needs into secure, reliable, and maintainable solutions. The role resolves integration and data-quality challenges, applies sound architectural judgment, and independently delivers complex engineering initiatives. It develops and integrates AI-enabled capabilities to improve analysis and reporting, with appropriate validation, human review, and data-access controls.
The Principal Security Engineer owns solutions from design through deployment, ongoing operation, and continuous improvement, while providing technical guidance and strengthening shared engineering practices.
Security Data Integration and Engineering
Designs, builds, and maintains automated integrations that collect data from security tools, enterprise applications, APIs, databases, and other source systems.
Establishes centralized data structures and ingestion workflows that support reliable security measurement, historical analysis, and reporting, with appropriate validation, error handling, monitoring, and recovery capabilities.
Partners with security and engineering teams to assess source-system coverage, data availability, refresh requirements, integration dependencies, and ownership.
Replaces manual data collection with supported automation while maintaining data quality, validation, and clear accountability.
Evolves the integration architecture to accommodate additional data sources, metrics, and reporting needs while balancing near-term delivery with long-term maintainability.
Data Modeling and Metric Implementation
Translates security measurement requirements into documented data models, transformation logic, and repeatable metric calculations.
Normalizes and reconciles data across systems, addressing inconsistent definitions, duplicate records, incomplete coverage, and differences in reporting periods.
Maintains traceability from reported metrics to source data, calculation logic, and applicable scope; Investigates and communicates data-quality issues, measurement limitations, and assumptions, recommending improvements that strengthen the accuracy and interpretation of security reporting.
Dashboard and Reporting Application Development
Develops and maintains dashboards and reporting applications using Oracle APEX or comparable technologies.
Builds data submission, validation, review, and publication workflows where automated source integration is not yet available.
Evaluates whether visualizations accurately communicate the intended security outcomes and improves reporting usability, performance, and maintainability through iterative development.
Automation and AI-Enabled Analytics
Designs, develops, and integrates AI-enabled features into security data platforms, dashboards, and reporting workflows.
Evaluates and applies generative AI, large language models, and other analytical techniques to support natural-language exploration, contextual analysis, reporting automation, anomaly detection, and forecasting where appropriate.
Connects AI-enabled functionality to authoritative security data and metric definitions, maintaining source traceability and enforcing audience-specific access controls.
Monitors and improves AI-enabled features as data, models, and requirements evolve, using defined measures to assess effectiveness and guide further investment.
Security, Permissions, and Access Controls
Designs and implements role-based access and least-privilege permissions for data contributors, reviewers, administrators, and reporting audiences.
Applies secure credential handling and appropriate controls to protect sensitive security data.
Implements logging and auditability for relevant data changes, administrative actions, and reporting workflows.
Incorporates security requirements into application design, development, testing, and operation, including AI-enabled functionality.
Owns developed integrations and reporting applications through deployment, ongoing operation, maintenance, and continuous improvement.
Establishes testing, version control, deployment practices, and technical documentation that support reliable changes and maintainable solutions.
Monitors data freshness, processing failures, completeness, and reporting availability; investigates issues using structured analysis and coordinates resolution with relevant teams.
Supports scheduled reporting and leadership review cycles by validating readiness, addressing issues within agreed delivery windows, and communicating delivery risks.
Develops runbooks and recovery procedures, coordinates database, hosting, and platform requirements, and incorporates operational lessons into engineering practices.
Independently scopes and delivers complex engineering initiatives, identifies dependencies, estimates effort, and communicates progress, risks, and tradeoffs.
Works with security subject matter experts to understand controls, operational processes, and source data; identifies gaps in requirements, data coverage, and proposed solutions.
Builds effective partnerships across security, engineering, infrastructure, and program teams, aligning implementation plans with stakeholder needs and establishing clear ownership and delivery expectations.
Expands relevant technical knowledge, mentors colleagues, documents and shares solutions, and contributes to shared engineering practices.
11 years of experience

in IT security, developing security reporting solutions, such as cloud, endpoint, or logging; vulnerability and risk assessment; or a related field.

Bachelor’s degree

in Computer Science, Information Technology, Computer Security, Engineering, or a related field,

and 7 years of experience

in IT security, such as cloud, endpoint, or logging; vulnerability and risk assessment; or a related field.

Master’s degree

in Computer Science, Information Technology, Computer Security, Engineering, or a related field,

and 5 years of experience

in IT security, such as cloud, endpoint, or logging; vulnerability and risk assessment; or a related field.

Demonstrated knowledge across multiple cybersecurity domains and experience working with security subject matter experts to interpret controls, risks, data sources, and measurement limitations.
Strong SQL and relational database skills, including schema design, data modeling, query development, and performance optimization.
Experience building and maintaining automated data pipelines, API integrations, and data transformation processes.
Proficiency in a programming or scripting language used for integration and automation, such as Python.
Experience developing dashboards, reporting applications, or analytical tools for operational and leadership audiences.
Hands-on experience developing and integrating AI-enabled application features, including evaluating output quality and implementing appropriate data-access and security controls.
Experience implementing data validation, reconciliation, and monitoring to support trustworthy reporting.
Understanding of authentication, authorization, role-based access, and secure handling of sensitive data.
Experience applying testing, version control, documentation, and deployment practices to production solutions.
Experience developing applications with

Oracle APEX

, including SQL and PL/SQL.
Experience with Oracle Database, Oracle Cloud Infrastructure, or comparable cloud data and application platforms.
Experience integrating data from multiple cybersecurity domains, such as vulnerability management, asset management, identity and access management, endpoint security, security monitoring, or cloud security.
Experience implementing security posture metrics, executive reporting, and historical trend analysis.
Experience applying AI-enabled capabilities to enterprise data analysis and reporting, including validating outputs and enforcing appropriate data access controls.
Experience establishing a new data or reporting capability and transitioning manual processes into supported automation.
Experience working across a large organization with distributed data ownership and multiple stakeholder groups.
Relevant security certifications, such as

Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Certificate of Cloud Security Knowledge (CCSK), Certified Information Security Manager (CISM), or Certified Oracle Cloud Infrastructure Security Professional

.
11 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field
Bachelors Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 7 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field
Masters Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 5 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.
Threat Modeling Demonstrated ability in or knowledge of threat modeling, including applying techniques to identify and mitigate security risks and vulnerabilities.
Compliance Demonstrated knowledge of and adherence to regulatory, legal, and organizational compliance requirements.
Technical Writing Demonstrated ability in or knowledge of technical writing, including developing and maintaining accurate technical documentation.
Cross-Functional Team Leadership Demonstrated experience successfully leading cross-functional teams in project or product delivery.
Training and Development Demonstrated ability to design and deliver effective training programs to build team and individual capabilities.
11 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field
Bachelors Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 7 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field
Masters Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 5 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.
Cloud or Internet Software Security Experience:
3 years of experience working on high-impact projects related to cloud or internet software security.
Programming/Scripting Experience:
3 years of experience working with one or more of the following programming or scripting languages (e.g., Go, Java, Python, or C/C++).
Cloud Experience:
2 years of experience with AWS Solution, Azure 900 Fundamentals, OCI Fundamentals, or equivalent cloud experience.
Information Security Certifications:
Information security or equivalent certifications (e.g., Certified Oracle Cloud Infrastructure Security Professional, Certificate of Cloud Security Knowledge (CCSK), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Cloud Security Professional (CCSP),
Only Oracle brings together the data, infrastructure, applications, and expertise to power everything from industry innovations to life-saving care. And with AI embedded across our products and services, we help customers turn that promise into a better future for all. Discover your potential at a company leading the way in AI and cloud solutions that impact billions of lives.
That’s why we’re committed to growing a workforce that promotes opportunities for all with competitive benefits that support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs.
We’re committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing

is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans’ status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.