Key Responsibilities
- Conduct security reviews of OCI services, architectures, integrations, and configurations.
- Identify security risks, control gaps, and remediation opportunities.
- Evaluate solutions against enterprise security standards, policies, and regulatory requirements.
- Provide security guidance for secure deployment and adoption of cloud and SaaS services.
- Security Domains Reviewed, Identity & Access Management (IAM), Network Security, Data Protection & Encryption, Logging & Monitoring, Compute & Container Security, API Security, SaaS Security Posture Management (SSPM), AI / GenAI Security, Third-Party & Vendor Risk, Security Standards & Governance Map OCI and SaaS implementations to enterprise controls and industry frameworks (NIST, ISO 27001, CSA CCM, CIS).
- Validate compliance with secure configuration baselines and reference architectures.
- Support development and maintenance of OCI and SaaS security standards, guardrails, and onboarding requirements.
- Assess new cloud and SaaS capabilities and provide security recommendations.
- Support implementation of OCI-native security controls and governance capabilities.
- Assist with security automation through Infrastructure-as-Code (Terraform) and policy-as-code frameworks.
- Support deployment and integration of security monitoring, posture management, and compliance capabilities.
- Partner with platform engineering teams to embed security into deployment and operational processes.
- Perform SaaS onboarding assessments and certification reviews.
- Evaluate SaaS architectures, integrations, data flows, and security controls.
- Conduct SaaS posture reviews and assess configuration drift, identity governance, and data protection controls.
- Support SaaS inventory management, Shadow IT discovery, and vendor security assessments.
- Collaboration & Stakeholder Engagement
- Partner with cloud engineering, architecture, DevOps, security operations, compliance, procurement, and risk teams.
- Document findings, recommendations, and evidence to support governance and certification decisions.
- Provide security expertise during design reviews, onboarding activities, exception management, and remediation efforts.
Required Experience & Skills
- Experience performing cloud security assessments within OCI or comparable cloud platforms.
- Identity & Access Management, Network Security, Data Protection, Cloud Logging & Monitoring, Container & Platform Security
- Experience conducting SaaS security reviews and certifications.
- Experience reviewing Infrastructure-as-Code (Terraform) and cloud architecture designs.
- Knowledge of cloud shared responsibility models and secure-by-design principles.
- Strong written and verbal communication skills.
#J-18808-Ljbffr