{"id":3197118,"url":"https://alion.io/job/oracle-principal-security-engineer-security-data-reporting","title":"Principal Security Engineer, Security Data & Reporting","company":{"id":53,"name":"Oracle","domain":"oracle.com","url":"https://alion.io/company/oracle","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":88,"open_postings":300,"ghost_share":0,"stale_share":0.677,"repost_share":0.007,"time_to_fill_p50_days":8,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Nashville, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":100800,"max":234600,"currency":"USD","period":"year","gross":null,"usd_annual":234600},"salary_estimate":null,"experience_years_min":11,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"Least Privilege","optional":false},{"name":"Oracle","optional":false},{"name":"Python","optional":false},{"name":"SQL","optional":false},{"name":"ISO 27001","optional":true},{"name":"NIST 800-53","optional":true},{"name":"NIST CSF","optional":true}],"status":"live","first_seen_at":"2026-10-23T22:21:20Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-28T08:57:41Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"The Principal Security Engineer provides technical leadership and hands-on engineering for security data platforms, reporting applications, and analytics that help operational teams and leadership understand enterprise security posture and make informed risk decisions. The role designs, builds, and operates automated data pipelines, repeatable security metric calculations, and reporting solutions that turn data from multiple systems into accurate, traceable, and actionable information.\nWorking with security subject matter experts, engineering teams, and program leadership, this engineer translates complex measurement needs into secure, reliable, and maintainable solutions. The role resolves integration and data-quality challenges, applies sound architectural judgment, and independently delivers complex engineering initiatives. It develops and integrates AI-enabled capabilities to improve analysis and reporting, with appropriate validation, human review, and data-access controls.\nThe Principal Security Engineer owns solutions from design through deployment, ongoing operation, and continuous improvement, while providing technical guidance and strengthening shared engineering practices.\n KEY RESPONSIBILITIES\nSecurity Data Integration and Engineering\nDesigns, builds, and maintains automated integrations that collect data from security tools, enterprise applications, APIs, databases, and other source systems.\n\nEstablishes centralized data structures and ingestion workflows that support reliable security measurement, historical analysis, and reporting, with appropriate validation, error handling, monitoring, and recovery capabilities.\n\nPartners with security and engineering teams to assess source-system coverage, data availability, refresh requirements, integration dependencies, and ownership.\n\nReplaces manual data collection with supported automation while maintaining data quality, validation, and clear accountability.\n\nEvolves the integration architecture to accommodate additional data sources, metrics, and reporting needs while balancing near-term delivery with long-term maintainability.\n\nData Modeling and Metric Implementation\nTranslates security measurement requirements into documented data models, transformation logic, and repeatable metric calculations.\n\nNormalizes and reconciles data across systems, addressing inconsistent definitions, duplicate records, incomplete coverage, and differences in reporting periods.\n\nImplements and validates metric calculations, baselines, and trends using definitions and targets agreed with security subject matter experts and program leadership.\n\nMaintains traceability from reported metrics to source data, calculation logic, and applicable scope; preserves historical results and manages calculation changes so reporting remains explainable and comparable over time.\n\nInvestigates and communicates data-quality issues, measurement limitations, and assumptions, recommending improvements that strengthen the accuracy and interpretation of security reporting.\n\nDashboard and Reporting Application Development\nDevelops and maintains dashboards and reporting applications using Oracle APEX or comparable technologies.\n\nTranslates leadership and operational reporting needs into clear, usable views, incorporating stakeholder feedback and perspectives from different reporting audiences.\n\nProvides appropriate drill-down capabilities so users can investigate results and understand the factors contributing to changes in security posture.\n\nBuilds data submission, validation, review, and publication workflows where automated source integration is not yet available.\n\nEvaluates whether visualizations accurately communicate the intended security outcomes and improves reporting usability, performance, and maintainability through iterative development.\n\nAutomation and AI-Enabled Analytics\nDesigns, develops, and integrates AI-enabled features into security data platforms, dashboards, and reporting workflows.\n\nEvaluates and applies generative AI, large language models, and other analytical techniques to support natural-language exploration, contextual analysis, reporting automation, anomaly detection, and forecasting where appropriate.\n\nConnects AI-enabled functionality to authoritative security data and metric definitions, maintaining source traceability and enforcing audience-specific access controls.\n\nEstablishes evaluation and validation methods to assess accuracy, reliability, and usefulness, with appropriate human review of generated interpretations and recommendations.\n\nMonitors and improves AI-enabled features as data, models, and requirements evolve, using defined measures to assess effectiveness and guide further investment.\n\nSecurity, Permissions, and Access Controls\nDesigns and implements role-based access and least-privilege permissions for data contributors, reviewers, administrators, and reporting audiences.\n\nPartners with identity, infrastructure, and security teams to integrate authentication and authorization with enterprise standards.\n\nApplies secure credential handling and appropriate controls to protect sensitive security data.\n\nImplements logging and auditability for relevant data changes, administrative actions, and reporting workflows.\n\nIncorporates security requirements into application design, development, testing, and operation, including AI-enabled functionality.\n\nReliability and Operational Ownership\nOwns developed integrations and reporting applications through deployment, ongoing operation, maintenance, and continuous improvement.\n\nEstablishes testing, version control, deployment practices, and technical documentation that support reliable changes and maintainable solutions.\n\nMonitors data freshness, processing failures, completeness, and reporting availability; investigates issues using structured analysis and coordinates resolution with relevant teams.\n\nSupports scheduled reporting and leadership review cycles by validating readiness, addressing issues within agreed delivery windows, and communicating delivery risks.\n\nDevelops runbooks and recovery procedures, coordinates database, hosting, and platform requirements, and incorporates operational lessons into engineering practices.\n\nTechnical Leadership and Collaboration\nIndependently scopes and delivers complex engineering initiatives, identifies dependencies, estimates effort, and communicates progress, risks, and tradeoffs.\n\nWorks with security subject matter experts to understand controls, operational processes, and source data; identifies gaps in requirements, data coverage, and proposed solutions.\n\nBuilds effective partnerships across security, engineering, infrastructure, and program teams, aligning implementation plans with stakeholder needs and establishing clear ownership and delivery expectations.\n\nApplies sound technical judgment to resolve ambiguity and adjust plans as priorities or constraints change; escalates unresolved issues with an assessment of impact and recommended options.\n\nExpands relevant technical knowledge, mentors colleagues, documents and shares solutions, and contributes to shared engineering practices.\n\nMINIMUM QUALIFICATIONS\nEducation and Experience\nOne of the following:\n11 years of experience in IT security, developing security reporting solutions, such as cloud, endpoint, or logging; vulnerability and risk assessment; identity and access management; compliance; or a related field.\n\nOR\nBachelor’s degree in Computer Science, Information Technology, Computer Security, Engineering, or a related field, and 7 years of experience in IT security, such as cloud, endpoint, or logging; vulnerability and risk assessment; identity and access management; compliance; or a related field.\n\nOR\nMaster’s degree in Computer Science, Information Technology, Computer Security, Engineering, or a related field, and 5 years of experience in IT security, such as cloud, endpoint, or logging; vulnerability and risk assessment; identity and access management; compliance; or a related field.\n\nTechnical and Security Experience\nDemonstrated knowledge across multiple cybersecurity domains and experience working with security subject matter experts to interpret controls, risks, data sources, and measurement limitations.\n\nStrong SQL and relational database skills, including schema design, data modeling, query development, and performance optimization.\n\nExperience building and maintaining automated data pipelines, API integrations, and data transformation processes.\n\nProficiency in a programmingor scripting language used for integration and automation, such as Python.\n\nExperience developing dashboards, reporting applications, or analytical tools for operational and leadership audiences.\n\nHands-on experience developing and integrating AI-enabled application features, including evaluating output quality and implementing appropriate data-access and security controls.\n\nExperience implementing data validation, reconciliation, and monitoring to support trustworthy reporting.\n\nUnderstanding ofauthentication, authorization, role-based access, and secure handling of sensitive data.\n\nExperience applying testing, version control, documentation, and deployment practices to production solutions.\n\nAbility to translate ambiguous requirements into practical technical solutions, identify dependencies, and communicate tradeoffs clearly.\n\nPREFERRED QUALIFICATIONS\nExperience developing applications with Oracle APEX, including SQL and PL/SQL.\n\nExperience with Oracle Database, Oracle Cloud Infrastructure, or comparable cloud data and application platforms.\n\nExperience integrating data from multiple cybersecurity domains, such as vulnerability management, asset management, identity and access management, endpoint security, security monitoring, or cloud security.\n\nExperience implementing security posture metrics, executive reporting, and historical trend analysis.\n\nExperience applying AI-enabled capabilities to enterprise data analysis and reporting, including validating outputs and enforcing appropriate data access controls.\nFamiliarity with security frameworks such as NIST CSF, NIST 800-53, ISO 27001, or CIS Controls.\n\nExperience establishing a new data or reporting capability and transitioning manual processes into supported automation.\n\nExperience working across a large organization with distributed data ownership and multiple stakeholder groups.\n\nRelevant security certifications, such as Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Certificate of Cloud Security Knowledge (CCSK), Certified Information Security Manager (CISM), or Certified Oracle Cloud Infrastructure Security Professional.\n\n Disclaimer:Certain U.S. based or U.S. customer or client-facing roles may be required to comply with applicable requirements, such as immunization/occupational health mandates, and/or drug testing requirements.\nRange and benefit information provided in this posting are specific to the stated locations only\nUS: Hiring Range in USD from: $100,800 to $234,600 per annum. May be eligible for bonus, equity, and compensation deferral.\nOracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business.\nCandidates are typically placed into the range based on the preceding factors as well as internal peer equity.\nOracle US offers a comprehensive benefits package which includes the following:\n1. Medical, dental, and vision insurance, including expert medical opinion\n2. Short term disability and long term disability\n3. Life insurance and AD&D\n4. Supplemental life insurance (Employee/Spouse/Child)\n5. Health care and dependent care Flexible Spending Accounts\n6. Pre-tax commuter and parking benefits\n7. 401(k) Savings and Investment Plan with company match\n8. Paid time off: Flexible Vacation is provided to all e...","description_format":"text","description_chars":13340,"description_truncated":true,"requirements":{"experience_years_min":11,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Life insurance","Parental leave","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["CRM Software","Cloud Platforms (IaaS & PaaS)","ERP & Business Management Software","HR & Payroll Software"],"lifecycle":[{"event":"open","at":"2026-10-24T05:26:31Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1,038 · green card filings: 729","filings_12m":1038,"filings_prev_12m":1197,"green_card_filings_12m":729,"median_offered_wage_usd":143374,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":33}],"liveness":{"score":55,"band":"ok","label":"Likely open","p_open":1,"p_active":0.608,"p_room":0.9,"age_days":4,"expected_fill_days":8,"reasons":["conf:2","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":234600,"is_top_pay":true},"html_url":"https://alion.io/job/oracle-principal-security-engineer-security-data-reporting","json_url":"https://alion.io/job/oracle-principal-security-engineer-security-data-reporting.json","meta":{"generated_at":"2026-10-28T13:09:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17668,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":53},"rest":"https://alion.io/mcp/rest/get_company?id=53"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Foracle-principal-security-engineer-security-data-reporting"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Foracle-principal-security-engineer-security-data-reporting"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Foracle-principal-security-engineer-security-data-reporting"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/oracle-principal-security-engineer-security-data-reporting\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Foracle-principal-security-engineer-security-data-reporting"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3197118}},{"tool":"search_jobs","arguments":{"company":"oracle.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3197118},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}