XFactor Talent
Website:
xfactortalent.com
Job details:
Job Description
We are seeking a highly experienced OCI Security Specialist with 7 to 11 years of expertise in cloud
security architecture, implementation, and operations on Oracle Cloud Infrastructure (OCI). The ideal candidate will have a strong background in cloud security engineering, identity and access governance, data protection, threat detection, and compliance management within OCI and hybrid cloud environments. The OCI Security Specialist will be responsible for designing and implementing a
comprehensive security posture across OCI tenancies, ensuring that workloads, data, networks, and
identities are protected in accordance with enterprise security policies and regulatory requirements.
This role requires deep expertise in OCI security services, security frameworks (CIS, NIST, ISO 27001), and DevSecOps practices. The candidate will collaborate with cloud architects, network engineers,
DevOps teams, compliance officers, and application teams to embed security across all layers of the cloud environment.
Roles & Responsibilities
Security Architecture & Design:
Architect and implement end-to-end security frameworks for OCI tenancies aligned with CIS OCI
Foundations Benchmark, NIST CSF, and ISO 27001.
Design multi-layer security architectures including perimeter security, network security,
workload security, data security, and identity security.
Conduct cloud security architecture reviews and threat modeling for OCI-hosted applications
and infrastructure.
Define and enforce security baselines, guardrails, and security landing zones for OCI
environments.
Evaluate and recommend OCI-native and third-party security tools and services.
Identity & Access Management (IAM):
Design and implement OCI IAM policies, Compartments, Groups, Dynamic Groups, and
Federation (SAML, SCIM, LDAP) for enterprise-grade access governance.
Implement Principle of Least Privilege (PoLP) and Role-Based Access Control (RBAC) across OCI
resources.
Manage OCI Identity Domains, Multi-Factor Authentication (MFA), and Privileged Access
Management (PAM) integrations.
Conduct periodic IAM access reviews and entitlement certifications.
Implement service account and API key lifecycle management for OCI resources. Data Security &
Encryption:
Design and implement data encryption strategies for data at rest and data in transit across OCI
services.
Manage OCI Vault (Key Management Service) for customer-managed encryption keys (CMEKs),
secrets, and certificates.
Implement OCI Data Safe for Oracle Database security assessment, data masking, and sensitive
data discovery.
Configure and manage OCI Object Storage encryption, Block Volume encryption, and Database
encryption.
Define and enforce data classification and data handling policies on OCI.
Network Security:
Design and implement network security controls using OCI Network Firewall, Web Application
Firewall (WAF), Security Lists, and Network Security Groups (NSGs).
Configure OCI DDoS protection, rate limiting, and traffic scrubbing for internet-facing workloads.
Implement Zero Trust Network Access (ZTNA) principles on OCI.
Monitor and analyze VCN Flow Logs, Firewall logs, and WAF logs for threat detection.
Conduct network security assessments and penetration testing coordination.
Threat Detection, Monitoring & Incident Response:
Implement and manage OCI Cloud Guard for continuous security posture monitoring, threat
detection, and automated remediation.
Configure OCI Security Zones and Security Advisor to enforce security policies at the
compartment level. Integrate OCI Logging, OCI Logging Analytics, and OCI Events with SIEM
platforms (Splunk, IBM QRadar, Microsoft Sentinel) for centralized security monitoring.
Define and respond to security incidents including investigation, containment, eradication, and
recovery.
Develop and maintain Incident Response (IR) plans, playbooks, and runbooks for OCI
environments. Conduct regular threat hunting and vulnerability management activities.
Vulnerability Management & Compliance:
Conduct security assessments, vulnerability scans, and CIS benchmark compliance checks across
OCI environments.
Manage and track remediation of vulnerabilities identified in OCI workloads and infrastructure.
Ensure compliance with regulatory standards including PCI-DSS, HIPAA, GDPR, SOC 2, and ISO
27001 on OCI.
Leverage OCI Compliance Documents and perform audit evidence collection for security
certifications.
Implement and manage OCI Audit Service for comprehensive activity logging and forensic
readiness.
DevSecOps & Automation:
Embed security controls into CI/CD pipelines (shift-left security) including SAST, DAST, SCA, and
container image scanning.
Automate security policy enforcement and compliance checks using Terraform, OCI CLI, and
custom Python/Bash scripts.
Implement OCI Functions for automated security response and remediation.
Develop security-as-code policies using OPA (Open Policy Agent) or equivalent frameworks.
Manage secure configuration baselines using Ansible and OCI OS Management Service.
Collaboration & Stakeholder Engagement:
Provide security advisory and consultation to project teams during design and implementation
phases.
Conduct security awareness sessions and training for cloud operations and development teams.
Engage with Oracle security teams, third-party auditors, and regulatory bodies as required.
Mentor junior security engineers and contribute to security capability building within the
organization.
Prepare security reports, dashboards, and executive summaries for leadership and clients.
PRIMARY SKILLSETS
OCI Security Services: - Deep expertise in OCI IAM (Policies, Compartments, Domains, Federation,
Dynamic Groups, Service Principals). - Hands-on experience with OCI Cloud Guard, Security Zones,
Security Advisor, and Threat Intelligence. - Proficiency in OCI Vault (Key Management), OCI Certificates,
and OCI Data Safe. - Strong knowledge of OCI Network Firewall, WAF, VCN Flow Logs, and DDoS
Protection. - Experience with OCI Audit Service, OCI Logging, OCI Logging Analytics, and OCI Events. -
Familiarity with OCI Bastion Service, OCI Web Application Firewall, and OCI Identity Domains. Cloud
Security Fundamentals: - Strong understanding of cloud security frameworks: CIS OCI Benchmark, NIST
CSF, ISO 27001, CSA CCM. - Expertise in encryption standards (AES-256, TLS 1.2/1.3, RSA, ECC) and PKI
management. - Deep knowledge of IAM concepts including RBAC, ABAC, PoLP, PAM, and Zero Trust. -
Experience with threat modeling methodologies (STRIDE, PASTA, DREAD). - Proficiency in vulnerability
management tools (Qualys, Nessus, Rapid7, or equivalent). - Knowledge of penetration testing concepts
and coordination with external pen test teams. Security Operations & Compliance: - Experience with
SIEM platforms (Splunk, QRadar, Microsoft Sentinel, or equivalent) for log ingestion and correlation. -
Hands-on experience with Incident Response (IR) processes and security playbook development. -
Knowledge of compliance frameworks: PCI-DSS, HIPAA, GDPR, SOC 2 Type II, ISO 27001, and DPDP Act. -
Experience with GRC tools and security risk management frameworks. Automation & Scripting: -
Proficiency in Python, Ansible, Bash scripting for security automation. - Hands-on experience with
Terraform for security infrastructure as code. - Familiarity with OCI CLI and OCI SDKs for security
operations. - Experience with DevSecOps tools: SonarQube, Trivy, Checkmarx, Aqua Security, or Prisma
Cloud.
SECONDARY SKILLSETS
- Experience with Oracle Database Security including TDE, Database Vault, Label Security, and Audit
Vault. - Knowledge of OCI Data Science and AI/ML security considerations. - Familiarity with container
security and Kubernetes security (OKE RBAC, Pod Security, Network Policies). - Exposure to CASB (Cloud
Access Security Broker) solutions. - Understanding of OCI Observability and Monitoring for security
performance baselines. - Knowledge of cloud forensics and digital evidence collection techniques. -
Experience with phishing simulation, security awareness, and training program management. -
Familiarity with Oracle CASB Cloud Service and Oracle Security Monitoring and Analytics. -
Understanding of supply chain security and software composition analysis (SCA). - Knowledge of multi-
cloud security architecture (OCI + AWS, OCI + Azure) and cross-cloud governance. - Exposure to OCI
Government Cloud and sovereign cloud security requirements.
CERTIFICATIONS
Mandatory / Preferred Certifications: - Oracle Cloud Infrastructure 2024/25 Security Professional
Certification (OCI Security Professional) - Oracle Cloud Infrastructure 2024/25 Foundations Associate
(OCI Foundations Associate) Additional Preferred Certifications: - Oracle Cloud Infrastructure 2024/25
Architect Associate / OCI Architect Professional - Certified Information Systems Security Professional
(CISSP) (Highly Preferred) - Certified Cloud Security Professional (CCSP) - (ISC)2 (Highly Preferred) -
Certified Information Security Manager (CISM) - ISACA - Certified Information Systems Auditor (CISA) -
ISACA (Good to Have) - AWS Certified Security - Specialty (Good to Have) - Microsoft Certified: Azure
Security Engineer Associate (Good to Have) - CompTIA Security+ or CompTIA CySA+ - Offensive Security
Certified Professional
Click on Apply to know more.
