Oracle Cloud Security Engineer

MANTECH seeks a highly technical Oracle Cloud Security Engineer to join our team in Herndon, VA. Join a dedicated team of cybersecurity experts focused on enhancing the customer’s cloud incident response posture.

The ideal candidate brings a strong background in Oracle Cloud Infrastructure (OCI), cyber defense operations, scripting, and automation, coupled with expertise in Security Information and Event Management (SIEM) tools.

Responsibilities include, but are not limited to:

• Systems Design & Architecture: Consult on the design, architecture, and implementation of OCI-based security monitoring systems at enterprise scale. Evangelize OCI security best practices.
• Development and Scripting: Develop and maintain scripts and automation tools using OCI CLI, SDKs, and REST APIs.
• Automation and Orchestration: Design and implement automated incident response tooling and security validation tools using OCI Resource Manager, Events, and Functions.
• Collaboration and Mentorship: Provide technical expertise and mentorship to junior staff; assist other teams with OCI-based security investigations, prepare incident response-related reference and training materials; provide subject matter expertise to the customer.
• Continuous Improvement: Stay current on cybersecurity trends, threats, and technologies. Identify opportunities for process improvement and implement best practices. Maintain up-to-date knowledge of relevant AI tools and find ways to leverage them for the customer’s benefit.
• Splunk Detection Development: Assist in the development and optimization of detection rules specific to OCI.
• OCI-native Security Services and Tooling: Provide subject matter expertise for OCI security relevant services including but not limited to OCI Audit, CloudGuard, VCN Flow Logs, OCI WAF/Network Firewall, OCI Bastion.

Minimum Qualifications:

• 7+ years of experience with cloud security, cloud engineering or cyber operations
• 7+ years of experience with Operating Systems, Network Infrastructure, Security Principles or System Architecture
• 3+ years of experience with OCI
• 3+ years of experience coding and scripting in Python

Preferred Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related technical field
• Experience with automation and SOAR platforms
• Experience in one of the following: incident response, threat hunt, or detection engineering
• Relevant certifications (e.g., OCI Security Professional, OCI Networking Professional, OCI Architect)

Clearance Requirements: Active/current TS/SCI with Polygraph is required for this position

Physical Requirements: Must be able to remain in a stationary position 50% of the time