We are seeking a skilled Cybersecurity Specialist to join our team in ensuring the robust security posture of our Oracle Cloud deployments. The ideal candidate will be responsible for developing cybersecurity objectives, conducting threat modeling, performing risk assessments, and crafting comprehensive System Security Plans (SSP) for deploying in Oracle Cloud Infrastructure (OCI). This role requires strong analytical skills, a deep understanding of cybersecurity principles, and the ability to collaborate effectively with cross-functional teams.
RESPONSIBILITIES:
Developing Security Objectives:
- Collaborate with stakeholders to define cybersecurity objectives for Oracle Cloud deployments, aligning with organizational goals and the specific features of the Oracle Cloud platform.
- Customize and adapt general cybersecurity objectives to meet the unique needs of each Oracle Cloud deployment, emphasizing data confidentiality, system availability, access control, threat detection, compliance, and security awareness.
Threat Modeling:
- Utilize the defined security objectives to create threat models for each phase of the Oracle Cloud deployment, identifying and evaluating potential threats, vulnerabilities, and mitigation strategies.
- Ensure that threat models comprehensively address specific security objectives, guiding the selection of appropriate security controls.
Risk Assessment:
- Conduct thorough risk assessments using NIST’s Cybersecurity Framework (CSF) Core functions, evaluating threats, vulnerabilities, and inherent security controls within Oracle Cloud.
- Define risk mitigation strategies and identify residual risks, ensuring that security controls are selected and implemented for each build phase (e.g., development, user acceptance testing, production).
System Security Planning (SSP):
- Develop comprehensive System Security Plans (SSP) for WACS implementation in OCI, establishing a robust security framework to safeguard critical work and asset management processes.
- Document roles, responsibilities, and operational requirements post go-live to ensure the continuous effectiveness of security controls.
- Specify technology solutions and processes for each security control identified in the SSP, ensuring alignment with risk assessment findings.
- Coordinate with cross-functional teams to implement security controls across all build phases, ensuring compliance and adherence to established security protocols.
REQUIRED SKILLS:
- Bachelor’s degree in Computer Science, Information Security, or a related field. Master’s degree preferred.
- Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent certification preferred.
- Proven experience in developing cybersecurity objectives, conducting threat modeling, performing risk assessments, and crafting System Security Plans (SSP) for cloud environments.
- In-depth knowledge of cybersecurity principles, standards, and best practices, particularly related to Oracle Cloud Infrastructure (OCI) and NIST’s Cybersecurity Framework (CSF).
- Strong analytical and problem-solving skills, with the ability to assess complex security challenges and recommend effective solutions.
- Excellent communication and interpersonal skills, with the ability to collaborate effectively with diverse teams and stakeholders.
- Join our team and play a key role in ensuring the security and integrity of our Oracle Cloud deployments. Apply now to contribute to the success of our cybersecurity initiatives.