Senior Principal Offensive Security Researcher

4 weeks ago


North Ryde, New South Wales, Australia Oracle Full time

About the Role

We are seeking a highly skilled Senior Principal Offensive Security Researcher to join our team of world-class application security researchers. As a member of our team, you will be responsible for planning and delivering in-depth security assessments across a variety of products and services.

Key Responsibilities

  • Design and evaluate complex systems for security
  • Scope and execute security assessments and vulnerability research
  • Perform in-depth security assessments using results from static and dynamic analysis
  • Create testing tools to help engineering teams identify security-related weaknesses
  • Keep yourself abreast of new TTPs (Tactics, Techniques & Procedures) of the attackers, mimic them in your technical security risk assessments and/or quickly react to new threat scenarios to provide continuous security assurance
  • Collaborate with engineering teams to help them triage and fix security issues
  • Mentor members of the team in software security as a role model

Requirements

  • Bachelor's or Master's degree in Computer Science or related field
  • 12+ years industry experience with 7+ years in IT security in one or more of the following areas: software/product security assessments, penetration testing, red teaming, web application assessments
  • Interest in vulnerability research and exploit development
  • Demonstrable experience in designing and evaluating complex systems for security
  • Aptitude for self-study, setting and achieving long term goals
  • Ability to effectively assess and communicate risks and appropriate levels of urgency to management and engineering staff
  • Excellent organizational, presentation, verbal, and written communication skills

What We Offer

  • A team of very skilled and diverse personnel across the globe
  • Ability to work in a hybrid work environment
  • Exposure to mind-blowing large-scale cutting-edge systems
  • The resources of a large, global operation while still having the small, start-up feel of a smaller team day to day
  • Develop new skills and competencies working with our vast cloud product offerings
  • Ongoing extensive training and skills development support to further your career aspirations
  • Incredible benefits and company perks
  • An organization filled with smart, enthusiastic, and motivated colleagues
  • The opportunity to impact and improve our systems and delight our customers

Nice to Have

  • Experience working in a large cloud or Internet software company
  • Proficiency with multiple programming languages, preferably Go, Java, Python or C/C++
  • 5+ years industry experience in software development
  • Ability to perform manual source code reviews in one of the aforementioned languages, or assisted review with code analysis tools
  • Hands-on experience in one or more of the following with an interest in doing full-time research: cybersecurity consulting, security engineering, vulnerability management, risk assessments, bug bounty hunting, malware analysis, forensics
  • OSCP, OSWE certification, or interest in achieving certification
  • Experience navigating and working with extremely large codebases is also highly desirable
  • Experience using common security assessment tools and techniques in one or more the following categories: Mobile Application Assessment (iOS / Android), Reverse Engineering (. IDA Pro/Ghidra/Radare2), Fuzzing (. Jazzer/AFL/Peach), Web Application assessment (. Burp Suite Proxy, ZAP, REST API testing)
  • Proficiency in manual penetration testing in at least TWO or more of the following areas - Mobile, API, Infrastructure, OS, Web Application
  • Knowledge of common vulnerabilities in different types of software and programming languages, including: How to test for/exploit them, Real world mitigations that can be applied
  • Familiarity with vulnerability classification frameworks (. OWASP Top 10, CVSS, MITRE CVE)
  • Ability to threat model systems/applications/platforms to assess design and find flaws that can be exploited


  • North Ryde, New South Wales, Australia Oracle Full time

    About the RoleWe are seeking a highly skilled Senior Principal Offensive Security Researcher to join our team of world-class application security researchers. As a member of our team, you will be responsible for planning and delivering in-depth security assessments across a variety of products and services.Key ResponsibilitiesDesign and evaluate complex...


  • North Ryde, New South Wales, Australia Oracle Full time

    Secure the Future of SoftwareWe are a world-class team of application security researchers at Oracle, and we're looking for an exceptional professional to join our ranks as a Senior Principal Offensive Security Research Lead. With 12+ years of industry experience and a passion for vulnerability research and exploit development, you'll play a crucial role in...


  • North Ryde, New South Wales, Australia Oracle Full time

    About UsWe are a cutting-edge team of application security researchers, dedicated to pushing the boundaries of software assurance. With a global reach and diverse expertise, we leverage our collective strengths to develop innovative solutions to complex problems.Job DescriptionWe are seeking an experienced Senior Principal Offensive Security Researcher to...


  • North Ryde, New South Wales, Australia Cerner Full time

    About the RoleOracle is a world leader in cloud solutions, leveraging tomorrow's technology to tackle today's challenges. We're committed to expanding our inclusive workforce, promoting diverse insights and perspectives that inspire innovation.Job DescriptionWe're seeking an exceptional Senior Principal Offensive Security Researcher to join our team in North...


  • North Ryde, New South Wales, Australia Oracle Full time

    About the RoleWe are seeking a seasoned security professional to join our team as a Senior Principal Offensive Security Researcher. As a member of our world-class team, you will play a crucial role in planning and delivering in-depth security assessments across various products and services.As a key contributor, you will be responsible for designing and...


  • North Ryde, New South Wales, Australia Oracle Full time

    About the RoleWe are seeking a highly skilled Senior Principal Offensive Security Researcher to join our team at Oracle. As a key member of our application security research group, you will be responsible for planning and delivering in-depth security assessments across various products and services.


  • North Ryde, New South Wales, Australia Oracle Full time

    About the RoleOracle's Software Assurance organization is seeking an experienced security researcher to join our team. As a Principal Security Researcher, you will be responsible for planning and delivering in-depth security assessments across a variety of products and services.Key ResponsibilitiesScope and execute security assessments and vulnerability...


  • North Ryde, New South Wales, Australia Oracle Full time

    Oracle's Software Assurance organization has the mission to make application security and software assurance a reality. We are an inclusive and diverse team of high-caliber application security researchers, distributed globally.Role OverviewWe are seeking experienced and dedicated security researchers who have genuine excitement for and interest in security...


  • North Ryde, New South Wales, Australia Oracle Full time

    About the RoleOracle's Software Assurance organization is seeking a highly skilled Senior Security Researcher to join our team. As a member of our team, you will be responsible for planning and delivering in-depth security assessments across a variety of products and services.Key ResponsibilitiesScope and execute security assessments and vulnerability...


  • North Ryde, New South Wales, Australia Oracle Full time

    About the RoleOracle's Software Assurance organization is seeking a highly skilled Senior Security Researcher to join our team. As a key member of our team, you will be responsible for planning and delivering in-depth security assessments across a variety of products and services.Key ResponsibilitiesScope and execute security assessments and vulnerability...


  • North Ryde, New South Wales, Australia Oracle Full time

    About the RoleWe are seeking a highly skilled Principal Cybersecurity Researcher to join our Software Assurance organization at Oracle. In this critical role, you will be responsible for planning and delivering in-depth security assessments across a variety of products and services.Key ResponsibilitiesScope and execute security assessments and vulnerability...


  • North Ryde, New South Wales, Australia Oracle Full time

    About the RoleOracle's Software Assurance organization is seeking a highly skilled and experienced security researcher to join our team. As a member of our team, you will be responsible for planning and delivering in-depth security assessments across a variety of products and services.Key ResponsibilitiesScope and execute security assessments and...


  • North Ryde, New South Wales, Australia Oracle Full time

    About the Role Oracle's Software Assurance organization is seeking an experienced Security Researcher to join our team. As a member of our team, you will be responsible for planning and delivering in-depth security assessments across a variety of products and services. Key Responsibilities Scope and execute security assessments and vulnerability...


  • North Ryde, New South Wales, Australia Oracle Full time

    Oracle's Software Assurance organization is a team of skilled and diverse security researchers, working globally to deliver innovative software assurance solutions. Our mission is to make application security and software assurance, at scale, a reality.About the RoleWe are seeking experienced security researchers with a genuine passion for security to work...


  • North Ryde, New South Wales, Australia Oracle Full time

    Oracle's Software Assurance organization is seeking an experienced and dedicated security researcher to join our team.About the RoleThis critical greenfield software assurance project requires a skilled individual with genuine excitement for and interest in security. The ideal candidate will have 10+ years of industry experience, with 5+ years in IT...


  • North Ryde, New South Wales, Australia Oracle Full time

    About the JobOracle's Software Assurance organization is seeking a skilled Cloud Security Researcher to join our team. As a member of our team, you will be responsible for planning and delivering in-depth security assessments across various products and services. Your next project could be anything from secure systems design to writing a fuzzer for an...

  • Security Researcher

    4 days ago


    North Ryde, New South Wales, Australia Oracle Full time

    About UsOracle's Software Assurance organization has a mission to make application security and software assurance at scale a reality. Our team is inclusive, diverse, and globally distributed.We are seeking experienced security researchers who have genuine excitement for and interest in security to work on a critical greenfield software assurance project...


  • North Ryde, New South Wales, Australia Oracle Full time

    Secure Software Assurance for Cloud Systems Oracle's Software Assurance organization is seeking experienced security researchers to join our diverse and inclusive team focused on making application security and software assurance a reality at scale. As a member of our team, you will be responsible for planning and delivering in-depth security assessments...


  • North Ryde, New South Wales, Australia Oracle Full time

    Job DescriptionWe are seeking an experienced Cloud Security Researcher to join our team at Oracle. As a key member of our Software Assurance organization, you will be responsible for planning and delivering in-depth security assessments across a variety of products and services.Responsibilities:Scope and execute security assessments and vulnerability...


  • North Ryde, New South Wales, Australia Oracle Full time

    Job DescriptionAs a Cloud Security Researcher, you will be responsible for planning and delivering in-depth security assessments across various products and services. Your next project could involve secure systems design, static and dynamic analysis of multi-node microservice infrastructures, or writing fuzzers for undocumented network protocols.Key...