Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 14 hours ago

OCI Security Specialist

Aqilea86 open roles

Where
India, India
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowOCI Security SpecialistAqilea · India, India

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Aqilea's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.8% of postings close within 7 days. Measured by our own scanner across the market. Aqilea postings stay open a median of 12 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.8%7 days
  4. 22.3%14 days
  5. 37.8%30 days
  6. 59.0%60 days
This job: first seen 14 hours ago

Aqilea median: 12 days open

The posting

Role: OCI Security Specialist Job Ref Id: JD-1349 Competence level: 8 + Years Start date: 2026-11-15 End date: 2027-05-31 Extension option: Yes Scope: 100 % Location: India Remote work: Yes Language: English Application deadline: 2026-11-30 Number of consultants: 1 Security clearance: No

About the assignment

We are looking for an experienced OCI Security Specialist to design and implement a comprehensive security posture across Oracle Cloud Infrastructure (OCI) tenancies. The role focuses on protecting workloads, data, networks, and identities in line with enterprise security policies and regulatory requirements and embedding security across cloud and hybrid environments. The specialist will collaborate with cloud architects, network and DevOps teams, compliance officers, and application teams to drive DevSecOps practices and compliance.

Responsibilities

  • Architect and implement end-to-end security frameworks for OCI tenancies aligned with CIS OCI Foundations Benchmark, NIST CSF, and ISO 27001.
  • Design multi-layer security architectures including perimeter security, network security, workload security, data security, and identity security.
  • Conduct cloud security architecture reviews and threat modeling for OCI-hosted applications and infrastructure.
  • Define and enforce security baselines, guardrails, and security landing zones for OCI environments.
  • Evaluate and recommend OCI-native and third-party security tools and services.
  • Identity & Access Management (IAM):
  • Design and implement OCI IAM policies, Compartments, Groups, Dynamic Groups, and Federation (SAML, SCIM, LDAP) for enterprise-grade access governance.
  • Implement Principle of Least Privilege (PoLP) and Role-Based Access Control (RBAC) across OCI resources.
  • Manage OCI Identity Domains, Multi-Factor Authentication (MFA), and Privileged Access Management (PAM) integrations.
  • Conduct periodic IAM access reviews and entitlement certifications.
  • Implement service account and API key lifecycle management for OCI resources.
  • Data Security & Encryption:
  • Design and implement data encryption strategies for data at rest and data in transit across OCI services.
  • Manage OCI Vault (Key Management Service) for customer-managed encryption keys (CMEKs), secrets, and certificates.
  • Implement OCI Data Safe for Oracle Database security assessment, data masking, and sensitive data discovery.
  • Configure and manage OCI Object Storage encryption, Block Volume encryption, and Database encryption.
  • Define and enforce data classification and data handling policies on OCI.
  • Network Security:
  • Design and implement network security controls using OCI Network Firewall, Web Application Firewall (WAF), Security Lists, and Network Security Groups (NSGs).
  • Configure OCI DDoS protection, rate limiting, and traffic scrubbing for internet-facing workloads.
  • Implement Zero Trust Network Access (ZTNA) principles on OCI.
  • Monitor and analyze VCN Flow Logs, Firewall logs, and WAF logs for threat detection.
  • Conduct network security assessments and penetration testing coordination.
  • Threat Detection, Monitoring & Incident Response:
  • Implement and manage OCI Cloud Guard for continuous security posture monitoring, threat detection, and automated remediation.
  • Configure OCI Security Zones and Security Advisor to enforce security policies at the compartment level.
  • Integrate OCI Logging, OCI Logging Analytics, and OCI Events with SIEM platforms (Splunk, IBM QRadar, Microsoft Sentinel) for centralized security monitoring.
  • Define and respond to security incidents including investigation, containment, eradication, and recovery.
  • Develop and maintain Incident Response (IR) plans, playbooks, and runbooks for OCI environments.
  • Conduct regular threat hunting and vulnerability management activities.
  • Vulnerability Management & Compliance:
  • Conduct security assessments, vulnerability scans, and CIS benchmark compliance checks across OCI environments.
  • Manage and track remediation of vulnerabilities identified in OCI workloads and infrastructure.
  • Ensure compliance with regulatory standards including PCI-DSS, HIPAA, GDPR, SOC 2, and ISO 27001 on OCI.
  • Leverage OCI Compliance Documents and perform audit evidence collection for security certifications.
  • Implement and manage OCI Audit Service for comprehensive activity logging and forensic readiness.
  • DevSecOps & Automation:
  • Embed security controls into CI/CD pipelines (shift-left security) including SAST, DAST, SCA, and container image scanning.
  • Automate security policy enforcement and compliance checks using Terraform, OCI CLI, and custom Python/Bash scripts.
  • Implement OCI Functions for automated security response and remediation.
  • Develop security-as-code policies using OPA (Open Policy Agent) or equivalent frameworks.
  • Manage secure configuration baselines using Ansible and OCI OS Management Service.
  • Collaboration & Stakeholder Engagement:
  • Provide security advisory and consultation to project teams during design and implementation phases.
  • Conduct security awareness sessions and training for cloud operations and development teams.
  • Engage with Oracle security teams, third-party auditors, and regulatory bodies as required.
  • Mentor junior security engineers and contribute to security capability building within the organization.
  • Prepare security reports, dashboards, and executive summaries for leadership and clients.

Requirements

Mandatory

  • We are seeking a highly experienced OCI Security Specialist with 7 to 11 years of expertise in cloud security architecture, implementation, and operations on Oracle Cloud Infrastructure (OCI).
  • Deep expertise in OCI IAM (Policies, Compartments, Domains, Federation, Dynamic Groups, Service Principals).
  • Hands-on experience with OCI Cloud Guard, Security Zones, Security Advisor, and Threat Intelligence.
  • Proficiency in OCI Vault (Key Management), OCI Certificates, and OCI Data Safe.
  • Strong knowledge of OCI Network Firewall, WAF, VCN Flow Logs, and DDoS Protection.
  • Experience with OCI Audit Service, OCI Logging, OCI Logging Analytics, and OCI Events.
  • Familiarity with OCI Bastion Service, OCI Web Application Firewall, and OCI Identity Domains.
  • Strong understanding of cloud security frameworks: CIS OCI Benchmark, NIST CSF, ISO 27001, CSA CCM.
  • Expertise in encryption standards (AES-256, TLS 1.2/1.3, RSA, ECC) and PKI management.
  • Deep knowledge of IAM concepts including RBAC, ABAC, PoLP, PAM, and Zero Trust.
  • Experience with threat modeling methodologies (STRIDE, PASTA, DREAD).
  • Proficiency in vulnerability management tools (Qualys, Nessus, Rapid7, or equivalent).
  • Knowledge of penetration testing concepts and coordination with external pen test teams.
  • Experience with SIEM platforms (Splunk, QRadar, Microsoft Sentinel, or equivalent) for log ingestion and correlation.
  • Hands-on experience with Incident Response (IR) processes and security playbook development.
  • Knowledge of compliance frameworks: PCI-DSS, HIPAA, GDPR, SOC 2 Type II, ISO 27001, and DPDP Act.
  • Experience with GRC tools and security risk management frameworks.
  • Proficiency in Python, Ansible, Bash scripting for security automation.
  • Hands-on experience with Terraform for security infrastructure as code.
  • Familiarity with OCI CLI and OCI SDKs for security operations.
  • Experience with DevSecOps tools: SonarQube, Trivy, Checkmarx, Aqua Security, or Prisma Cloud.
  • Oracle Cloud Infrastructure 2024/25 Security Professional Certification (OCI Security Professional)
  • Oracle Cloud Infrastructure 2024/25 Foundations Associate (OCI Foundations Associate)

Nice-to-have

  • Experience with Oracle Database Security including TDE, Database Vault, Label Security, and Audit Vault.
  • Knowledge of OCI Data Science and AI/ML security considerations.
  • Familiarity with container security and Kubernetes security (OKE RBAC, Pod Security, Network Policies).
  • Exposure to CASB (Cloud Access Security Broker) solutions.
  • Understanding of OCI Observability and Monitoring for security performance baselines.
  • Knowledge of cloud forensics and digital evidence collection techniques.
  • Experience with phishing simulation, security awareness, and training program management.
  • Familiarity with Oracle CASB Cloud Service and Oracle Security Monitoring and Analytics.
  • Understanding of supply chain security and software composition analysis (SCA).
  • Knowledge of multi-cloud security architecture (OCI + AWS, OCI + Azure) and cross-cloud governance.
  • Exposure to OCI Government Cloud and sovereign cloud security requirements.
  • Oracle Cloud Infrastructure 2024/25 Architect Associate / OCI Architect Professional
  • Certified Information Systems Security Professional (CISSP) (Highly Preferred)
  • Certified Cloud Security Professional (CCSP) - (ISC)2 (Highly Preferred)
  • Certified Information Security Manager (CISM) - ISACA
  • Certified Information Systems Auditor (CISA) - ISACA (Good to Have)
  • AWS Certified Security - Specialty (Good to Have)
  • Microsoft Certified: Azure Security Engineer Associate (Good to Have)
  • CompTIA Security+ or CompTIA CySA+
  • Offensive Security Certified Professional (OSCP) (Good to Have)
  • Google Professional Cloud Security Engineer (Good to Have)
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Aqilea's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Aqilea's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Aqilea's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.