below marketmost similar roles pay hereabove market
This role pays more than
58%
of similar roles. Most pay
$136,625–$202,879
— the blue band above.
At the midpoint, this role pays about
$175k
versus about
$170k
for comparable roles.
Based on 240 similar postings.
Employer
About Oracle
Oracle Corporation is a leading multinational technology company specializing in database software, cloud computing, and enterprise software.
Oracle currently has
905 open roles
on FindRole.
Listed pay typically runs
$102,300–$234,600
across 736 roles with salary data.
The Sr Threat Intelligence Investigator joins the Oracle Threat Intelligence Center to track and monitor threat actors ranging from cybercriminals to Advanced Persistent Threat groups impacting OCI and its customers. You will independently track numerous groups, lead operational activities, and handle large, complex datasets to develop new tracking solutions. Key responsibilities include conducting in-depth analysis of adversary campaigns, providing detailed attribution, managing executive communications, and facilitating post-incident reviews. You will utilize threat intelligence platforms, perform open-source intelligence research, and use structured queries to extract data from logs. Required skills include expertise in Windows, UNIX/Linux, and macOS, as well as developing detection signatures using YARA, Snort, Suricata, or Bro/Zeek. This role solves the problem of identifying and mitigating emerging global threats to OCI environments.
Lead investigations into adversary campaigns across the OCI environment to deliver actionable intelligence and remediation strategies.
Provide detailed attribution analysis to identify threat actors and inform proactive defense strategies.
Manage and maintain threat intelligence platforms (TIPs) and other cyber threat intelligence tools to enrich data.
Develop and refine intelligence processes to ensure the timely delivery of strategic, operational, and tactical intelligence.
Execute high-volume, time-sensitive intelligence requests for internal and external customers by prioritizing and categorizing information.
Deliver finished intelligence analysis and assessments to customers through written reports to enable informed decision-making.
Facilitate post-incident reviews to extract lessons learned and document new threat intelligence.
Communicate intricate technical matters to non-technical audiences through cross-company and executive communications.
What we're looking for
Applicants must be able to read, write, and speak English.
The role requires 6 to 10+ years of experience.
6-10+ years of industry experience in analytical and operational threat intelligence to perform case management and response against APTs (preferred).
Investigative experience tracking distinct APT groups providing intelligence on their methodologies (preferred).
Expertise in national security, defense, intelligence, law enforcement, or foreign area and language expertise relevant to threat analysis (preferred).
Knowledge of cloud services such as storage, computing, networking (preferred).
In-depth knowledge of multiple operating systems including Windows, UNIX/Linux, and macOS (preferred).
Skilled in conducting open-source intelligence (OSINT) research across a wide range of topics (preferred).
Prior experience in Incident Response, Security Operations Center (SOC), and/or Digital Forensics Analysis (preferred).
Experience with malware analysis is highly desirable (preferred).
Proficient in using structured queries to extract data from logs and in developing detection signatures (preferred).
Bachelor or Master of Science degree in Computer Science, Computer Engineering, Information Systems, Cybersecurity, or equivalent practical experience (preferred).
Cyber Threat Intelligence
AI
Large Language Models
Python
PowerShell
C#
C++
MITRE ATT&CK
Cyber Kill Chain
Diamond Model
Threat Hunting
Incident Response
Reverse-engineering
Network Protocols
Vulnerability Research
Anomaly Detection