below marketmost similar roles pay hereabove market
This role pays more than
50%
of similar roles. Most pay
$136,625–$203,875
— the blue band above.
At the midpoint, this role pays about
$169k
versus about
$170k
for comparable roles.
Based on 240 similar postings.
Employer
About Oracle
Oracle Corporation is a leading multinational technology company specializing in database software, cloud computing, and enterprise software.
Oracle currently has
955 open roles
on FindRole.
Listed pay typically runs
$102,300–$234,600
across 790 roles with salary data.
The Sr Threat Intelligence Investigator joins the Oracle Threat Intelligence Center to track and monitor threat actors ranging from cybercriminals to Advanced Persistent Threat groups impacting OCI. You will independently lead investigations, analyze complex datasets, and develop new solutions to enhance tracking capabilities. Daily responsibilities include performing in-depth analysis of adversary campaigns, providing detailed attribution, managing executive communications, and facilitating post-incident reviews. You will utilize threat intelligence platforms, perform open-source intelligence research, and use structured queries to extract data from logs. Required skills include expertise in Windows, UNIX/Linux, and macOS, along with the ability to develop detection signatures using YARA, Snort, Suricata, or Bro/Zeek. This role solves the critical business problem of identifying and mitigating emerging global threats to protect cloud environments.
Lead investigations into adversary campaigns across the OCI environment to deliver actionable intelligence and remediation strategies.
Provide detailed attribution analysis to identify threat actors and inform proactive defense strategies.
Manage and maintain threat intelligence platforms (TIPs) and other cyber threat intelligence tools to enrich data.
Deliver finished intelligence analysis and assessments to internal and external customers through written reports.
Execute high-volume, time-sensitive intelligence requests by prioritizing and categorizing information for customers.
Facilitate post-incident reviews to extract lessons learned and document new threat intelligence.
Develop and refine intelligence processes to ensure accurate delivery of strategic, operational, and tactical intelligence.
Monitor emerging threats, vulnerabilities, and geopolitical issues to proactively enhance organizational defenses.
What we're looking for
Applicants must be able to read, write, and speak English.
3 to 5+ years of experience is required.
6-10+ years of industry experience in analytical and operational threat intelligence to perform case management and response against APTs (preferred).
Investigative experience tracking distinct APT groups providing intelligence on their methodologies (preferred).
Expertise in national security, defense, intelligence, law enforcement, or foreign area and language expertise relevant to threat analysis (preferred).
Knowledge of cloud services such as storage, computing, networking (preferred).
In-depth knowledge of multiple operating systems including Windows, UNIX/Linux, and macOS (preferred).
Bachelor or Master of Science degree in Computer Science, Computer Engineering, Information Systems, Cybersecurity, or equivalent practical experience (preferred).
Cyber Threat Intelligence
AI
Large Language Models
Python
PowerShell
C#
C++
MITRE ATT&CK
Cyber Kill Chain
Diamond Model
Threat Hunting
Incident Response
Reverse-engineering
Network Protocols
Vulnerability Research
Anomaly Detection