Software Developer

Job Description

Join OCI’s Edge Security team as a Principal Software Engineer focused on building and scaling Oracle Cloud Infrastructure’s Web Application Firewall (WAF) platform. You will lead the design and development of highly available, cloud-scale services that protect customer applications from web-based threats, automate security enforcement, and deliver advanced traffic inspection and policy management capabilities across OCI’s global infrastructure.

• Lead the architecture and delivery of cloud-scale backend services that power OCI’s Web Application Firewall (WAF), API Security, and application protection capabilities.
• Design and evolve scalable policy management, rule evaluation, threat detection, bot mitigation, traffic inspection, and security analytics platforms with focus on reliability, performance, and extensibility.
• Build highly available distributed systems that inspect and process large volumes of HTTP/HTTPS traffic while maintaining low latency and a seamless customer experience.
• Drive the technical strategy for application security services, partnering with Security Engineering, Product Management, Edge Infrastructure, and Platform teams to deliver new capabilities.
• Establish operational excellence through SLOs/SLAs, incident response processes, runbooks, root‑cause analysis, and continuous service improvement.
• Lead automation initiatives across the software development lifecycle, including CI/CD pipelines, testing frameworks, deployment automation, Infrastructure‑as‑Code, and developer productivity tooling.
• Mentor engineers, influence technical strategy across organizations, and raise the engineering bar through design reviews and technical leadership.

• Lead the architecture and delivery of cloud-scale backend services that power OCI’s Web Application Firewall (WAF) platform.
• Design and evolve highly available policy management, rule evaluation, traffic inspection, bot mitigation, API protection, and security analytics services.
• Build scalable distributed systems that process and analyze high volumes of HTTP/HTTPS traffic while maintaining low latency and high reliability.
• Drive engineering excellence through software architecture reviews, design documentation, code quality standards, and operational best practices.
• Partner closely with Security Engineering, Product Management, SRE, and OCI platform teams to define and deliver next‑generation application security capabilities.
• Establish robust observability through metrics, logging, tracing, alerting, and performance monitoring to ensure service health and customer visibility.
• Lead automation initiatives across the software development lifecycle, including CI/CD, testing frameworks, deployment automation, and Infrastructure‑as‑Code.
• Drive reliability, scalability, and operational readiness through capacity planning, incident response, root‑cause analysis, and continuous improvement.

• Deliver core WAF capabilities that protect OCI customers from application‑layer attacks while maintaining performance and availability.
• Launch customer‑facing security features that provide visibility, protection, automation, and policy control at cloud scale.
• Improve the scalability, reliability, and operational maturity of OCI’s application security platform.
• Raise engineering quality and technical standards through mentorship, architectural leadership, and continuous improvement initiatives.

• Security, privacy, and reliability by design with secure development practices embedded throughout the software lifecycle.
• Data‑driven decision making supported by clear metrics, SLOs, operational reviews, and measurable customer outcomes.
• Collaborative engineering culture focused on design reviews, code reviews, technical excellence, knowledge sharing, and continuous learning.

• Experience building or operating Web Application Firewall (WAF), API Security, Bot Management, CDN, Edge Computing, or related security products.
• Knowledge of common web application attack vectors, including OWASP Top 10 vulnerabilities, credential abuse, automated attacks, and API threats.
• Experience with…