Security Architecture Specialist

Position: Security Architecture Specialist 5

Job Description

Oracle Health Data Intelligence (HDI) is entering a critical phase of regulatory and security modernization across our global health analytics and AI‑enabled population health platform. As HDI accelerates readiness for MDR (Medical Device Regulation), AI regulatory requirements, and emerging global security standards, we are expanding our Security Architecture team with specialists who bring deep technical expertise, cloud security experience, and strong regulatory awareness.

We are hiring Security Architecture Specialists who can design, review, and validate secure architectures across cloud‑native healthcare systems, AI/ML pipelines, and distributed data platforms. This role is ideal for someone with experience performing CSSAP‑style reviews
, cloud security assessments, threat modeling, and providing technical guidance that aligns engineering execution with security and regulatory expectations.

You will play a key role in ensuring that HDI’s software, AI systems, data flows, and infrastructure meet strict global standards for security, privacy, MDR compliance, and AI safety.

Responsibilities What You Will Do Security Architecture Design & Review

• Provide specialized skills and knowledge in the design and review of secure networks, applications, systems, infrastructure, and AI/ML environments.
• Ensure all architectures align with Oracle’s Corporate Information Security policies, Line of Business (including Cloud) security standards, and relevant healthcare regulations (MDR, SaMD, GDPR, HIPAA where applicable).
• Propose secure technical architectures that mitigate identified risks and support engineering teams in designing and implementing secure patterns.
• Conduct CSSAP‑style security reviews , including:
• Cloud security posture analysis
• Control architecture validation
• Secure‑by‑design pattern evaluation
• AI system risk assessment

Risk & Threat Analysis

• Perform design assessments, risk assessments, threat modeling, and (as needed) code reviews for high‑risk components.
• Identify, prioritize, and communicate security design issues, vulnerabilities, and emerging risks in AI/ML, data pipelines, and distributed systems.
• Provide guidance on selecting and implementing security controls across identity, data, compute, networking, observability, and deployment layers.

Regulatory Security Alignment (MDR & AI Regulatory)

• Support MDR‑related architecture documentation and ensure security controls are accurately reflected in:
• Technical files
• Software architecture descriptions
• Risk management files (ISO 14971)
• SaMD design documentation
• Partner with Regulatory, MDR Program Leadership, and Risk Management TPMs to align security architecture with audit expectations.
• Incorporate AI regulatory and AI safety considerations, including:
• Data provenance
• Model security
• AI lifecycle controls
• Bias, robustness, and explainability safeguards
• Alignment with EU AI Act–style requirements

Security Tooling, Monitoring & Controls

• Assist in the design and guidance of toolsets that implement and monitor security controls across HDI’s cloud‑native environments.
• Provide architectural leadership on:
• SIEM/SOAR integrations
• Identity & access governance
• Secrets & key management
• Vulnerability management automation
• Cloud security posture management
• Secure CI/CD, supply chain security, and artifact integrity

Security Research & Platform Stewardship

• Conduct security research on threats impacting:
• Healthcare systems
• Large‑scale distributed architectures
• AI/ML pipelines
• Cloud‑native services
• Troubleshoot security issues and assist with updates, migrations, and upgrades to HDI’s security platforms.
• Advise engineering teams on data security, privacy requirements, encryption standards, and secure data handling.

Cross‑Functional Partnership

• Collaborate closely with engineering, applied science, product, regulatory, compliance, and risk management teams.
• Work with third‑party assessors, regulatory consultants, and security certification bodies.
• Support audit readiness for MDR, ISO standards, AI regulatory reviews, and enterprise security assessments.

What We’re Looking For Required (Core Security & Architecture)

• 10 years in security architecture, systems engineering, or cloud…