Lead Principal Security Researcher (adtech Platform)

Oracle Oracle · Enterprise · Nashville, TN +1

This role focuses on ensuring a large-scale advertising system operates according to policies, business rules, contractual obligations, and regulatory requirements. Responsibilities include validating platform behavior, designing and executing empirical validation processes, reviewing data and logs, participating in threat modeling, supporting audits, and producing assurance reports. The role requires strong AdTech domain knowledge, technical background in software engineering/security/operations, knowledge of adversarial threats, and experience with controls, assurance, and risk assessment.

What you'd actually do

  1. Independently validate platform behavior against policies and requirements
  2. Design and execute processes that provide empirical validation of policies and controls, control testing, and assurance reviews
  3. Review raw data, logs, metrics, architecture, and operational evidence
  4. Participate in threat modeling, identify risks, gaps, and control weaknesses
  5. Support audits, regulatory reviews, and customer assurance requests

Skills

Required

  • AdTech domain knowledge (SSPs, DSPs, RTB, auctions, attribution, measurement)
  • Strong technical background in software engineering, architecture, security, or platform operations
  • Strong knowledge of adversarial threat groups, including tactics, techniques, and procedures
  • Controls and assurance experience
  • Evidence-based validation and testing skills
  • Risk assessment and remediation planning experience
  • Executive and technical communication skills

Nice to have

  • Working knowledge of privacy frameworks like GDPR
  • Data engineering expertise
  • Strong problem-solving skills, desire to learn new tools, new areas of expertise
  • Security architecture and compliance experience
  • Internal audit certifications
  • Privacy engineering experience
  • Fraud, IVT, and measurement expertise
  • Cloud platform expertise

What the JD emphasized

  • AdTech domain knowledge
  • regulatory requirements
  • controls and assurance experience
  • Evidence-based validation and testing skills
  • Risk assessment and remediation planning experience