Applied Scientist 4

Job Description

We are looking for a Principal Applied Scientist to join our Security Engineering organization and help define the future of security operations for Oracle's SaaS ecosystem. This role offers a rare and high-impact opportunity to shape how next-generation detection, response, and threat defense will work across one of the largest enterprise cloud environments in the world.

As a Principal IC, you will architect and develop advanced ML and behavioral models that enable a new class of adaptive, intelligence-informed security capabilities. You will work directly with massive, noisy, and adversarial telemetry; build models that must operate at extreme scale; and pioneer approaches that transform how our analysts, detections, and automated systems understand attacker behavior.

In this role you will:

• Invent new ways to detect and disrupt attackers

• Build machine learning foundations for an AI-driven SOC

• Influence the architecture of detection pipelines for years to come

• Operationalize research at petabyte scale

• Raise the scientific bar across the security organization

You will work closely with Detection Engineering, Red Team, Threat Intelligence, and Data Engineering to identify meaningful signal, reduce noise, validate hypotheses, and translate research into production systems that materially reduce risk.

Responsibilities

Research & Modeling

• Develop novel ML models for anomaly detection, identity analytics, time-series/sequence analysis, graph modeling, and pattern mining across noisy, high-volume telemetry.

• Design experiments, baselines, evaluation metrics, and scientific methodologies for threat detection problems.

• Build prototypes, run experiments, analyze results, and iterate quickly.

Data & System Understanding

• Work with massive, sparse, high-cardinality datasets (1.2PB/day+) to extract signal from noise.

• Create data-efficient modeling approaches (self-supervision, embedding models, sampling strategies, feature extraction).

• Design inference strategies that work under tight cost, performance, and real-time constraints.

Cross-Functional Technical Work

Collaborate with Detection Engineering, Data Engineering, Red Team, and Threat Intelligence to define problem statements, understand attack patterns, and interpret telemetry.

• Provide scientific insights and deep technical guidance to engineering partners building pipelines and detections.

• Translate research prototypes into production-ready designs with engineering teams.

Scientific Rigor

• Establish strong modeling baselines, validation methodologies, ablation studies, and well-defined success criteria.

• Document findings, methodologies, and recommended approaches clearly and reproducibly.

• Maintain awareness of current academic and industry research; apply relevant advances appropriately.

Required Qualifications

Technical Expertise

• Deep knowledge of ML approaches relevant to security:

• anomaly detection

• statistical modeling

• representation learning / embeddings

• sequence models (RNNs, Transformers)

• graph-based analysis

• clustering and outlier detection

• Strong understanding of:

• adversarial ML challenges

• noisy/weak/no-label environments

• data imbalance and cost-sensitive modeling

• model explainability and operational constraints

Hands-On Skills

• Expert programming in Python, SQL; comfortable with Spark, Beam, Flink, or similar distributed data systems.

• Ability to rapidly prototype models and experiment with large datasets using PyTorch, TensorFlow, JAX, or similar.

• Experience building models that run in production, including monitoring, drift detection, and model evaluation.

Experience

• PhD or Master's in Computer Science, Machine Learning, Applied Mathematics, or equivalent experience.

• 10+ years of industry or research experience applying ML to real-world problems.

• Experience with security telemetry, cloud logs, SIEM/EDR/XDR analytics, identity data, fraud detection, or similar adversarial domains strongly preferred.

• Demonstrated impact through deployed models, patents, publications, or widely adopted research outputs.

Disclaimer:

Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.

Range and benefit information provided in this posting are specific to the stated locations only

US: Hiring Range in USD from: $120,100 to $251,600 per annum. May be eligible for bonus, equity, and compensation deferral.

Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business.

Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.

Oracle US offers a comprehensive benefits package which includes the following:

1. Medical, dental, and vision insurance, including expert medical opinion

2. Short term disability and long term disability

3. Life insurance and AD&D

4. Supplemental life insurance (Employee/Spouse/Child)

5. Health care and dependent care Flexible Spending Accounts

6. Pre-tax commuter and parking benefits

7. 401(k) Savings and Investment Plan with company match

8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.

9. 11 paid holidays

10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.

11. Paid parental leave

12. Adoption assistance

13. Employee Stock Purchase Plan

14. Financial planning and group legal

15. Voluntary benefits including auto, homeowner and pet insurance

The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.

Career Level - IC4

About Us

Only Oracle brings together the data, infrastructure, applications, and expertise to power everything from industry innovations to life-saving care. And with AI embedded across our products and services, we help customers turn that promise into a better future for all. Discover your potential at a company leading the way in AI and cloud solutions that impact billions of lives.

True innovation starts when everyone is empowered to contribute. That's why we're committed to growing a workforce that promotes opportunities for all with competitive benefits that support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs.

We're committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing accommodation-request_mb@oracle.com or by calling 1-888-404-2494 in the United States.

Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans' status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.