Oracle Cloud (OCI) Security Specialist

Oracle Cloud (OCI) Security Specialist - Security Assessment Support

Remote (Contiguous US) | Contract (W2) | Approximately 3-5 Months

Position Summary

LRS Consulting Services is seeking an Oracle Cloud Infrastructure (OCI) Security Specialist to support an independent security and privacy assessment of a state government client's hosted platform. The system is hosted on OCI in the Oracle government cloud with Oracle databases and multiple external-facing web portals. This role focuses specifically on the Oracle platform and database layers of the assessment. The assessment team will lead the overall engagement, test planning, reporting, and penetration testing; this specialist will own the OCI and Oracle Database assessment workstream. The anticipated engagement runs September 2026 through December 2026, full-time initially with potential transition to part-time support later in the engagement.

What You Will Do

• Assess implemented OCI configurations against security requirements and CIS OCI Foundations Benchmarks (Levels 1 and 2), including IAM, compartments and policies, network security (VCNs, security lists, NSGs), logging and audit, encryption, and key management
• Perform Oracle Database security assessment, including review of default and privileged accounts, access controls, encryption (TDE), and audit configuration
• Execute and evaluate database scans and support infrastructure scans for in-scope components using tools such as Tenable, Qualys, or Oracle DBSAT
• Review firewall and network access control configurations against documented security requirements
• Document findings with sufficient technical detail for the system vendor to reproduce and remediate issues
• Provide input to the assessment team's test plan, workbook, and final report for the OCI and database workstreams
• Participate in findings review sessions and answer technical questions on Oracle-related findings

Required Qualifications

• 5+ years of experience in Oracle infrastructure, database administration, or cloud security roles
• Hands-on experience with Oracle Cloud Infrastructure (OCI) security services and configuration, including IAM, networking, logging, and encryption
• Experience with Oracle Database security hardening or assessment, including privilege and default account review, encryption, and auditing
• Familiarity with CIS Benchmarks for OCI and/or Oracle Database
• Experience with vulnerability or compliance scanning tools (Tenable, Qualys, Oracle DBSAT, or similar)
• Ability to document technical findings clearly for both technical and non-technical audiences
• Ability to pass a background check and execute NDA and HIPAA Business Associate agreements
• Must be free of any conflict of interest with the system's development, operations, or management vendors