Oracle's Global Physical Security (GPS) Operations Team secures the corporation's data center and facility footprint through physical access, video monitoring, alarm management, incident response, and coordinated operational controls. The Physical Security Operations Analyst is the on-site IC4 owner for the Shackelford, TX local SOC operating model.
This role is not a people-manager position. It leads the SOC function: establishing reliable procedures, ensuring local operators and contracted personnel can execute them, coordinating with the Global Security Operations Center (GSOC) and site partners, and resolving the systems, process, documentation, training, and escalation gaps that affect monitoring and response.
The role operates with substantial independence and is accountable for operational readiness, consistent incident handling, clear handoffs, and measurable improvement across the local SOC environment.
This is an on-site role at our Saline, MI location.
Internal Responsibilities
Own the local SOC operating model for Shackelford, including alarm monitoring, camera verification, dispatch coordination, incident logging, shift handoffs, and escalation paths.
Translate GSOC SOPs, Alarm Master Matrix requirements, site post orders, and local operating needs into usable runbooks, job aids, and response workflows.
Standardize the investigation, documentation, and escalation of alarms and incidents so actions are timely, consistent, and traceable across shifts.
Maintain local readiness for Lenel access-control alarms, Milestone video monitoring and retrieval, communication tools, and documented degraded-mode procedures when systems or connectivity are impaired.
Coordinate with GSOC, Security Systems, Data Center Operations, construction, guard force leadership, IT/network teams, and vendors to diagnose monitoring gaps, restore service, and close recurring break/fix issues.
Support construction-to-operations transitions by validating monitoring coverage, alarm visibility, camera readiness, access-control changes, commissioning activity, and operational handoffs before sites or systems enter service.
Develop and maintain practical training plans, access readiness, and competency checks for SOC operators and contracted staff; provide functional guidance without assuming direct personnel-management authority.
Analyze alarm, incident, outage, response-time, and quality data; establish meaningful performance measures and recommend corrective actions, preventive controls, and process improvements.
Maintain audit-ready SOC documentation, including shift logs, incident records, escalation guides, operating procedures, training materials, outage playbooks, and after-action follow-up.
Serve as the local functional escalation point for SOC process and systems issues, escalating material risk, critical incidents, and unresolved service failures through the defined GPS and GSOC paths.
Support GPS Investigations by preserving, locating, and documenting relevant video, alarm, and access-control information for review of suspicious activity or incidents.
Scope, Judgment, and Collaboration
Works independently on significant operational issues where sound judgment is required to assess risk, define an appropriate response, and coordinate action across multiple teams.
May direct day-to-day functional work, training, and adherence to approved procedures for contracted SOC operators and technicians; does not have direct reports or responsibility for personnel actions.
Builds effective working relationships with GSOC, Security Systems, Data Center Operations, investigations, construction, IT/network teams, vendors, and guard-force partners.
- Escalates decisions outside the role's authority, including staffing, contractual matters, enterprise standards, and high-consequence incidents, to the appropriate GPS leader or GSOC partner.
Qualifications
Seven or more years of relevant experience in physical security operations, a security operations center, local alarm center, control room, or enterprise physical-security technology environment.
Hands-on experience with access-control, video-management, alarm-monitoring, and incident-management workflows; Lenel and Milestone experience strongly preferred.
Demonstrated ability to create, improve, and use operational runbooks, alarm response procedures, escalation guides, shift-handoff standards, and training materials.
Experience diagnosing or coordinating resolution of monitoring, camera, access-control, network, or system-integration issues in a live operational environment.
Strong incident documentation, analytical, communication, vendor-coordination, and cross-functional project skills.
Ability to work on-site in Shackelford, Texas and support a 24/7 operational environment, including response to significant incidents or system outages when required.
Preferred Qualifications
Experience supporting data center physical security operations, construction-to-operations transitions, or high-availability environments.
Experience with PSIM platforms, alarm/event automation, ticketing integration, analytics, or reporting/KPI development.
Familiarity with incident documentation and control expectations in regulated or audit-sensitive environments, including SOC 2, PCI DSS, ISO 27001, or equivalent.
Bachelor's degree in security, criminal justice, engineering, information systems, or a related discipline; equivalent experience will be considered.
Success Measures
Consistent alarm verification, dispatch, documentation, and escalation across shifts.
Current, usable runbooks, training records, shift-handoff standards, and degraded-mode procedures.
Improved visibility into system outages, camera/access-control issues, response performance, and recurring operational risks.
Reliable coordination and clear local-to-GSOC handoffs during incidents, outages, and operational transitions.
#LI-CG2
External Responsibilities
Own the local SOC operating model for Shackelford, including alarm monitoring, camera verification, dispatch coordination, incident logging, shift handoffs, and escalation paths.
Translate GSOC SOPs, Alarm Master Matrix requirements, site post orders, and local operating needs into usable runbooks, job aids, and response workflows.
Standardize the investigation, documentation, and escalation of alarms and incidents so actions are timely, consistent, and traceable across shifts.
Maintain local readiness for Lenel access-control alarms, Milestone video monitoring and retrieval, communication tools, and documented degraded-mode procedures when systems or connectivity are impaired.
Coordinate with GSOC, Security Systems, Data Center Operations, construction, guard force leadership, IT/network teams, and vendors to diagnose monitoring gaps, restore service, and close recurring break/fix issues.
Support construction-to-operations transitions by validating monitoring coverage, alarm visibility, camera readiness, access-control changes, commissioning activity, and operational handoffs before sites or systems enter service.
Develop and maintain practical training plans, access readiness, and competency checks for SOC operators and contracted staff; provide functional guidance without assuming direct personnel-management authority.
Analyze alarm, incident, outage, response-time, and quality data; establish meaningful performance measures and recommend corrective actions, preventive controls, and process improvements.
Maintain audit-ready SOC documentation, including shift logs, incident records, escalation guides, operating procedures, training materials, outage playbooks, and after-action follow-up.
Serve as the local functional escalation point for SOC process and systems issues, escalating material risk, critical incidents, and unresolved service failures through the defined GPS and GSOC paths.
Support GPS Investigations by preserving, locating, and documenting relevant video, alarm, and access-control information for review of suspicious activity or incidents.
Scope, Judgment, and Collaboration
Works independently on significant operational issues where sound judgment is required to assess risk, define an appropriate response, and coordinate action across multiple teams.
May direct day-to-day functional work, training, and adherence to approved procedures for contracted SOC operators and technicians; does not have direct reports or responsibility for personnel actions.
Builds effective working relationships with GSOC, Security Systems, Data Center Operations, investigations, construction, IT/network teams, vendors, and guard-force partners.
- Escalates decisions outside the role's authority, including staffing, contractual matters, enterprise standards, and high-consequence incidents, to the appropriate GPS leader or GSOC partner.
Qualifications
Seven or more years of relevant experience in physical security operations, a security operations center, local alarm center, control room, or enterprise physical-security technology environment.
Hands-on experience with access-control, video-management, alarm-monitoring, and incident-management workflows; Lenel and Milestone experience strongly preferred.
Demonstrated ability to create, improve, and use operational runbooks, alarm response procedures, escalation guides, shift-handoff standards, and training materials.
Experience diagnosing or coordinating resolution of monitoring, camera, access-control, network, or system-integration issues in a live operational environment.
Strong incident documentation, analytical, communication, vendor-coordination, and cross-functional project skills.
Ability to work on-site in Shackelford, Texas and support a 24/7 operational environment, including response to significant incidents or system outages when required.
Preferred Qualifications
Experience supporting data center physical security operations, construction-to-operations transitions, or high-availability environments.
Experience with PSIM platforms, alarm/event automation, ticketing integration, analytics, or reporting/KPI development.
Familiarity with incident documentation and control expectations in regulated or audit-sensitive environments, including SOC 2, PCI DSS, ISO 27001, or equivalent.
Bachelor's degree in security, criminal justice, engineering, information systems, or a related discipline; equivalent experience will be considered.
Success Measures
Consistent alarm verification, dispatch, documentation, and escalation across shifts.
Current, usable runbooks, training records, shift-handoff standards, and degraded-mode procedures.
Improved visibility into system outages, camera/access-control issues, response performance, and recurring operational risks.
Reliable coordination and clear local-to-GSOC handoffs during incidents, outages, and operational transitions.
#LI-CG2
