Requirements
Requires 5+ years of security engineering or database/security operations experience, with at least 3 years in DAM, database audit, or database security technologies. A Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Information Systems, or Engineering is mandatory. Postgraduate qualification in information/cyber security is an advantage. Experience with Imperva DAM/SecureSphere or equivalent, Microsoft/Azure database/security certification, and CISSP or Security+ are required or preferred.
Description
Position Title - Data Security Engineer (DAM)Minimum Work Experience: -5+ years of security engineering or database/security operations experience, including at least 3 years with DAM, database audit or database security technologies.EducationBachelor's degree in computer science, Cybersecurity, Information Technology, Information Systems, Engineering or equivalent.Postgraduate qualification in information/cyber security is an advantage.Skills / CertificationsImperva DAM/SecureSphere or equivalent platform certification/trainingMicrosoft/Azure database or security certificationCISSP, Security+ or equivalent (preferred)Database administration training for SQL Server, Oracle or PostgreSQL (advantage)Preferred Skill SetImperva DAM or equivalent monitoring platformSQL Server, Oracle, PostgreSQL and cloud database fundamentalsDatabase activity policies, privileged monitoring and anomaly detectionSIEM/SOAR, PAM and ITSM integrationsLog integrity, retention, troubleshooting and evidence handlingEngineer and operate Database Activity Monitoring controls for the client, providing comprehensive visibility and alerting for privileged and sensitive database activity across on-premises and cloud databases. The role maintains monitoring coverage, policies, integrations, evidence integrity and incident response support while protecting regulated healthcare data.Primary Responsibilities: -Deploy, administer and monitor DAM agents and/or agentless collectors across in-scope on-premises and cloud database instances.Maintain accurate database inventory and coverage mapping; identify unmonitored, partially monitored or unsupported instances.Configure monitoring policies for logins, DDL/DML/DCL, schema changes, privilege changes, stored procedures and sensitive data access.Maintain privileged database user and service account monitoring with full session-level visibility.Tune query anomaly detection baselines, thresholds and behavioral analytics to reduce false positives and improve detection.Configure real-time alerts for unauthorized access, privilege escalation, after-hours activity, bulk extraction and policy violations.Protect audit trail integrity through tamper resistance, cryptographic verification, separation of duties and controlled administration.Maintain retention, archival and access controls for DAM logs in accordance with applicable requirements.Integrate DAM alerts with SIEM/SOAR and ITSM; validate routing, severity mapping, enrichment and playbook triggers.Integrate with PAM where applicable to correlate database privileged sessions and controlled account usage.Monitor platform health, collector/agent status, throughput, latency, dropped events and storage capacity.Investigate DAM alerts, preserve evidence, support incident response and track remediation to closure.Produce coverage, privileged-user, alert quality, service health and maturity reports.Perform configuration assessments and maintain runbooks, change records and disaster recovery procedures.Secondary Responsibilities: -Support database discovery, data classification, DSPM and encryption initiatives.Coordinate with DBA, Cloud, SOC, PAM and application teams on monitoring requirements and remediation.Support platform upgrades, proof-of-concepts and onboarding of new database technologies.Provide technical workshops and knowledge transfer to operational teams.