IT Security Database Engineer

Bayview Asset Management•Coral Gables, FL

12d•Remote

About The Position

The Database Security Engineer is responsible for securing and protecting the organization’s enterprise databases, database platforms, and related data assets. This role combines database administration expertise with information security best practices to ensure the confidentiality, integrity, and availability of sensitive company and customer data. The role is part of the Security Engineering team and will work closely with Infrastructure, Application Development, Information Security, Compliance, and business stakeholders to implement database security controls, monitor database activity, support regulatory compliance initiatives, and reduce organizational risk. The ideal candidate will have a strong background in database administration (DBA) along with hands-on experience in database security, auditing, vulnerability management, and data protection technologies in on premise data center and public cloud environments. The candidate must be familiar with a variety of database technologies, security concepts, practices, and procedures.

Requirements

BA/BS in Computer Science, Computer Engineering, Information Systems, or equivalent experience
7+ years of experience in database administration, database engineering, or database security
Strong hands-on experience administering enterprise database platforms such as SQL Server, Oracle, PostgreSQL, or MySQL
Experience implementing database security controls including encryption, auditing, access controls, and privileged access management
Experience with database vulnerability scanning, monitoring, and remediation processes
Experience in highly regulated environments, preferably Financial Services or similar industries
Experience supporting cloud database technologies and security best practices in AWS, Oracle and/or Azure
Strong understanding of database architecture, database administration, backup/recovery, and performance concepts
Knowledge of methods to secure databases, applications, and sensitive data assets
In-depth knowledge of data protection engineering principles, DLP, encryption, masking, and tokenization.
Strong research and troubleshooting skills
Strong verbal and written communication skills
Skill with SQL, Python, Bash, or PowerShell scripting

Nice To Haves

CISSP, CISA, Security+, Microsoft Certified: Azure Database Administrator Associate, Oracle Database Security Certified Implementation Specialist, AWS Certified Security – Specialty, GIAC certifications, Microsoft SQL certifications, or equivalent database/security certifications

Responsibilities

Administer and secure enterprise database platforms such as: Microsoft SQL Server, Oracle, PostgreSQL, MySQL, NoSQL and cloud-native database services
Support public cloud database security for IaaS, PaaS, and SaaS environments including AWS, Azure, and Oracle Cloud platforms
Implement and manage database security controls including access management, role-based access control (RBAC), encryption, auditing, and privileged account management
Monitor database environments for suspicious activity, unauthorized access attempts, data exfiltration risks, and security anomalies
Perform database vulnerability assessments, security reviews, patch management, and remediation activities
Support Data Loss Prevention (DLP), database activity monitoring (DAM), and security information and event management (SIEM) integrations
Partner with application teams and DBAs to ensure secure database design, configuration, and deployment practices
Develop and maintain database security standards, baselines, policies, procedures, and technical documentation
Assist in incident response investigations related to database security events and data breaches
Participate in IT Security exercises, audits, penetration testing activities, and third-party assessments
Support regulatory and compliance requirements including SOX, PCI-DSS, GLBA, SOC, and other applicable frameworks
Automate database security monitoring, reporting, and operational tasks using scripting and automation tools
Keep abreast of industry security trends, database technologies, vulnerabilities, and emerging threat profiles
Perform any additional tasks required to support IT and Security control objectives, business objectives, IT projects, and others