DB Security Specialist (DBA / Database Engineer SME)

DB Security Specialist (DBA / Database Engineer SME)

Cyber Security | Enterprise Data Protection
Experience: 8 14 Years
Location: Charlotte, NC/ Chandler, AZ/ Irving, TX/ Iselin, NJ

Role Overview

We are looking for an experienced DB Security Specialist / Database Engineer SME to support enterprise cyber security and database security initiatives across critical platforms. The role requires strong expertise in securing, administering, monitoring, and optimizing enterprise databases while ensuring compliance with organizational security standards and regulatory requirements.

The ideal candidate should possess strong hands-on experience in database administration, access control, vulnerability management, encryption, performance optimization, and security governance across large-scale enterprise environments.

Key Responsibilities

• Manage and secure enterprise database environments across production and non-production systems
• Implement database security controls, hardening standards, and access governance policies
• Monitor database environments for security vulnerabilities, threats, and unauthorized access
• Perform database patching, upgrades, vulnerability remediation, and compliance activities
• Configure and manage encryption, masking, auditing, and privileged access controls
• Support incident response activities related to database security events
• Collaborate with Cyber Security, Infrastructure, IAM, and Application teams on remediation initiatives
• Perform performance tuning, backup/recovery, disaster recovery, and high-availability activities
• Ensure compliance with enterprise security standards, SOX, PCI-DSS, GDPR, and internal audit controls
• Create technical documentation, SOPs, security standards, and operational runbooks

Mandatory Skills

Database Technologies

• Strong hands-on experience with:
• Oracle DBA
• MS SQL Server
• PostgreSQL
• MySQL / MariaDB
• MongoDB (preferred)
• Experience managing enterprise-scale database environments

Database Security

• Database hardening and security best practices
• Database activity monitoring (DAM)
• TDE (Transparent Data Encryption)
• Data masking/tokenization
• Role-based access control (RBAC)
• Privileged access management
• Audit logging and compliance monitoring
• Vulnerability assessment and remediation

Cyber Security & Compliance

• Knowledge of:
• CIS benchmarks
• NIST
• SOX
• PCI-DSS
• GDPR
• Cyber security governance frameworks
• Experience handling security incidents and audit findings

Cloud & Infrastructure

• Experience with cloud database platforms:
• AWS RDS
• Azure SQL
• Google Cloud Platform Cloud SQL
• Understanding of Linux/Unix administration
• Backup, recovery, HA/DR architecture knowledge

Automation & Scripting

• Shell scripting / Bash
• Python / PowerShell
• Automation of DBA operational tasks

Preferred Skills

• Experience with:
• IBM Guardium
• Imperva DAM
• CyberArk
• HashiCorp Vault
• SIEM integrations (Splunk/QRadar)
• Exposure to DevSecOps and Infrastructure as Code
• Kubernetes / containerized database security exposure
• Banking / Financial Services domain experience
• Security certifications preferred:
• CISSP
• CEH
• Security+
• Oracle Certified Professional (OCP)

Ideal Candidate Profile

• Strong mix of Database Administration + Cyber Security expertise
• Hands-on production support experience in enterprise environments
• Ability to work across Infrastructure, Security, Audit, and Engineering teams
• Strong troubleshooting and incident management capability
• Excellent communication and stakeholder management skills