IT Security Engineer (Database)

Bayview Asset Management is seeking an IT Security Engineer (Database) to secure and protect their enterprise databases and related data assets. This role requires a combination of database administration expertise and information security best practices to ensure data confidentiality, integrity, and availability.

Responsibilities:

• Design, implement and maintain database security controls across SQL Server, Oracle, PostgreSQL, MySQL, NoSQL and cloud-native database services
• Conduct database security architecture reviews and recommend secure configurations before production deployment
• Operate and fine tune Database Activity Monitoring solutions such as IBM Guardium, Imerva Data Security Fabric/SecureSphere, Oracle Audit Valut, or equivalent platforms
• Support public cloud database security for IaaS, PaaS, and SaaS environments including AWS, Azure, and Oracle Cloud platforms
• Implement and maintain controls for RBAC, least privilege, privileged access management, encryption, auditing, data masking, tokenization, and DLP
• Monitor database environments for suspicious activity, unauthorized access attempts, data exfiltration risks, and security anomalies
• Perform database vulnerability assessments, security reviews, patch management, and remediation activities
• Support Data Loss Prevention (DLP), database activity monitoring (DAM), and security information and event management (SIEM) integrations
• Partner with application teams and DBAs to ensure secure database design, configuration, and deployment practices
• Develop and maintain database security standards, baselines, policies, procedures, and technical documentation
• Assist in incident response investigations related to database security events and data breaches
• Participate in IT Security exercises, audits, penetration testing activities, and third-party assessments
• Support regulatory and compliance requirements including SOX, PCI-DSS, GLBA, SOC, and other applicable frameworks
• Automate database security monitoring, reporting, and operational tasks using scripting and automation tools
• Keep abreast of industry security trends, database technologies, vulnerabilities, and emerging threat profiles
• Perform any additional tasks required to support IT and Security control objectives, business objectives, IT projects, and others

Requirements:

• BA/BS in Computer Science, Computer Engineering, Information Systems, or equivalent experience
• 7+ years of experience in database administration, database engineering, or database security
• Strong hands-on experience administering enterprise database platforms such as SQL Server, Oracle, PostgreSQL, or MySQL
• Experience implementing database security controls including encryption, auditing, access controls, and privileged access management
• Experience with database vulnerability scanning, monitoring, and remediation processes
• Experience in highly regulated environments, preferably Financial Services or similar industries
• Experience supporting cloud database technologies and security best practices in AWS, Oracle and/or Azure
• Strong understanding of database architecture, database administration, backup/recovery, and performance concepts
• Knowledge of methods to secure databases, applications, and sensitive data assets
• In-depth knowledge of data protection engineering principles, DLP, encryption, masking, and tokenization
• Strong research and troubleshooting skills
• Strong verbal and written communication skills
• Skill with SQL, Python, Bash, or PowerShell scripting
• CISSP
• CISA
• Security+
• Microsoft Certified: Azure Database Administrator Associate
• Oracle Database Security Certified Implementation Specialist
• AWS Certified Security – Specialty
• GIAC certifications
• Microsoft SQL certifications
• equivalent database/security certifications