Senior Database Security Engineer

• Act as a senior technical resource for database security requests, working closely with InfoSec and Infrastructure teams to assess and remediate database security findings.
• Perform vulnerability assessments, patching, and security hardening for Oracle 19c/23ai and SQL Server 2019/2022, addressing CVEs and compliance requirements.
• Implement and maintain database encryption technologies, including Oracle TDE, SQL Server TDE, Always Encrypted, and Oracle Key Vault.
• Implement and maintain secure privileged access controls through PAM integration, applying the Principle of Least Privilege across development, test, and production environments.
• Configure and maintain database auditing and security monitoring, ensuring audit logs are integrated with the corporate SIEM and retained according to applicable regulatory and organizational requirements.
• Participate in and execute Oracle CPU and SQL Server CU patching cycles, following tested procedures designed to minimize or eliminate unplanned downtime.
• Investigate and troubleshoot database security incidents, performing technical root-cause analysis and providing clear RCA documentation and remediation recommendations.
• Identify security risks and evaluate their potential impact on database availability, performance, and business operations.
• Work closely with InfoSec, Infrastructure, Application, and DevOps teams to implement security controls while maintaining database performance and availability.
• Automate security checks and operational tasks using PowerShell, Python, and Shell scripting.
• Support authentication and secure connectivity configurations, including Kerberos, SSL/TLS, Active Directory, LDAP/OID, and database authentication mechanisms.
• Translate security and compliance requirements into practical and technically feasible database configurations and remediation plans.
• Provide technical recommendations when security requirements may introduce performance, availability, or operational risks, supported by testing and technical evidence.
• Maintain clear technical documentation, including security assessment results, remediation plans, change procedures, and post-incident reports.

Requirements

• 5+ years of hands-on production DBA experience, with strong practical experience in both Oracle and SQL Server environments.
• Strong Oracle experience with RAC, ASM, Data Guard, RMAN, TDE, auditing, and database security.
• Strong SQL Server experience with Always On Availability Groups, Failover Clustering, backups/recovery, SQL Audit, and database security.
• Strong T-SQL skills, with the ability to develop scripts for security controls, auditing, compliance checks, and remediation.
• Good scripting and automation skills using PowerShell, Python, and Shell scripting.
• Good understanding of Kerberos, SSL/TLS, Active Directory, LDAP/OID, and database authentication mechanisms.
• Practical experience with database vulnerability remediation, security hardening, patch management, and compliance requirements.
• Experience working with PAM and SIEM solutions and integrating database security and auditing controls with enterprise security platforms.
• Ability to assess security recommendations from InfoSec and determine their technical feasibility, performance impact, availability risks, and implementation requirements.
• Ability to challenge or reject technically unsafe security changes when necessary, providing data-driven technical justification and safer alternatives.
• Strong troubleshooting and analytical skills, with the ability to work on complex database security and availability issues.
• Excellent written and verbal communication skills, with the ability to explain technical security issues and remediation plans to both technical and non-technical stakeholders.

Benefits

• Embark on an exciting journey with the Fin-Tech Experts.
• Join a workplace that actively encourages and supports all talents.
• A support system where you have a safe place to voice your opinion, share feedback, and be your true authentic self.
• Join us in our mission to accelerate financial inclusion and make financial freedom accessible to all.