Lead, Database Infrastructure Security Engineer

Prudential Financial is hiring a Lead, Database Infrastructure Security Engineer to improve database security posture. The role designs, develops, and supports security features and automated infrastructure solutions, while partnering with product and engineering teams to deliver secure, reliable database services.

Responsibilities:

• Create, code and support solutions to automate the creation, management, or destruction of infrastructure and related security components
• Provide easily consumable services to software development teams to assist in the consumption of database infrastructure monitoring solutions and partner to implement them
• Ensures product security is maintained throughout the product lifecycle, integrating new security features and updates into existing products
• Collaborate with product owners in understanding needs and defining feature stories, tech leads in defining technical design and other team members to understand the system end-to-end and deliver robust solutions that bring about business impact and support the goals
• Automate unit and integration test cases, solve problems, and add new value with automation
• Develop corporate platform standards based on cost, capability, and capacity requirements to drive business value; document solutions to support the adoption of developed solutions
• Bring a strong understanding of relevant and emerging technologies, provide input and coach team members and embed learning and innovation in the day-to-day
• Work on complex problems in which analysis of situations or data requires an evaluation of intangible variables
• Apply infrastructure fundamentals to AWS/Azure/Windows/Linux/Unix databases, network and TCP/IP, and common communication protocols
• Use programming languages including but not limited to Python, Shell/Power scripting, SQL, Modern languages and Ansible, CloudFormation and Terraform frameworks
• Support for Database activity monitoring, SOX compliance, threat analytics, SNOW and Splunk integration
• Managing Database configuration compliance, vulnerability management, CIS benchmarking, SNOW integration
• Support for Privileged access and entitlement reporting
• Infrastructure health checks, patching, maintenance, disaster recovery, and business continuity

Requirements:

• Bachelor of Computer Science or Engineering or experience in related fields
• Ability to mentor others with minimal guidance and effectively leverage diverse ideas, experiences, thoughts and perspectives to the benefit of the organization
• Experience with agile development methodologies and Test-Driven Development (TDD)
• Knowledge of business concepts, tools and processes that are needed for making sound decisions in the context of the company's business
• Ability to learn new skills and knowledge on an on-going basis through self-initiative and tackling challenges
• Excellent problem solving, communication and collaboration skills
• Experience working with distributed systems across different operating systems and databases, both cloud and on-premises
• Knowledge of various DBMS (MSSQL, Oracle, DB2, PostgreSQL, Redshift, Couchbase, MongoDB, Hadoop) and Cloud DB (Aurora PostgreSQL, Amazon DynamoDB, Document DB, Redshift, RDS, Azure SQL, Cosmos DB, snowflake Capella etc.)
• Familiarity with hybrid cloud environments
• Understanding of hardware, virtual machines, networking, and protocols
• Basic risk management, auditing, and compliance knowledge
• Programming Languages: Python, Shell/Power scripting, SQL, Modern languages
• Frameworks: Ansible, CloudFormation, Terraform
• Infrastructure fundamentals
• Linux / UNIX Operating Systems: File Permissions, Network Configuration, Services, Process Manipulation; supporting vendor security solutions
• Database Fundamentals: Schemas, Tables, Permissions, SQL, Security
• Networking, TCP/IP and other common Communication Protocols: OSI Model, 3 Way Handshake, Stateful vs Stateless, Proxy Firewall
• Containers: Docker, Kubernetes
• Application Programming Interfaces (API): Consumption & Development
• Test/Quality capabilities & methodologies (functional & nonfunctional) and associated tooling including quality automation
• Infrastructure & Cloud Security best practices including DevSecOps
• Dev Ops Tools & Practices: awareness, understanding of DevOps automation tools, practices & capabilities (continuous integration & continuous delivery)
• Software Development Life Cycle (SDLC): Development and Design Fundamentals including SDLC and coding standards
• Cloud Computing: Understanding and knowledge (of 1 or more): AWS, Azure or GCP
• Cloud service consumption
• Disaster Recovery and High Availability
• Applied experience with IBM Guardium / Imperva DAM and Vulnerability Assessment (VA)
• IBM Guardium / Imperva DAM and Vulnerability Assessment (VA)