IT Security Database Engineer at Bayview Asset Management

United States

<strong>Overview</strong><br><br><p style="margin: 12.0pt 0in 6.0pt 0in;"><strong>POSITION SUMMARY: </strong></p><p style="margin: 12.0pt 0in 6.0pt 0in;">The Database Security Engineer is responsible for securing and protecting the organization&rsquo;s enterprise databases, database platforms, and related data assets. This role combines database administration expertise with information security best practices to ensure the confidentiality, integrity, and availability of sensitive company and customer data.</p><p style="margin: 12.0pt 0in 6.0pt 0in;">The role is part of the Security Engineering team and will work closely with Infrastructure, Application Development, Information Security, Compliance, and business stakeholders to implement database security controls, monitor database activity, support regulatory compliance initiatives, and reduce organizational risk. The ideal candidate will have a strong background in database administration (DBA) along with hands-on experience in database security, auditing, vulnerability management, and data protection technologies in on premise data center and public cloud environments. The candidate must be familiar with a variety of database technologies, security concepts, practices, and procedures.</p><p style="margin: 12.0pt 0in 6.0pt 0in;"><strong>ESSENTIAL DUTIES AND RESPONSIBILITIES:</strong></p><ul style="margin-top: 0in;"><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Administer and secure enterprise database platforms such as: Microsoft SQL Server, Oracle, PostgreSQL, MySQL, NoSQL and cloud-native database services</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Support public cloud database security for IaaS, PaaS, and SaaS environments including AWS, Azure, and Oracle Cloud platforms</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Implement and manage database security controls including access management, role-based access control (RBAC), encryption, auditing, and privileged account management</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Monitor database environments for suspicious activity, unauthorized access attempts, data exfiltration risks, and security anomalies</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Perform database vulnerability assessments, security reviews, patch management, and remediation activities</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Support Data Loss Prevention (DLP), database activity monitoring (DAM), and security information and event management (SIEM) integrations</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Partner with application teams and DBAs to ensure secure database design, configuration, and deployment practices</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Develop and maintain database security standards, baselines, policies, procedures, and technical documentation</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Assist in incident response investigations related to database security events and data breaches</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Participate in IT Security exercises, audits, penetration testing activities, and third-party assessments</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Support regulatory and compliance requirements including SOX, PCI-DSS, GLBA, SOC, and other applicable frameworks</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Automate database security monitoring, reporting, and operational tasks using scripting and automation tools</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Keep abreast of industry security trends, database technologies, vulnerabilities, and emerging threat profiles</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Perform any additional tasks required to support IT and Security control objectives, business objectives, IT projects, and others</li></ul><p style="margin: 12.0pt 0in 6.0pt 0in;"><strong>SKILLS/KNOWLEDGE/ABILITIES:</strong></p><p style="margin: 12.0pt 0in 6.0pt 0in;"><strong><span style="color: black;">Required Experience:</span></strong></p><ul style="margin-top: 0in;"><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">BA/BS in Computer Science, Computer Engineering, Information Systems, or equivalent experience</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">7+ years of experience in database administration, database engineering, or database security</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Strong hands-on experience administering enterprise database platforms such as SQL Server, Oracle, PostgreSQL, or MySQL</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Experience implementing database security controls including encryption, auditing, access controls, and privileged access management</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Experience with database vulnerability scanning, monitoring, and remediation processes</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Experience in highly regulated environments, preferably Financial Services or similar industries</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Experience supporting cloud database technologies and security best practices in AWS, Oracle and/or Azure</li></ul><p style="margin: 12.0pt 0in 6.0pt 0in;"><strong><span style="color: black;">Knowledge and Skills Required: </span></strong></p><ul style="margin-top: 0in;"><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Strong understanding of database architecture, database administration, backup/recovery, and performance concepts</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Knowledge of methods to secure databases, applications, and sensitive data assets</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">In-depth knowledge of data protection engineering principles, DLP, encryption, masking, and tokenization.</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Strong research and troubleshooting skills</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Strong verbal and written communication skills</li><li style="color: black; margin-top: 12.0pt; margin-bottom: 6.0pt;">Skill with SQL, Python, Bash, or PowerShell scripting</li></ul><p style="margin: 12.0pt 0in 6.0pt 0in;"><strong>CERTIFICATIONS, LICENSES, and/or REGISTRATION:&nbsp; </strong></p><ul><li>Preferred: the following licenses or certificates are preferred: CISSP, CISA, Security+, Microsoft Certified: Azure Database Administrator Associate, Oracle Database Security Certified Implementation Specialist, AWS Certified Security &ndash; Specialty, GIAC certifications, Microsoft SQL certifications, or equivalent database/security certifications</li></ul><p style="margin: 0px;"><strong>LOCATION &amp; COMPENSATION:&nbsp;</strong></p><p style="margin: 0px;">&nbsp;</p><ul style="margin-top: 0in;"><li>This role will be remote based anywhere in the US. &nbsp;</li><li>The base compensation will be based on experience and there will be an opportunity for an incentive based bonus.&nbsp;</li></ul><p style="margin: 12.0pt 0in 6.0pt 0in;"><strong>PHYSICAL DEMANDS and WORK ENVIRONMENT </strong></p><p style="margin: 0px;">The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.&nbsp; Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.</p><p style="margin: 0px;">While performing the duties of this job, the employee is regularly required to sit and use hands to handle, touch or feel objects, tools, or controls.&nbsp; The employee frequently is required to talk and hear.&nbsp; The noise level in the work environment is usually moderate.&nbsp; The employee is occasionally required to stand; walk; reach with hands and arms.&nbsp; The employee is rarely required to stoop, kneel, crouch, or crawl.&nbsp; The employee must regularly lift and/or move up to 10 pounds.&nbsp; Specific vision abilities required by this job include close vision, color vision, and the ability to adjust focus.</p><p style="margin: 12.0pt 0in 6.0pt 0in;"><strong>EEOC </strong></p><p style="margin: 0px;">Bayview Asset Management is an Equal Employment Opportunity employer.&nbsp; All aspects of consideration for employment and employment with the Company are governed on the basis of merit, competence and qualifications without regard to race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, or any other category protected by federal, state, or local law.</p><p style="margin: 0px;">&nbsp;</p><p style="margin: 0px;">&nbsp;</p>