Position Title - Data Security Engineer (DAM)

Minimum Work Experience: -

5+ years of security engineering or database/security operations experience, including at least 3 years with DAM, database audit or database security technologies.

Education

Bachelor's degree in computer science, Cybersecurity, Information Technology, Information Systems, Engineering or equivalent.
Postgraduate qualification in information/cyber security is an advantage.

Skills / Certifications

Imperva DAM/SecureSphere or equivalent platform certification/training
Microsoft/Azure database or security certification
CISSP, Security+ or equivalent (preferred)
Database administration training for SQL Server, Oracle or PostgreSQL (advantage)

Preferred Skill Set

Imperva DAM or equivalent monitoring platform
SQL Server, Oracle, PostgreSQL and cloud database fundamentals
Database activity policies, privileged monitoring and anomaly detection
SIEM/SOAR, PAM and ITSM integrations
Log integrity, retention, troubleshooting and evidence handling

Engineer and operate Database Activity Monitoring controls for the client, providing comprehensive visibility and alerting for privileged and sensitive database activity across on-premises and cloud databases. The role maintains monitoring coverage, policies, integrations, evidence integrity and incident response support while protecting regulated healthcare data.

Primary Responsibilities: -

Deploy, administer and monitor DAM agents and/or agentless collectors across in-scope on-premises and cloud database instances.
Maintain accurate database inventory and coverage mapping; identify unmonitored, partially monitored or unsupported instances.
Configure monitoring policies for logins, DDL/DML/DCL, schema changes, privilege changes, stored procedures and sensitive data access.
Maintain privileged database user and service account monitoring with full session-level visibility.
Tune query anomaly detection baselines, thresholds and behavioral analytics to reduce false positives and improve detection.
Configure real-time alerts for unauthorized access, privilege escalation, after-hours activity, bulk extraction and policy violations.
Protect audit trail integrity through tamper resistance, cryptographic verification, separation of duties and controlled administration.
Maintain retention, archival and access controls for DAM logs in accordance with applicable requirements.
Integrate DAM alerts with SIEM/SOAR and ITSM; validate routing, severity mapping, enrichment and playbook triggers.
Integrate with PAM where applicable to correlate database privileged sessions and controlled account usage.
Monitor platform health, collector/agent status, throughput, latency, dropped events and storage capacity.
Investigate DAM alerts, preserve evidence, support incident response and track remediation to closure.
Produce coverage, privileged-user, alert quality, service health and maturity reports.
Perform configuration assessments and maintain runbooks, change records and disaster recovery procedures.

Secondary Responsibilities: -

Support database discovery, data classification, DSPM and encryption initiatives.
Coordinate with DBA, Cloud, SOC, PAM and application teams on monitoring requirements and remediation.
Support platform upgrades, proof-of-concepts and onboarding of new database technologies.
Provide technical workshops and knowledge transfer to operational teams.