Position Title - Data Security Engineer (DAM)
Minimum Work Experience: -
5+ years of security engineering or database/security operations experience, including at least 3 years with DAM, database audit or database security technologies.
Education
- Bachelor's degree in computer science, Cybersecurity, Information Technology, Information Systems, Engineering or equivalent.
- Postgraduate qualification in information/cyber security is an advantage.
Skills / Certifications
- Imperva DAM/SecureSphere or equivalent platform certification/training
- Microsoft/Azure database or security certification
- CISSP, Security+ or equivalent (preferred)
- Database administration training for SQL Server, Oracle or PostgreSQL (advantage)
Preferred Skill Set
- Imperva DAM or equivalent monitoring platform
- SQL Server, Oracle, PostgreSQL and cloud database fundamentals
- Database activity policies, privileged monitoring and anomaly detection
- SIEM/SOAR, PAM and ITSM integrations
- Log integrity, retention, troubleshooting and evidence handling
Engineer and operate Database Activity Monitoring controls for the client, providing comprehensive visibility and alerting for privileged and sensitive database activity across on-premises and cloud databases. The role maintains monitoring coverage, policies, integrations, evidence integrity and incident response support while protecting regulated healthcare data.
Primary Responsibilities: -
- Deploy, administer and monitor DAM agents and/or agentless collectors across in-scope on-premises and cloud database instances.
- Maintain accurate database inventory and coverage mapping; identify unmonitored, partially monitored or unsupported instances.
- Configure monitoring policies for logins, DDL/DML/DCL, schema changes, privilege changes, stored procedures and sensitive data access.
- Maintain privileged database user and service account monitoring with full session-level visibility.
- Tune query anomaly detection baselines, thresholds and behavioral analytics to reduce false positives and improve detection.
- Configure real-time alerts for unauthorized access, privilege escalation, after-hours activity, bulk extraction and policy violations.
- Protect audit trail integrity through tamper resistance, cryptographic verification, separation of duties and controlled administration.
- Maintain retention, archival and access controls for DAM logs in accordance with applicable requirements.
- Integrate DAM alerts with SIEM/SOAR and ITSM; validate routing, severity mapping, enrichment and playbook triggers.
- Integrate with PAM where applicable to correlate database privileged sessions and controlled account usage.
- Monitor platform health, collector/agent status, throughput, latency, dropped events and storage capacity.
- Investigate DAM alerts, preserve evidence, support incident response and track remediation to closure.
- Produce coverage, privileged-user, alert quality, service health and maturity reports.
- Perform configuration assessments and maintain runbooks, change records and disaster recovery procedures.
Secondary Responsibilities: -
- Support database discovery, data classification, DSPM and encryption initiatives.
- Coordinate with DBA, Cloud, SOC, PAM and application teams on monitoring requirements and remediation.
- Support platform upgrades, proof-of-concepts and onboarding of new database technologies.
- Provide technical workshops and knowledge transfer to operational teams.
