Lead, Database Infrastructure Security Engineer

Description

The global technology team at the company builds capabilities that bring speed, scale and efficiency to the organization, and digital change is part of how the team works.

This lead role sits in the security services data protection group and focuses on strengthening database security across products, systems and applications.

You will work with product owners, tech leads, designers, engineers and delivery staff, and bring agile habits, business insight, inclusive leadership and a habit of continuous learning.

Responsibilities

• Build, code and support solutions that automate creating, managing and removing infrastructure and its security components.
• Offer easy-to-use services that help software development teams adopt database infrastructure monitoring, and work with them to put these in place.
• Keep product security intact across the full product lifecycle by adding new security features and updates to existing products.
• Work with product owners to understand needs and write feature stories, with tech leads on technical design, and with the wider team to understand the system end to end and deliver sound solutions with business impact.
• Automate unit and integration tests, solve problems and add value through automation.
• Set corporate platform standards based on cost, capability and capacity, and document solutions so others can adopt them.
• Keep up with relevant and emerging technologies, advise and coach colleagues, and build learning and innovation into daily work.
• Handle complex problems where analysis depends on weighing intangible factors.
• Apply infrastructure fundamentals across AWS, Azure, Windows, Linux and Unix databases, networks, TCP/IP and common communication protocols.
• Write scripts and automation in Python, Shell/PowerShell, SQL and other modern languages, and use Ansible, CloudFormation and Terraform.
• Support database activity monitoring, SOX compliance, threat analytics, and SNOW and Splunk integration.
• Manage database configuration compliance, vulnerability management, CIS benchmarking and SNOW integration.
• Support privileged access and entitlement reporting.
• Carry out infrastructure health checks, patching, maintenance, disaster recovery and business continuity work.

Requirements

• A bachelor's degree in computer science or engineering, or equivalent experience in a related field.
• Ability to mentor others with little guidance and to draw on varied ideas, experiences and perspectives for the organization's benefit.
• Experience with agile development and test-driven development (TDD).
• Understanding of the business concepts, tools and processes needed to make sound decisions in the company's context.
• Ability to keep learning new skills and knowledge through self-initiative and taking on challenges.
• Strong problem solving, communication and collaboration skills.
• Advanced experience or expertise in several of the following areas:
• Applied security experience.
• Experience with distributed systems across operating systems and databases, in cloud and on-premises settings.
• Applied experience with IBM Guardium or Imperva DAM and vulnerability assessment (VA). Certification is a plus.
• Knowledge of many DBMS platforms (MSSQL, Oracle, DB2, PostgreSQL, Redshift, Couchbase, MongoDB, Hadoop) and cloud databases (Aurora PostgreSQL, Amazon DynamoDB, DocumentDB, Redshift, RDS, Azure SQL, Cosmos DB, Snowflake, Capella and similar).
• Familiarity with hybrid cloud environments.
• Understanding of hardware, virtual machines, networking and protocols.
• Basic knowledge of risk management, auditing and compliance.
• Programming in Python, Shell/PowerShell, SQL and modern languages.
• Frameworks: Ansible, CloudFormation, Terraform.
• Infrastructure fundamentals, including Linux and UNIX file permissions, network configuration, services and process management, and supporting vendor security tools.
• Database fundamentals: schemas, tables, permissions, SQL and security.
• Networking and TCP/IP: OSI model, three-way handshake, stateful versus stateless, proxy firewalls.
• Containers: Docker, Kubernetes.
• Consuming and building APIs.
• Testing and quality methods (functional and non-functional) and related tooling, including test automation.
• Infrastructure and cloud security best practices, including DevSecOps.
• DevOps tools and practices, including continuous integration and continuous delivery.
• SDLC fundamentals, design basics and coding standards.
• Knowledge of at least one of AWS, Azure or GCP.
• Consuming cloud services.
• Disaster recovery and high availability.
• Preferred: IBM Guardium or Imperva DAM and vulnerability assessment (VA).

Conditions

Salary range is $133,600.00 to $220,400.00. Final pay may vary within this range based on location, candidate experience and skills, as required by state law for residents in applicable locations.

Discretionary annual incentive eligibility, governed by program rules; awards depend on individual and organizational performance.

Equal opportunity applies; the company welcomes applicants from all backgrounds.

The company may use identity verification technologies in hiring, with your consent obtained first.

The company, Inc. of the United States is not affiliated with Prudential plc, based in the United Kingdom.

Benefits

• Competitive base salary and yearly bonus potential at every level.
• Medical, dental, vision, life and disability insurance, paid time off and leave, including parental and military leave.
• 401(k) with company match up to 4%.
• Company-funded pension plan.
• Wellness reimbursement of up to $1,600 a year for personal wellbeing items.
• Work and life support on parenting, housing, senior care, finances, pets, legal matters, education, mental health and career development.
• Education benefit to help fund traditional college enrollment toward an approved degree and many accredited certificates.
• Employee stock purchase plan: shares bought at 85% of the lower of the two prices at the start or end of the purchase period.
• Some benefits may not apply to part-time staff scheduled under 20 hours per week.