Database Security And Hardening Specialist (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Database Security and Hardening Specialist (Cybersecurity): Supporting database security and hardening activities across on-premises and cloud-hosted environments with an accent on secure configuration, audit readiness, and compliance. Focus on identifying security gaps, remediating vulnerabilities, and implementing encryption and access controls across relational and NoSQL platforms.
Location: D.C., MD, VA, or Arlington, VA. Must have Public Trust clearance or the ability to obtain DHS suitability.
Company
A veteran-owned small business providing top-tier technology and security services to government customers, recognized as a fast-growing company on the Inc. 5000 list.
What you will do
- Assess database configurations against hardening standards including DISA STIGs and CIS Benchmarks.
- Identify security gaps, misconfigurations, excessive privileges, and encryption deficiencies across relational, NoSQL, and cloud-native platforms.
- Coordinate vulnerability remediation with DBAs, system owners, and cloud teams.
- Implement and validate database audit logging, data masking, and access controls.
- Develop and improve database hardening scripts and automation processes using SQL, Python, or Bash.
- Utilize scanning tools (Tenable/Nessus) and SIEM tools (Splunk) to verify compliance and report security posture.
Requirements
- Public Trust clearance or ability to obtain DHS suitability/access.
- Bachelor’s degree in IT, Computer Science, or equivalent experience.
- 5+ years of experience in database administration, security, or database engineering.
- Proficiency with relational databases such as Oracle, PostgreSQL, MySQL, or SQL Server.
- Experience with vulnerability scanning tools (Tenable/Nessus) and ticketing systems (ServiceNow).
- Familiarity with DevSecOps and CI/CD pipeline processes related to database security.
Nice to have
- Experience with NoSQL and cloud-native database technologies.
- Certifications such as CASP, GSEC, GSLC, CISSP, CEH, CISM, CISA, PMI-ACP, SAFe Agilist, or CSM.
Culture & Benefits
- 100% company-covered medical premiums and competitive salary.
- 401k program with 100% company match on the first 4%.
- 3 weeks of PTO plus 11 paid holidays annually.
- Monthly reimbursement for cell phone and home internet costs.
- Investment in professional training and certifications.
- Paternity/Maternity leave and new business incentive programs.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →