Database Security Engineer

About the role

The Database Security Engineer plays a crucial role in protecting AIG's systems from security risks and supporting the implementation of security strategies.

Responsibilities

• Implement security systems to detect, prevent, contain, and deter data breaches.
• Provide SME guidance and analysis to business, operations, development, risk, and compliance teams.
• Manage a DAM platform for security and audit compliance, including policy creation, event and trend analysis, performance monitoring, and infrastructure maintenance.
• Develop and maintain database security standards, guidelines, and procedures.
• Evaluate and enhance existing controls, policies, standards, procedures, and guidelines.
• Refine and enhance existing controls, policies, standards, procedures, and guidelines to prevent unauthorized use, release, modification, or destruction of data.
• Evaluate updates to new/existing database security controls and coordinate testing and implementation with stakeholders.
• Identify weak links in information security products and determine how to mitigate control deficiencies.
• Enhance preventive systems used to stop and/or deter security breaches.
• Evaluate database security patches from vendors and assess potential risks.
• Work with database custodians to understand their security needs and assist with implementing practices and procedures.
• Identify and address database security compliance issues.
• Work with internal and external auditors to demonstrate and provide evidence of security controls.

Requirements

• 5+ years of Database Security Engineer experience.
• Understanding of security risks and controls, and ability to analyze various methods of controlling information security problems.
• Knowledge of major database platforms like Oracle, SQLSERVER, MySQL, etc.
• Working knowledge of at least two or more operating systems and corresponding security systems (Linux, Unix, Windows).
• Experience with AWS technologies and methods including RDS (Relational Database Service).
• Familiarity with industry trends and current security practices.
• Ability to manage complex projects and prepare detailed task plans.
• Passionate, positive, and driven attitude.
• Good communication and interpersonal skills.
• Reliable time management and organization skills.
• Aptitude to lead complex efforts with minimal supervision.
• Willingness to collaborate across the organization.
• Proven ability to work independently and as a team member.
• Flexibility to work in varying business functions and capabilities.

Skills

• Database security, monitoring, and protection.
• Database activity monitoring platforms such as Imperva Data Security and Data Risk Analytics (DRA).
• Imperva Data Security Specialist (IDSS) certification.
• In-depth working knowledge of databases and database technologies.
• Familiarity with AWS technologies and methods including RDS (Relational Database Service).
• Data protection, database firewall, data loss prevention (DLP), data classification, vulnerability detection and mitigation, cybersecurity experience in regulated banking or financial environment.
• Top 10 banking experience (strongly preferred).
• Penetration testing and attack forensics.
• IT risk management, IS audit, GRC Tools & Processes.

Benefits

Enjoy comprehensive benefits that extend beyond time spent at work, focusing on your health, wellbeing, and financial security, as well as your professional development.

Pay

Competitive compensation and benefits package.

Schedule

Primarily in-office work schedule.