Data Security Engineer (DAM)

CPX; Abu Dhabi; On-site; AED 300,000 - 470,000; Full time

Job summary

CPX is seeking a Data Security Engineer (DAM) to engineer and operate Database Activity Monitoring controls across on-premises and cloud databases. You will ensure visibility, alerting and integrity of privileged database activity while supporting incident response and regulatory compliance.

Responsibilities include deploying DAM agents, configuring monitoring policies, and integrating with SIEM, PAM and ITSM.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, information technology, information systems, engineering or equivalent.
• Postgraduate qualification in information/cyber security is an advantage.
• Imperva DAM/SecureSphere or equivalent platform certification/training likely required
• Microsoft/Azure database or security certification beneficial
• CISSP, Security+ or equivalent (preferred)
• Database administration training for SQL Server, Oracle or PostgreSQL (advantage)
• Imperva DAM or equivalent monitoring platform
• SQL Server, Oracle, PostgreSQL and cloud database fundamentals
• Database activity policies, privileged monitoring and anomaly detection
• SIEM/SOAR, PAM and ITSM integrations
• Log integrity, retention, troubleshooting and evidence handling

Responsibilities

• Deploy, administer and monitor DAM agents and/or collectors across on-premises and cloud databases.
• Maintain accurate database inventory and coverage mapping; identify unmonitored instances.
• Configure monitoring policies for logins, DDL/DML/DCL, privilege changes and sensitive data access.
• Maintain privileged database user monitoring with full session visibility.
• Tune anomaly detection baselines to reduce false positives and improve detection.
• Configure real-time alerts for unauthorized access, privilege escalation, after-hours activity, and policy violations.
• Protect audit trail integrity through tamper resistance and separation of duties.
• Maintain retention, archival and access controls for DAM logs.
• Integrate DAM alerts with SIEM/SOAR and ITSM; validate routing and playbooks.
• Integrate with PAM to correlate privileged sessions.
• Monitor platform health, throughput, latency and storage capacity.
• Investigate alerts, preserve evidence and support incident response.
• Produce coverage, alert quality, and maturity reports.
• Perform configuration assessments and maintain runbooks and disaster recovery procedures.
• Support platform upgrades and onboarding of new database technologies.
• Provide technical workshops and knowledge transfer to operational teams.

Skills

Imperva DAM/SecureSphere certs

Microsoft/Azure security cert

CISSP/Security+ (preferred)

Database administration training (SQL/

Education

Bachelor’s degree in CS, cybersecurity, IT, IS, engineering

Postgraduate qualification in information/cyber security

Tools

Imperva DAM or equivalent monitoring

SQL Server, Oracle, PostgreSQL fundamentals

SIEM/SOAR, PAM, ITSM integrations

Log integrity and evidence handling

Job description

Position Title

Data Security Engineer (DAM)

Education

• Bachelor’s degree in computer science, Cybersecurity, Information Technology, Information Systems, Engineering or equivalent.
• Postgraduate qualification in information/cyber security is an advantage.

Skills / Certifications

• Imperva DAM/SecureSphere or equivalent platform certification/training
• Microsoft/Azure database or security certification
• CISSP, Security+ or equivalent (preferred)
• Database administration training for SQL Server, Oracle or PostgreSQL (advantage)

Preferred Skill Set

• Imperva DAM or equivalent monitoring platform
• SQL Server, Oracle, PostgreSQL and cloud database fundamentals
• Database activity policies, privileged monitoring and anomaly detection
• SIEM/SOAR, PAM and ITSM integrations
• Log integrity, retention, troubleshooting and evidence handling

Engineer and operate Database Activity Monitoring controls for the client, providing comprehensive visibility and alerting for privileged and sensitive database activity across on-premises and cloud databases. The role maintains monitoring coverage, policies, integrations, evidence integrity and incident response support while protecting regulated healthcare data.

Primary Responsibilities

• Deploy, administer and monitor DAM agents and/or agentless collectors across in-scope on-premises and cloud database instances.
• Maintain accurate database inventory and coverage mapping; identify unmonitored, partially monitored or unsupported instances.
• Configure monitoring policies for logins, DDL/DML/DCL, schema changes, privilege changes, stored procedures and sensitive data access.
• Maintain privileged database user and service account monitoring with full session-level visibility.
• Tune query anomaly detection baselines, thresholds and behavioral analytics to reduce false positives and improve detection.
• Configure real-time alerts for unauthorized access, privilege escalation, after-hours activity, bulk extraction and policy violations.
• Protect audit trail integrity through tamper resistance, cryptographic verification, separation of duties and controlled administration.
• Maintain retention, archival and access controls for DAM logs in accordance with applicable requirements.
• Integrate DAM alerts with SIEM/SOAR and ITSM; validate routing, severity mapping, enrichment and playbook triggers.
• Integrate with PAM where applicable to correlate database privileged sessions and controlled account usage.
• Monitor platform health, collector/agent status, throughput, latency, dropped events and storage capacity.
• Investigate DAM alerts, preserve evidence, support incident response and track remediation to closure.
• Produce coverage, privileged-user, alert quality, service health and maturity reports.
• Perform configuration assessments and maintain runbooks, change records and disaster recovery procedures.

Secondary Responsibilities

• Support database discovery, data classification, DSPM and encryption initiatives.
• Coordinate with DBA, Cloud, SOC, PAM and application teams on monitoring requirements and remediation.
• Support platform upgrades, proof-of-concepts and onboarding of new database technologies.
• Provide technical workshops and knowledge transfer to operational teams.