Forensic DBA

scrumconnect ltd; City of Westminster; Vor Ort; GBP 90.000 - 120.000; Vollzeit

Zusammenfassung

scrumconnect ltd is seeking a Senior Forensic DBA to investigate and explain activities within critical databases on a UK public sector programme. You will work with security, delivery and engineering teams to identify root causes, preserve evidence and recommend improvements that prevent recurrence.

Responsibilities include reconstructing events from logs and PITR, advising on audit/logging, supporting live incident response and production tuning, reviewing DR plans and assisting with

Qualifikationen

• Extensive hands-on PostgreSQL experience and strong SQL skills.
• SC clearance is mandatory for this UK public sector programme.
• Experience with backup, PITR, logical replication and high availability.
• Experience diagnosing live production incidents and root causes.
• Good understanding of database security, auditing and logging.
• Linux bash scripting experience and ability to document findings clearly.
• Ability to advise on logging design and incident response.

Aufgaben

• Investigate data incidents, establish root cause and report findings.
• Reconstruct events using logs, PITR, and replication streams.
• Preserve evidence for security and compliance reviews.
• Advise on audit/logging design for traceability of future incidents.
• Support live incident response and production performance tuning.
• Review backup, DR, replication and archiving arrangements.
• Support migrations and near-zero-downtime upgrades.
• Write clear investigation reports for technical and non-technical audiences.
• Advise developers and architects on SQL, indexing and schema design.

Kenntnisse

PostgreSQL expertise

SQL performance tuning

Root-cause analysis

Linux scripting

Stakeholder communication

Independent working (SFIA Level 5)

Data security & auditing knowledge

Tools

Git

Docker

Kubernetes

Terraform

AWS RDS/Aurora

Jobbeschreibung

We're looking for a senior Forensic DBA to investigate, reconstruct and explain what has happened inside business-critical databases on a UK public sector programme. You will work with security, delivery and engineering teams to find the root cause of data incidents, preserve evidence, and make recommendations that stop them recurring. At SFIA Level 5 you'll work independently, advise at senior level, and set the standard for how the programme logs, audits and recovers its data.,

• Investigate data incidents, such as unexpected changes, deletions, corruption, performance failures and suspected misuse, and establish the root cause.
• Reconstruct events using transaction logs, WAL archives, point-in-time recovery (PITR), audit logs and replication streams.
• Preserve and document evidence in a way that can be relied on in security and compliance reviews.
• Check data integrity and spot tampering or unauthorised access.
• Advise on audit and logging design (for example pgaudit and database activity monitoring) so future incidents can be traced.
• Support live incident response, including performance tuning and fault finding on production databases.
• Review backup, disaster recovery, replication and archiving arrangements.
• Support database migrations and upgrades, including near-zero-downtime approaches.
• Write clear investigation reports and recommendations for technical and non-technical audiences.
• Advise developers and architects on SQL, indexing and schema design
• Essential:
• SC cleared, mandatory.
• Extensive hands-on experience as a senior DBA, with strong PostgreSQL skills.
• Experience on AWS managed databases (RDS and Aurora).
• Proven experience with backup, PITR, logical replication, high availability and disaster recovery.
• Strong SQL and performance tuning skills, including index strategy.
• Experience diagnosing live production incidents and finding root causes.
• Good understanding of database security, auditing and logging.
• Linux and bash Scripting.
• Strong written reporting and stakeholder communication.
• Able to work independently at SFIA Level 5.
• Desirable:
• Experience of database or digital forensics, evidence handling or incident response.
• Experience in central government or other regulated environments.
• Infrastructure as code (Terraform).
• Data modelling and data warehouse experience (3NF, dimensional).
• Migration experience (for example Oracle or MySQL to PostgreSQL).
• Git, Docker and Kubernetes.
• At Scrumconnect, we are more than just a consultancy. We are a collaborative team focused on delivering impactful digital transformation services across government and enterprise organisations.
• As part of our team, you will benefit from:
• Exposure to major public sector digital programmes.
• A collaborative and inclusive working culture.
• Hands-on experience working within agile delivery environments.