Senior Forensic DBA – Hybrid, SC Cleared

scrumconnect ltd; Greater London; Hybrid; GBP 80,000 - 105,000; Full time

Job summary

Scrumconnect Ltd is seeking a senior Forensic DBA to investigate and explain data incidents within critical databases on a UK public sector programme. You will reconstruct events from logs and audits, preserve evidence, and advise on future secure logging and recovery strategies.

Working hybrid with occasional client visits to London or Staines, you will operate at SFIA Level 5, providing independent analysis, reporting, and recommendations to senior stakeholders.

Qualifications

• SC cleared is mandatory.
• Senior DBA with extensive PostgreSQL experience.
• Experience with AWS managed databases (RDS/Aurora).
• Proven backup, PITR, replication and DR capabilities.
• Strong SQL and performance tuning skills.
• Experience diagnosing live production incidents.
• Good understanding of database security, auditing and logging.
• Linux and bash scripting proficiency.

Responsibilities

• Investigate data incidents and establish root causes.
• Reconstruct events using logs, PITR and replication streams.
• Preserve and document evidence for security reviews.
• Check data integrity and detect tampering or unauthorized access.
• Advise on audit/logging design for future traceability.
• Support live incident response and performance tuning on production DBs.
• Review backup, DR, replication, and archiving setups.
• Support migrations and upgrades with near-zero downtime.
• Write clear investigation reports for technical and non-technical audiences.
• Advise on SQL, indexing and schema design.

Skills

PostgreSQL

AWS RDS/Aurora

SQL tuning

Incident diagnosis

Linux Bash

Security auditing

Reporting

Independence SFIA5

Tools

Terraform

Docker

Kubernetes

Git

Job description

Scrumconnect Ltd is seeking a senior Forensic DBA to investigate and explain data incidents within critical databases on a UK public sector programme. You will reconstruct events from logs and audits, preserve evidence, and advise on future secure logging and recovery strategies.

Working hybrid with occasional client visits to London or Staines, you will operate at SFIA Level 5, providing independent analysis, reporting, and recommendations to senior stakeholders.