Senior Forensic DBA (PostgreSQL) – Incident Response & Audit

Scrumconnect Limited; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Scrumconnect Limited in London is seeking a Senior Forensic DBA to investigate and explain data incidents in government and enterprise databases. You will reconstruct events, preserve evidence and make recommendations to prevent recurrence, working with security, delivery and engineering teams.

At SFIA Level 5, you’ll work independently, advise at senior level, and set standards for logs, audits and data recovery on a UK public sector programme.

Qualifications

• SC cleared, mandatory.
• Extensive hands-on experience as a senior DBA with PostgreSQL.
• Experience on AWS managed databases (RDS and Aurora).
• Proven experience with backup, PITR, logical replication, high availability and disaster recovery.
• Strong SQL and performance tuning skills, including index strategy.
• Experience diagnosing live production incidents and finding root causes.
• Good understanding of database security, auditing and logging.
• Linux and bash scripting.
• Strong written reporting and stakeholder communication.
• Able to work independently at SFIA Level 5.
• Experience of database or digital forensics, evidence handling or incident response.
• Experience in central government or other regulated environments.
• Infrastructure as code (Terraform).
• Data modelling and data warehouse experience (3NF, dimensional).
• Migration experience (Oracle or MySQL to PostgreSQL).
• Git, Docker and Kubernetes.

Responsibilities

• Investigate data incidents, such as unexpected changes, deletions, corruption, performance failures and suspected misuse, and establish the root cause.
• Reconstruct events using transaction logs, WAL archives, point-in-time recovery (PITR), audit logs and replication streams.
• Preserve and document evidence in a way that can be relied on in security and compliance reviews.
• Check data integrity and spot tampering or unauthorised access.
• Advise on audit and logging design (for example pgaudit and database activity monitoring) so future incidents can be traced.
• Support live incident response, including performance tuning and fault finding on production databases.
• Review backup, disaster recovery, replication and archiving arrangements.
• Support database migrations and upgrades, including near-zero-downtime approaches.
• Write clear investigation reports and recommendations for technical and non-technical audiences.
• Advise developers and architects on SQL, indexing and schema design.

Skills

PostgreSQL

SQL

Performance tuning

Security auditing

Linux

Bash scripting

Terraform

Git

Docker

Kubernetes

Data modelling

Disaster recovery

Tools

AWS

Aurora

RDS

Job description

Scrumconnect Limited in London is seeking a Senior Forensic DBA to investigate and explain data incidents in government and enterprise databases. You will reconstruct events, preserve evidence and make recommendations to prevent recurrence, working with security, delivery and engineering teams.

At SFIA Level 5, you’ll work independently, advise at senior level, and set standards for logs, audits and data recovery on a UK public sector programme.