Database Security Engineer - GRC & DBMS

Cerebra; Dadri, Pune District, Bengaluru; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Cerebra in India seeks an experienced Database Security Engineer with deep expertise in database administration, security engineering, and regulatory compliance to lead security posture initiatives.

You will design baselines, enforce encryption, RBAC, data masking, and audit readiness while collaborating with SRE, risk, and audit teams. Knowledge of SOC 2, ISO 27001, PCI-DSS, HIPAA, GDPR is required.

Qualifications

• Experience in database security engineering and administration.
• Strong knowledge of GRC and data security controls.
• Experience with Oracle, MongoDB, PostgreSQL or similar databases.
• Hands-on in encryption at rest (TDE/KMS) and encryption in transit (TLS/mTLS).
• Familiar with DAM, SIEM and vulnerability management.
• Awareness of SOC 2, ISO 27001, PCI-DSS, HIPAA, GDPR frameworks.
• Proficient in Python or Shell scripting.
• Able to maintain audit readiness and security baselines.

Responsibilities

• Design and enforce enterprise database security baselines and secure configuration standards.
• Implement encryption at rest using TDE/KMS and encryption in transit using TLS/mTLS.
• Manage RBAC, least-privilege access, data masking, and automated credential rotation.
• Support compliance with SOC 2, ISO 27001, PCI-DSS, HIPAA, and GDPR requirements.
• Implement audit logging, database activity monitoring (DAM), security monitoring, and SIEM integration.
• Conduct database vulnerability assessments, remediation tracking, and security audits.
• Manage database authentication, authorization, privileged access, secrets, certificates, and key management.
• Automate security checks, policy validation, credential rotation, and compliance reporting using Python, Shell, or equivalent scripting tools.
• Collaborate with database, SRE, application security, risk, and audit teams.

Skills

Database Security

GRC & Data Security

Oracle, MongoDB, PostgreSQL

RBAC & Least Privilege

TDE/KMS & TLS/mTLS

DAM & SIEM

Regulatory Frameworks

Python or Shell scripting

Audit Readiness

Job description

Immediate /Short Notice Only

Database Security Engineer GRC & DBMS
Experience: 8 to 10 Years
Locations: Gurugram, Pune, Kochi, Bengaluru, Noida

Role Overview

We are looking for an experienced Database Security Engineer with strong expertise in database administration, security engineering, security posture management, and regulatory compliance.

Key Responsibilities

• Design and enforce enterprise database security baselines and secure configuration standards.
• Implement encryption at rest using TDE/KMS and encryption in transit using TLS/mTLS.
• Manage role-based access control (RBAC), least-privilege access, data masking, and automated credential rotation.
• Support compliance with SOC 2, ISO 27001, PCI-DSS, HIPAA, and GDPR requirements.
• Implement audit logging, database activity monitoring (DAM), security monitoring, and SIEM integration.
• Conduct database vulnerability assessments, remediation tracking, and security audits.
• Manage database authentication, authorization, privileged access, secrets, certificates, and key management.
• Automate security checks, policy validation, credential rotation, and compliance reporting using Python, Shell, or equivalent scripting tools.
• Collaborate with database, SRE, application security, risk, and audit teams.

Required Skills

• Database Security Engineering / Database Administration
• Cyber Security, GRC, and Data Security
• Oracle, MongoDB, PostgreSQL, and other relational/NoSQL databases
• Encryption, RBAC, least privilege, TDE/KMS, TLS/mTLS
• Database Activity Monitoring (DAM), SIEM, vulnerability management
• Compliance frameworks: SOC 2, ISO 27001, PCI-DSS, HIPAA, GDPR
• Python or Shell scripting
• Database security monitoring and audit readiness