Database Security Engineer - GRC & DBMS

Cerebra; Gurugram District; On-site; INR 1,600,000 - 2,300,000; Full time

Job summary

Cerebra is seeking an experienced Database Security Engineer (GRC & DBMS) to reinforce our security posture across Gurugram and other locations in India. You will lead database security baselines, encryption, access controls, and regulatory compliance efforts for enterprise systems.

The role requires strong experience in threat detection, audit logging, DAM, and SIEM integration, with collaboration across security, SRE, and audit teams. Talent will work on Python/Shell automation.

Qualifications

• 8–10 years of experience in database security and DBMS.
• Strong knowledge of security engineering and regulatory compliance.
• Proficiency in encryption, access controls, and credential management.

Responsibilities

• Design and enforce enterprise database security baselines and configurations.
• Implement encryption at rest (TDE/KMS) and in transit (TLS/mTLS).
• Manage RBAC, least privilege, data masking, and credential rotation.
• Support SOC 2, ISO 27001, PCI-DSS, HIPAA, and GDPR compliance.
• Implement audit logging, DAM, security monitoring, and SIEM integration.
• Conduct vulnerability assessments and remediation tracking.
• Automate security checks and policy validation with scripting.
• Collaborate with database, SRE, risk, and audit teams.

Skills

Database security

RBAC & least privilege

Data masking

Encryption at rest

Regulatory compliance

Vulnerability assessment

Audit logging & DAM

SIEM integration

Credential rotation

Python scripting

Shell scripting

Tools

Python

Shell

Job description

Immediate /Short Notice Only

[e-mail]
Only Whatsapp: [phone]

Database Security Engineer GRC & DBMS
Experience: 8 to 10 Years
Locations: Gurugram, Pune, Bengaluru, Noida

Role Overview

We are looking for an experienced Database Security Engineer with strong expertise in database administration, security engineering, security posture management, and regulatory compliance.

Key Responsibilities

• Design and enforce enterprise database security baselines and secure configuration standards.
• Implement encryption at rest using TDE/KMS and encryption in transit using TLS/mTLS.
• Manage role-based access control (RBAC), least-privilege access, data masking, and automated credential rotation.
• Support compliance with SOC 2, ISO 27001, PCI-DSS, HIPAA, and GDPR requirements.
• Implement audit logging, database activity monitoring (DAM), security monitoring, and SIEM integration.
• Conduct database vulnerability assessments, remediation tracking, and security audits.
• Manage database authentication, authorization, privileged access, secrets, certificates, and key management.
• Automate security checks, policy validation, credential rotation, and compliance reporting using Python, Shell, or equivalent scripting tools.
• Collaborate with database, SRE, application security, risk, and audit teams.