Lead, Database Infrastructure Security Engineer

Prudential Ins Co of America; Newark (NJ); Hybrid; USD 134,000 - 220,000; Full time

Benefits offered by this job

Market competitive base salaries with

Medical, dental, vision, disability,

401(k) with company match up to 4%

Wellness programs up to $1,600/year

Education benefit

Employee stock purchase plan

Job summary

Prudential is seeking a Lead Infrastructure Security Engineer within Security Services Data Protection to strengthen database security posture across cloud and on‑prem environments. You will design security features, automate infrastructure tasks, and collaborate with product owners, tech leads and engineers to deliver robust, scalable solutions.

You'll apply DevSecOps practices, manage vulnerability assessments, and influence architecture decisions while mentoring peers in agile teams.

Qualifications

• Bachelor's degree in CS or Engineering.
• Ability to mentor others and embrace diverse ideas.
• Experience with agile development and tests.
• Knowledge of business concepts and decision-making.
• Willingness to learn continuously.

Responsibilities

• Create, code and support automation of infrastructure security components.
• Provide services to dev teams for database infrastructure monitoring.
• Ensure product security throughout the lifecycle and integrate updates.
• Collaborate with product owners and engineers to design robust solutions.
• Automate unit and integration tests and drive value with automation.
• Document solutions and establish platform standards.
• Coach team members and foster learning and innovation.
• Tackle complex problems with data-driven analysis.
• Apply infrastructure fundamentals to multi-OS databases and networks.
• Use Python, SQL, shell scripting and IaC frameworks.

Skills

Python

Shell/Power

SQL

Linux/UNIX

Docker

Kubernetes

Terraform

Ansible

CloudFormation

AWS/Azure/GCP

SDLC

TDD

Education

Bachelor of Computer Science or Engineering

Tools

IBM Guardium / Imperva DAM

Vulnerability Assessment (VA)

Job description

Job Classification: Technology - Engineering & Cloud

Are you interested in building capabilities that enable the organization with innovation, speed, agility, scalability and efficiency? The Global Technology team takes great pride in our culture where digital transformation is built into our DNA! When you join our organization at Prudential, you'll unlock an exciting and impactful career - all while growing your skills and advancing your profession at one of the world's leading financial services institutions.

Your Team & Role

As a Lead, Infrastructure Security Engineer in Security Services Data protection, you will partner with product owners, tech leads, designers, engineers, and delivery professionals to improve database security posture. You will design and develop security features for our products, systems, applications and/or solutions that solve sophisticated business problems, deploy innovative products, services, and experiences to delight our customers! In addition to advanced technical expertise and experience, you will bring excellent problem solving, communication and teamwork skills, along with agile ways of working, strong business insight, an inclusive leadership attitude and a continuous learning focus to all that you do.

Here is What You Can Expect on a Typical Day

• Create, code and support solutions to automate the creation, management, or destruction of infrastructure and related security components
• Provide easily consumable services to software development teams to assist in the consumption of database infrastructure monitoring solutions and partner to implement them
• Ensures product security is maintained throughout the product lifecycle, integrating new security features and updates into existing products.
• Collaborate with product owners in understanding needs and defining feature stories, tech leads in defining technical design and other team members to understand the system end-to-end and deliver robust solutions that bring about business impact and support the goals
• Automate unit and integration test cases, solve problems, and add new value with automation
• Develop corporate platform standards based on cost, capability, and capacity requirements to drive business value; document solutions to support the adoption of developed solutions
• Bring a strong understanding of relevant and emerging technologies, provide input and coach team members and embed learning and innovation in the day-to-day
• Work on complex problems in which analysis of situations or data requires an evaluation of intangible variables.
• Apply infrastructure fundamentals to AWS/Azure/Windows/Linux/Unix databases, network and TCP/IP, and common communication protocols
• Use programming languages including but not limited to Python, Shell/Power scripting, SQL, Modern languages and Ansible, CloudFormation and Terraform frameworks
• Support for Database activity monitoring, SOX compliance, threat analytics, SNOW and Splunk integration
• Managing Database configuration compliance, vulnerability management, CIS benchmarking, SNOW integration
• Support for Privileged access and entitlement reporting
• Infrastructure health checks, patching, maintenance, disaster recovery, and business continuity

The Skills & Expertise You Bring

• Bachelor of Computer Science or Engineering or experience in related fields
• Ability to mentor others with minimal guidance and effectively leverage diverse ideas, experiences, thoughts and perspectives to the benefit of the organization
• Experience with agile development methodologies and Test-Driven Development (TDD)
• Knowledge of business concepts, tools and processes that are needed for making sound decisions in the context of the company's business
• Ability to learn new skills and knowledge on an on-going basis through self-initiative and tackling challenges
• Excellent problem solving, communication and collaboration skills
• Advanced experience and/or expertise with several of the following:

Applied Security Experience

• Experience working with distributed systems across different operating systems and databases, both cloud and on-premises
• Applied experience with IBM Guardium / Imperva DAM and Vulnerability Assessment (VA) (certification is a plus)
• Knowledge of various DBMS (MSSQL, Oracle, DB2, PostgreSQL, Redshift, Couchbase, MongoDB, Hadoop) and Cloud DB (Aurora PostgreSQL, Amazon DynamoDB, Document DB, Redshift, RDS, Azure SQL, Cosmos DB, snowflake Capella etc.)
• Familiarity with hybrid cloud environments
• Understanding of hardware, virtual machines, networking, and protocols
• Basic risk management, auditing, and compliance knowledge
• Programming Languages: Python, Shell/Power scripting, SQL, Modern languages
• Frameworks: Ansible, CloudFormation, Terraform
• Infrastructure fundamentals
• Linux / UNIX Operating Systems: File Permissions, Network Configuration, Services, Process Manipulation; supporting vendor security solutions
• Database Fundamentals: Schemas, Tables, Permissions, SQL, Security
• Networking, TCP/IP and other common Communication Protocols: OSI Model, 3 Way Handshake, Stateful vs Stateless, Proxy Firewall
• Containers: Docker, Kubernetes
• Application Programming Interfaces (API): Consumption & Development
• Test/Quality capabilities & methodologies (functional & nonfunctional) and associated tooling including quality automation
• Infrastructure & Cloud Security best practices including DevSecOps
• Dev Ops Tools & Practices: awareness, understanding of DevOps automation tools, practices & capabilities (continuous integration & continuous delivery)
• Software Development Life Cycle (SDLC): Development and Design Fundamentals including SDLC and coding standards
• Cloud Computing: Understanding and knowledge (of 1 or more): AWS, Azure or GCP
• Cloud service consumption
• Disaster Recovery and High Availability

Preferred Qualifications

• IBM Guardium / Imperva DAM and Vulnerability Assessment (VA)

What we offer you:

Prudential is required by state specific laws to include the salary range for this role when hiring a resident in applicable locations. The salary range for this role is from $133,600.00 to $220,400.00. Specific pricing for the role may vary within the above range based on many factors including geographic location, candidate experience, and skills.

• Market competitive base salaries, with a yearly bonus potential at every level.
• Medical, dental, vision, life insurance, disability insurance, Paid Time Off (PTO), and leave of absences, such as parental and military leave.
• 401(k) plan with company match (up to 4%).
• Company-funded pension plan.
• Wellness Programs including up to $1,600 a year for reimbursement of items purchased to support personal wellbeing needs.
• Work/Life Resources to help support topics such as parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health, and career development.
• Education Benefit to help finance traditional college enrollment toward obtaining an approved degree and many accredited certificate programs.
• Employee Stock Purchase Plan: Shares can be purchased at 85% of the lower of two prices (Beginning or End of the purchase period).

Eligibility to participate in a discretionary annual incentive program is subject to the rules governing the program, whereby an award, if any, depends on various factors including, without limitation, individual and organizational performance. To find out more about our Total Rewards package, visit Work Life Balance | Prudential Careers. Some of the above benefits may not apply to part-time employees scheduled to work less than 20 hours per week.

Prudential Financial, Inc. of the United States is not affiliated with Prudential plc. which is headquartered in the United Kingdom.

Prudential is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, ancestry, sex, sexual orientation, gender identity, national origin, genetics, disability, marital status, age, veteran status, domestic partner status, medical condition or any other characteristic protected by law.

If you need an accommodation to complete the application process, please email [e-mail] .

If you are experiencing a technical issue with your application or an assessment, please email [e-mail] to request assistance.