Lead, Infrastructure Security Engineer

pru; Newark (NJ); On-site; USD 140,000 - 190,000; Full time

Job summary

Prudential in Newark seeks a Lead, Infrastructure Security Engineer to advance database security and automation across cloud and on-prem environments. You will partner with product owners, tech leads, and delivery professionals to design secure features for databases, systems, and solutions while driving agile practices.

The role emphasizes mentoring, problem solving, and collaboration, with a focus on automating security workflows and ensuring risk and compliance are integrated into product

Qualifications

• Bachelor's degree in Computer Science or Engineering or equivalent experience.
• Ability to mentor others and leverage diverse ideas.
• Experience with agile development methodologies and TDD.
• Understanding of business concepts, tools and processes for decision-making.
• Proactive learner with strong problem-solving and collaboration skills.

Responsibilities

• Create and support automation for infrastructure and security components.
• Provide services to software teams for database infrastructure monitoring.
• Ensure product security is maintained throughout the lifecycle.
• Collaborate with product owners and tech leads on requirements and design.
• Automate unit and integration tests and drive value through automation.
• Document solutions to support adoption of developed capabilities.
• Coach team members and embed learning and innovation in daily work.
• Address complex problems with qualitative and quantitative analysis.
• Apply knowledge of AWS/Azure/Windows/Linux/Unix and networking basics.
• Use Python, Shell/Power, SQL, and modern languages; leverage Ansible, CloudFormation, Terraform.
• Support database activity monitoring, SOX compliance, and threat analytics.
• Manage database configuration, vulnerability management, and CIS benchmarking.
• Handle privileged access reporting and operational continuity tasks.

Skills

Mentoring

Agile methodologies

Test-Driven Development

Business concepts

Learning mindset

Problem solving

Communication

Collaboration

Security engineering

Distributed systems

DBMS knowledge

Hybrid cloud

VMs & Networking

Risk & compliance

Python

Shell/Power scripting

SQL

Ansible

CloudFormation

Terraform

Linux/Unix

Database security

Education

Bachelor of Computer Science or Engineering

Tools

IBM Guardium

Imperva DAM

Job description

Job Classification: Technology - Engineering & Cloud

Are you interested in building capabilities that enable the organization with innovation, speed, agility, scalability and efficiency? The Global Technology team takes great pride in our culture where digital transformation is built into our DNA! When you join our organization at Prudential, you’ll unlock an exciting and impactful career - all while growing your skills and advancing your profession at one of the world's leading financial services institutions.

Your Team & Role

As a Lead, Infrastructure Security Engineer in Security Services Data protection, you will partner with product owners, tech leads, designers, engineers, and delivery professionals to improve database security posture. You will design and develop security features for our products, systems, applications and/or solutions that solve sophisticated business problems, deploy innovative products, services, and experiences to delight our customers! In addition to advanced technical expertise and experience, you will bring excellent problem solving, communication and teamwork skills, along with agile ways of working, strong business insight, an inclusive leadership attitude and a continuous learning focus to all that you do.

Here is What You Can Expect on a Typical Day

• Create, code and support solutions to automate the creation, management, or destruction of infrastructure and related security components
• Provide easily consumable services to software development teams to assist in the consumption of database infrastructure monitoring solutions and partner to implement them
• Ensures product security is maintained throughout the product lifecycle, integrating new security features and updates into existing products.
• Collaborate with product owners in understanding needs and defining feature stories, tech leads in defining technical design and other team members to understand the system end-to-end and deliver robust solutions that bring about business impact and support the goals
• Automate unit and integration test cases, solve problems, and add new value with automation
• Develop corporate platform standards based on cost, capability, and capacity requirements to drive business value; document solutions to support the adoption of developed solutions
• Bring a strong understanding of relevant and emerging technologies, provide input and coach team members and embed learning and innovation in the day-to-day
• Work on complex problems in which analysis of situations or data requires an evaluation of intangible variables.
• Apply infrastructure fundamentals to AWS/Azure/Windows/Linux/Unix databases, network and TCP/IP, and common communication protocols
• Use programming languages including but not limited to Python, Shell/Power scripting, SQL, Modern languages and Ansible, CloudFormation and Terraform frameworks
• Support for Database activity monitoring, SOX compliance, threat analytics, SNOW and Splunk integration
• Managing Database configuration compliance, vulnerability management, CIS benchmarking, SNOW integration
• Support for Privileged access and entitlement reporting
• Infrastructure health checks, patching, maintenance, disaster recovery, and business continuity

The Skills & Expertise You Bring

Bachelor of Computer Science or Engineering or experience in related fields

Ability to mentor others with minimal guidance and effectively leverage diverse ideas, experiences, thoughts and perspectives to the benefit of the organization

Experience with agile development methodologies and Test-Driven Development (TDD)

Knowledge of business concepts, tools and processes that are needed for making sound decisions in the context of the company's business

Ability to learn new skills and knowledge on an on-going basis through self-initiative and tackling challenges

Excellent problem solving, communication and collaboration skills

Advanced experience and/or expertise with several of the following:

• Applied Security Experience
• Experience working with distributed systems across different operating systems and databases, both cloud and on-premises
• Applied experience with IBM Guardium / Imperva DAM and Vulnerability Assessment (VA) (certification is a plus)
• Knowledge of various DBMS (MSSQL, Oracle, DB2, PostgreSQL, Redshift, Couchbase, MongoDB, Hadoop) and Cloud DB (Aurora PostgreSQL, Amazon DynamoDB, Document DB, Redshift, RDS, Azure SQL, Cosmos DB, snowflake Capella etc.)
• Familiarity with hybrid cloud environments
• Understanding of hardware, virtual machines, networking, and protocols
• Basic risk management, auditing, and compliance knowledge
• Programming Languages: Python, Shell/Power scripting, SQL, Modern languages
• Frameworks: Ansible, CloudFormation, Terraform
• Infrastructure fundamentals
• Linux / UNIX Operating Systems : File Permissions, Network Configuration, Services, Process Manipulation; supporting vendor security solutions
• Database Fundamentals: Schemas, Tables, Permissions, SQL, Security
• Networking, TCP/IP and o