Remote Database Security Engineer

Bayview Fund Management, LLC; Coral Gables (FL); Remote; USD 160,000 - 180,000; Full time

Job summary

Bayview Asset Management is seeking an IT Security Engineer (Database) to secure enterprise databases and related data assets across on‑prem and cloud environments. The role combines DBA expertise with security best practices to ensure confidentiality, integrity, and availability of sensitive data.

You will minimize risk by implementing RBAC, encryption, auditing, DLP, and vulnerability remediation while collaborating with DBAs, security, and compliance teams.

Qualifications

• BA/BS in Computer Science, Computer Engineering, Information Systems, or equivalent experience.
• 7+ years of experience in database administration, database engineering, or database security.
• Strong hands-on experience administering enterprise database platforms such as SQL Server, Oracle, PostgreSQL, or MySQL.
• Experience implementing database security controls including encryption, auditing, access controls, and privileged access management.
• Experience with database vulnerability scanning, monitoring, and remediation processes.
• Experience in highly regulated environments, preferably Financial Services or similar industries.
• Experience supporting cloud database technologies and security best practices in AWS, Oracle and/or Azure.

Responsibilities

• Design, implement and maintain database security controls across SQL Server, Oracle, PostgreSQL, MySQL, NoSQL and cloud-native database services.
• Conduct database security architecture reviews and recommend secure configurations before production deployment.
• Operate and fine tune Database Activity Monitoring solutions such as IBM Guardium, Imerva Data Security Fabric/SecureSphere, Oracle Audit Vault, or equivalent platforms.
• Support public cloud database security for IaaS, PaaS, and SaaS environments including AWS, Azure, and Oracle Cloud platforms.
• Implement and maintain controls for RBAC, least privilege, privileged access management, encryption, auditing, data masking, tokenization, and DLP.
• Monitor database environments for suspicious activity, unauthorized access attempts, data exfiltration risks, and security anomalies.
• Perform database vulnerability assessments, security reviews, patch management, and remediation activities.
• Support Data Loss Prevention (DLP), database activity monitoring (DAM), and security information and event management (SIEM) integrations.
• Partner with application teams and DBAs to ensure secure database design, configuration, and deployment practices.
• Develop and maintain database security standards, baselines, policies, procedures, and technical documentation.
• Assist in incident response investigations related to database security events and data breaches.
• Participate in IT Security exercises, audits, penetration testing activities, and third-party assessments.
• Support regulatory and compliance requirements including SOX, PCI-DSS, GLBA, SOC, and other applicable frameworks.
• Automate database security monitoring, reporting, and operational tasks using scripting and automation tools.
• Keep abreast of industry security trends, database technologies, vulnerabilities, and emerging threat profiles.
• Perform any additional tasks required to support IT and Security control objectives, business objectives, IT projects, and others

Skills

SQL

Python

Bash

PowerShell

Education

BA/BS in Computer Science or related field

Tools

SQL Server

Oracle

PostgreSQL

MySQL

Job description

Bayview Asset Management is seeking an IT Security Engineer (Database) to secure enterprise databases and related data assets across on‑prem and cloud environments. The role combines DBA expertise with security best practices to ensure confidentiality, integrity, and availability of sensitive data.

You will minimize risk by implementing RBAC, encryption, auditing, DLP, and vulnerability remediation while collaborating with DBAs, security, and compliance teams.