About the role
We are looking for our esteemed client for Database Security+ Vulnerability Managemen+Middleware
Immediate
WFO 5 days
Work Location - Mumbai ,BKC
For a Database Security Audit profile, the following mandatory skills are generally required:
1. Database Knowledge:
- Proficiency in major database platforms like Oracle, SQL Server, MySQL, PostgreSQL, MongoDB, etc.
- Understanding of database architecture, schemas, and access controls.
2. Security Auditing:
- Experience in conducting database security audits and assessments.
- Knowledge of compliance standards such as PCI-DSS, GDPR, HIPAA, and SOX.
- Familiarity with database vulnerability assessment tools (e.g., Nessus, Qualys, DbProtect).
- Expertise in security controls, encryption, data masking, and auditing database activities.
3. Database Hardening:
- Experience in applying hardening guidelines to secure databases.
- Knowledge of user roles, privileges, and permission management.
4. Access Control & Authentication:
- Understanding of authentication mechanisms (e.g., multi-factor authentication, role-based access).
- Knowledge of managing access to sensitive data and database resources.
5. SQL and Scripting:
- Proficiency in writing SQL queries and scripts for auditing and automation.
- Ability to interpret SQL logs and identify vulnerabilities.
6. Vulnerability Management:
- Ability to identify, assess, and remediate database vulnerabilities.
- Experience in patch management and database update cycles.
7. Monitoring and Logging:
- Expertise in logging database events and activity monitoring.
- Familiarity with database-specific monitoring tools and SIEM integration.
8. Backup and Recovery:
- Knowledge of backup strategies and recovery processes to secure data.
9. Networking & Firewalls:
- Understanding of database connectivity, network security, and firewall rules for database protection.
10. Incident Response:
- Experience in responding to database security incidents and forensic analysis.
11. Communication Skills:
- Ability to document findings, prepare reports, and communicate security recommendations to stakeholders.