Database Security Engineer

Area: support and improve existing IT Security controls and systems to protect critical IT assets and sensitive corporate data; implement new processes and projects to enhance overall IT/Information security level of the Company with database security and cryptographic controls.

Functional description:

1. Support of existing IS infrastructure (IBM Guardium Database Activity Monitoring) and adjust/improve it for specified needs (updates, modifications etc.);

2. Monitoring of IS incidents (including Turkcell SOC incidents). Develop and maintain list of critical events for monitoring. Collect information from different sources and perform security investigation.

3. Develop and maintain IT/Information security policies, procedures and instructions related to IS monitoring. Manage cryptography regulation in the Company.

4. Act as a Security Analyst in projects to conduct IS risk analysis and design countermeasures to minimize the risks related to sensitive data leakage and unauthorized modification

5. Administration of enterprise SSL account. Organization, control, timely renewal, and procurement.

6. Control compliance of processes and controls to Security and international standards requirements, introduced in the company, such as ISO 27001, PCI DSS and SOX.

7. Participation in Information Security Awareness of the Company. Consult employees on the matter of Information and IT Security. Run campaigns to verify and assess the level of employees’ information security awareness.

8. Act as a Project Manager in assigned Information Security projects.

Requirements:

Education: University Degree in IT/Information Security or any other IT related area

Experience: from 2 to 5 years

Language skills: English (intermediate), Russian, Ukrainian – fluent.

PC Skills: Advanced PC user and administrator

Special requirements:

Practical knowledge of Information Security Management frameworks

Good knowledge and working experience of Information Security standards and best practices: ISO270xx. Also CobiT, ITIL standards.

Good understanding of DB architectures such as Oracle (Exadata), MySQL, MSSQL and its logging and security configuration aspects.

Knowledge and experience in designing and applying security controls for different database technologies.

Practical experience in DAM technologies such as IBM Guardium or similar (Imperva, McAffee). Ability to configure DB monitoring policies, alerts, and reports.

Good knowledge in IP/GSM networking and overall internal IT processes. Understanding of SDLC concept.

Good communication and excellent reporting skills.

Ability to dive into details and study new knowledge.