United States onlyDatabase Security Subject-Matter Expert / Technical Lead
Overview
cFocus Software is seeking a Database Security Subject-Matter Expert (SME) / Technical Lead to oversee and manage the security posture of enterprise database environments supporting a federal agency. The SME/Technical Lead will implement, maintain, and enhance database security controls, integrate database security tools with enterprise SIEMs, and guide teams in securing diverse database platforms. This position requires deep technical expertise, strong analytical abilities, and extensive experience managing large-scale database systems in production environments.This is a full-time position that may require on-site support at federal agency locations in the Washington, D.C. metro area. Some telework flexibility may be available depending on mission requirements. Must be able to obtain and maintain a Public Trust or higher-level security clearance as required by the agency.
Responsibilities
The Database Security SME / Technical Lead shall perform duties that include, but are not limited to:- Lead the implementation and maintenance of database security policies, procedures, and controls across enterprise systems.
- Operate database vulnerability assessment tools and analyze results to identify and remediate misconfigurations, missing patches, and other weaknesses.
- Secure and harden database platforms including Oracle, SQL Server, PostgreSQL, and MySQL in compliance with federal cybersecurity standards.
- Ensure proper access control, encryption, auditing, and logging mechanisms for all database environments.
- Integrate database security solutions with enterprise SIEM platforms (e.g., Splunk) to enable centralized monitoring and alerting.
- Perform regular risk assessments, audits, and reviews to ensure data protection and regulatory compliance.
- Oversee security operations for at least 1000+ production databases within complex enterprise or hybrid cloud environments.
- Provide technical leadership and mentorship to database administrators and cybersecurity teams in secure database operations.
- Coordinate vulnerability management and remediation efforts specific to database technologies and data storage systems.
- Develop and maintain standard operating procedures (SOPs), metrics, and dashboards for database security and compliance reporting.
Required Qualifications
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (preferred).
- Demonstrable credentials reflecting knowledge, skills, and experience in operating database vulnerability assessment tools and analyzing and interpreting results.
- Experience securing database systems such as Oracle, SQL Server, PostgreSQL, and MySQL.
- 5+ years of experience in database security, database administration, or information security.
- 3+ years of experience securing diverse database platforms in enterprise or large-scale environments.
- Proven experience securely managing at least 1000+ databases in production environments.
- Hands-on experience in enterprise environments with mixed database technologies.
- Experience integrating database security tool solutions with SIEMs (e.g., Splunk).
Preferred Qualifications
- Experience supporting DHS or other federal agencies in database security or information assurance roles.
- Knowledge of NIST SP 800-53, FISMA, and FedRAMP security controls for database systems.
- Proficiency in implementing database encryption, auditing, and access control mechanisms.
- Experience with cloud-based and hybrid database environments (AWS RDS, Azure SQL, Google Cloud SQL).
- Strong scripting and automation skills (e.g., SQL, PowerShell, Python) for vulnerability assessment and compliance reporting.
- Ability to communicate complex security findings to technical and executive audiences.
