Apply on Employer Site

MBL · 3 months ago

Database Security SME/Technical Lead

Bethesda, MD

Full-time

Onsite

Senior Level

5+ years exp

MBL Technologies, Inc. offers a diverse set of management and technology consulting services to Federal government and commercial markets. They are seeking an experienced Database Security Subject-Matter Expert (SME) / Technical Lead to support a federal cybersecurity initiative focused on safeguarding mission-critical data assets. The role involves providing expert leadership in database vulnerability assessment, configuration management, and compliance monitoring across large-scale, enterprise environments.

AdviceProject ManagementProperty ManagementReal Estate

Growth Opportunities

Responsibilities

Lead the planning, implementation, and continuous improvement of the federal client’s database security program

Operate and maintain automated vulnerability assessment and configuration compliance tools to identify and remediate database security weaknesses

Analyze and interpret assessment results to develop actionable remediation plans addressing misconfigurations, missing patches, and other risks

Ensure consistent application of security baselines and hardening standards across multiple database platforms

Collaborate with system owners and administrators to implement and validate remediation actions within approved change control processes

Serve as the primary subject-matter expert for database security, providing guidance on security architecture, access controls, encryption, auditing, and compliance

Secure and manage enterprise-scale database systems, including Oracle, SQL Server, PostgreSQL, and MySQL, across mixed production environments

Lead efforts to secure at least 1,000+ production databases, ensuring alignment with federal data protection and cybersecurity policies

Integrate database security tools with Security Information and Event Management (SIEM) platforms such as Splunk to enable continuous monitoring, alerting, and correlation

Collaborate with application developers, infrastructure teams, and cybersecurity operations to ensure database security throughout the system lifecycle

Develop and maintain dashboards, reports, and vulnerability metrics to track remediation status, compliance posture, and risk trends

Perform risk analyses to assess the impact of identified vulnerabilities and prioritize remediation based on exploitability and mission impact

Identify and address systemic security issues and provide recommendations for improved data security architectures

Support the development of Standard Operating Procedures (SOPs), database hardening guides, and best practices documentation

Stay current with evolving database threat landscapes, vulnerabilities, and emerging tools to strengthen the agency’s data protection posture

Qualification

Database securityVulnerability assessmentDatabase platformsSIEM integrationNIST complianceDatabase encryptionLeadership skillsCloud database familiarityRisk analysisCompliance monitoringCommunication skillsDocumentation skills

Required

5+ years of experience in database security, administration, or information security roles within enterprise or large-scale environments

3+ years of experience securing diverse database platforms (e.g., Oracle, SQL Server, PostgreSQL, MySQL) in production environments

Proven experience managing and securing 1,000+ production databases across mixed technologies

Proficiency with database vulnerability assessment and monitoring tools (e.g., IBM Guardium, Imperva, Oracle AVDF, or similar)

Demonstrated ability to analyze and interpret scan results and coordinate effective remediation strategies

Experience integrating database security tools and audit logs with SIEMs (e.g., Splunk, ArcSight, QRadar) for enhanced threat detection and response

Strong understanding of NIST, FISMA, CISA directives, and federal cybersecurity frameworks

Excellent communication, documentation, and leadership skills

Preferred

Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field (preferred)

Relevant certifications such as CISSP, CISM, CEH, CCSP, or Oracle Certified Professional (OCP)

Hands-on experience with database encryption, access control, auditing, and compliance in federal or regulated environments

Familiarity with cloud-hosted database environments (AWS RDS, Azure SQL, or Google Cloud SQL)

Experience supporting federal cybersecurity programs, Continuous Diagnostics and Mitigation (CDM) initiatives, or similar enterprise-scale security efforts