Database Activity Monitoring (Guardium DAM) Engineer

Role overview

Platform operations and onboarding

• Install, configure, maintain, upgrade, and troubleshoot Guardium Collectors, Aggregators, Central Manager, and S-TAP agents.
• Manage licensing, appliance sizing, storage, archival, health, performance, high availability, failover, and backup/restore validation.
• Onboard Oracle, SQL Server, MySQL, PostgreSQL, DB2, MongoDB, and cloud-managed databases; validate collection completeness.
• Build and tune groups, policies, and rules for privileged access, sensitive-data access, and schema/DDL changes.
• Run sensitive-data discovery and classification scans and maintain data-at-risk inventories.

Monitoring, compliance, and security

• Create compliance workflows and reports, including PCI-DSS, SOX, GDPR, or applicable local requirements; retain audit evidence and manage sign-offs.
• Configure real-time policy alerts, investigate anomalous activity, and escalate confirmed incidents under SOC procedures.
• Integrate alerts and audit data with Splunk or other SIEM and SOAR platforms; support forensics and threat-detection tuning.
• Administer Guardium RBAC and authentication integrations, conduct access reviews, and enforce segregation of duties.

Collaboration and support

• Coordinate onboarding and database traffic inspection with DBAs, infrastructure, and cloud teams.
• Train SOC analysts and auditors, document changes and runbooks, and provide Guardium platform escalation support.
• Produce activity audit trails and dashboards for SOC analysts, DBAs, auditors, and executive stakeholders.

Qualifications and experience

• Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, Cybersecurity, or equivalent.
• IBM Certified Deployment Professional – Security Guardium is required; IBM Certified Administrator – Security Guardium is preferred.
• 3–5 years of hands-on Guardium or equivalent database activity monitoring/database security platform administration experience.
• Advanced Guardium administration, S-TAP troubleshooting, policy management, database knowledge, SQL, and compliance reporting experience.

Technical skills

• Python and/or Bash proficiency for automation, reporting, and Guardium REST API integrations; Splunk or equivalent SIEM integration experience.
• Working knowledge of database audit/logging, TCP/IP, network segmentation, encryption in transit, and applicable data-protection frameworks.
• Cloud-managed database exposure is advantageous; security certifications and database-platform certification are preferred or advantageous.

Collaboration and general duties

Work location

• Work location is in person.