Req Number: 18996BR
We are seeking a Senior Cybersecurity Database Analyst (SCDA) to join the Application Security and Vulnerability Management Division (AS&VMD) of the Information Protection Department.
The Application Security and Vulnerability Management Division is responsible for providing assurance to Saudi Aramco about the security of its applications, systems and information by managing the vulnerabilities and application security processes and related technologies.
The Senior Cybersecurity Database Analyst primary role is to secure Saudi Aramco network, systems and applications.
As the successful candidate, you will hold a Bachelor’s degree in Computer Science, Computer Engineering, or Cybersecurity, from a recognized and approved program.
You will have minimum nine years of experience in cybersecurity, including at least five years in database vulnerability management and activity monitoring
You must have in-depth knowledge of database engines like Oracle, MS SQL Server and PostgreSQL.
You must have experience in implementing Database Activity Monitoring in large enterprise with diverse enterprise database engines.
You must have experience in operation and administration of enterprise class database vulnerability management and activity monitoring solutions like Guardium, Imperva or DbProtect
You must have experience in securing database implemented and hosted in cloud services like AWS, Azure and GCP
You must have experience in interacting and integrating with Security Information and Event Management Systems (SIEM) as well as Log Management Systems.
You must have experience in performing vulnerability scans, analyzing findings and communicating findings with stakeholders
You must have experience working in a large enterprise with diverse database technologies
Experience in securing ERP systems is preferred
Certifications related to cybersecurity like CISSP and CISM are preferred.
Duties & Responsibilities:
You will be required to perform the following:
Perform database vulnerability assessment scans for diverse database solutions and vendors
Assess database vulnerability findings and communicate them with stakeholders
Develop, Assess and Optimize monitoring policies based on business requirements
Manage vulnerabilities lifecycle from discovery to remediation
Develop and review minimum security configuration baselines for database solutions.
Administrate database vulnerability management and monitoring solutions.
Develop solutions and scripts to complement vulnerability management solutions and automate redundant tasks
Provide subject matter expertise in the area of database security and activity monitoring
The Engineering & Project Management (E&PM) business line studies, plans and oversees the construction of the Company’s new facilities, including some of the biggest and most complex projects in the petroleum industry. Recently, Saudi Aramco completed the largest capital program in its history that included new or expanded oil, gas and petrochemical facilities, raising maximum sustainable crude oil production capacity to 12 million barrels per day and significantly increasing gas production and processing capacities. Among the recently completed projects was the largest crude oil increment in the history of the industry: Khurais, with a production capacity of 1.2 million barrels per day. More challenges lie ahead, with a slate of new or expanded oil, gas, refining and petrochemical projects in the works. E&PM also manages the Company’s Research & Development Center where scientists investigate topics such as the desulfurization of crude oil, advanced fuel formulations for next generation combustion engines, and reservoir nano-scale robots (Resbots™) for injection into reservoirs to record their properties.
To apply for this job please visit careers.jobsataramco.eu.