This is a perfect opportunity for the right person to become a member of a cyber defense team in protecting the nation’s critical infrastructure. The Senior Cyber Defense Engineer will be a core member of the Data and Application Security engineering tower. This role will primarily focus on the Enterprise Data Protection program, with specific ownership over Database Activity Monitoring (DAM) and Imperva product suites (including Imperva Data Security Fabric, DAM, and WAF) .

The role incorporates multiple technologies across data, web application, API protection, Data Loss Prevention (DLP), and AI Protection, while simultaneously driving data security compliance, risk management, and policy governance.

The Senior

Engineer is expected to work closely with teammates within cyber defense, database administration (DBA) teams, application development, internal/external audit groups, and business stakeholders to engineer, deploy, maintain, and optimize the global Imperva and data security infrastructure.

Position Responsibiliti

- esLead the installation, configuration, administration, and architectural engineering of Imperva platfor ms, including Imperva Data Security Fabric (DSF), Database Activity Monitoring (DAM), and Web Application Firewalls (WAF
- ).Develop, optimize, and manage Imperva DAM security polici es, audit rules, custom assessment tests, and classification criteria to monitor sensitive enterprise databases and detect rogue activity, SQL injection, and unauthorized data acces
- s.Manage WAF and API protection technologies (Imperva/WAA

P) to ensure on-premises and cloud-hosted web applications are secured against OWASP Top 10 vulnerabilities, API abuse, and automated bot malicious activitie





- s.Perform database vulnerability assessments and environment health checks; track system capacity, agent footprint stability, and gateway performance to guarantee operational readines
- s.Manage AI Protection solutions (AI Prompt Jailbreak defense, AI Model protection) and DLP technologies including CASB SaaS and Email Security Saa

- S.Use Infrastructure as Code (IaC) tools (e.g., Terraform, KCC) to automate the management and deployment of security rules in a CI/CD pipelin
- e.Coordinate the development, dissemination, and enforcement of information security policies, standards, and procedures in collaboration with IT departments and data custodian
- s.Conduct reviews and compliance audits to ensure the Global Information Security Operations Team conforms to policies, standards, laws, and regulations (e.g., GDPR, CCPA

- ).Investigate security alerts, handle data-centric incident responses, analyze Technology/Enterprise Computing controls, and perform ITIL Incident Problem trackin
- g.Engage closely with Internal Audit, Compliance, external auditors, and Enterprise Computing staff to ensure effective communication and reporting transparency for Global Information Security project

s.

Position Requireme

- ntsA minimum of 8+ years of dedicated engineering experience specializing in Imperva solutions (DSF, DAM, and W AF), including deep hands-on proficiency with rule creation, dashboard management, agent deployment, and reporti




- ng.A minimum of 8+ years of overall experience in information security, information technology, database administration, IT compliance, or IT Internal Aud
- it.Strong technical knowledge and understanding of major database platforms and operating syst ems, including Unix, Linux, Windows, Oracle, MS SQL, and relational/NoSQL data structur
- es.Working knowledge supporting commercial cloud provider environments (AWS, Azure, GCP) alongside cloud-native database architectur
- es.Working knowledge of Infrastructure as Code (IaC) tools such as Terraform and K
- CC.Working knowledge with SIEM technologies, SSL Inspection, Access Control, Policy Management, and TCP/IP layer 3-7 networking structur
- es.Detailed understanding of Industry Security standards and Risk Management frameworks (e.g., ISO 27001/27002, NIST Cyber Security Framework, and ISMS implementation
- s).Excellent project management, written, and oral communication skills; ability to translate complex database security events into explicit risk assessments for stakeholde
- rs.Operating knowledge of ITIL processes (ITIL Certification a plu
- s).Knowledge of programming/scripting languages is a plus (e.g., Python, Java, SQL, Shell scriptin

g).

Formal

Education, Certifications and Competen

- ciesBA/BS in Engineering, Computer Science, Information Security, Information Systems, or related work experie
- nce.8+ years of hands-on experience with cyber security application administration, database security operational practices, and risk managem
- ent.Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or equivalent certifications (or actively working towards them) is a p

lus.

📌 Senior Cyber Defense Engineer Data Protection (Bengaluru)
🏢 CME Group
📍 Bengaluru