We are seeking an experienced Security Professional to provide technical leadership and hands-on expertise across Data Security, IBM Data Activity Monitoring (DAM), Cloud Security, Database Security, Application Security, Kubernetes/EKS, IAM, and enterprise security integrations .

Security SME will be responsible for the architecture, design, implementation, integration, rollout, operation, troubleshooting, hardening, and continuous improvement of the Cloud Security, DAM Appliance and broader data-security environment. SME role will work closely with the practice teams to ensure security controls align with Zero Trust, least privilege, defense-in-depth, regulatory requirements, and enterprise security standards .

Key Responsibilities.

- Serve as the Security SME for IBM Data Activity Monitoring (DAM) and Cloud Security , providing end-to-end expertise across security architecture, solution design, implementation, configuration, integration, troubleshooting, and operational support.
- Lead the implementation, rollout, onboarding, and operationalization of IBM DAM across enterprise applications, databases, data sources, APIs, and critical business use cases, ensuring appropriate monitoring, auditability, and security coverage.
- Design, implement, and maintain DAM security policies, monitoring rules, roles, entitlements, data-access controls, authorization mechanisms, and security baselines aligned with enterprise security and compliance requirements.
- Perform DAM platform health checks, performance monitoring, capacity planning, tuning, troubleshooting, optimization, and lifecycle management to maintain platform stability, availability, and security.
- Lead the onboarding of applications, databases, data sources, and new business use cases into DAM, defining appropriate monitoring requirements, access controls, audit policies, and security controls.
- Manage vulnerability remediation, security patching, configuration hardening, version upgrades, and technology lifecycle activities across the DAM technology stack.
- Provide L2/L3 technical support and troubleshooting for complex IBM DAM, E-STAP, EKS/Kubernetes, DAM appliances, agents, database connectivity, policies, and security integrations , including incident investigation and root-cause analysis.
- Design and implement secure access controls for databases, applications, APIs, cloud workloads, and enterprise data platforms , applying Zero Trust, least privilege, need-to-know, and segregation-of-duties principles .
- Conduct periodic access reviews and entitlement assessments to identify excessive, inappropriate, dormant, orphaned, or conflicting access and coordinate remediation with application, database, IAM, and business owners.




- Develop and maintain enterprise data-security standards, technical security controls, configuration baselines, SOPs, operational runbooks, troubleshooting guides, and knowledge articles .
- Review cloud and hybrid-cloud architectures to identify security risks, vulnerabilities, trust-boundary issues, excessive privileges, insecure configurations, data-exposure risks, and integration weaknesses, providing actionable remediation recommendations.
- Support cloud migration and transformation initiatives by embedding security architecture, data protection, identity and access management, encryption, monitoring, compliance, and regulatory requirements into solution designs.
- Apply Zero Trust, defense-in-depth, secure-by-design, least privilege, and risk-based security principles across cloud, database, Kubernetes/EKS, application, and enterprise data environments.
- Perform threat modeling and security assessments for applications, APIs, databases, cloud workloads, Kubernetes/EKS environments, and enterprise data platforms using STRIDE, attack-surface analysis, abuse-case analysis, trust-boundary analysis, and threat identification .
- Identify attack vectors, vulnerabilities, architectural weaknesses, trust-boundary violations, security-control gaps, and potential business impacts , translating findings into actionable security requirements and remediation plans.
- Conduct security architecture and solution-design reviews covering authentication, authorization, privileged access, network segmentation, data protection, encryption, logging, monitoring, API security, and third-party integrations.
- Integrate threat-modeling and security-review outcomes into architecture, solution design, application development, cloud migration, and security-control implementation , ensuring security requirements are addressed throughout the technology lifecycle.
- Partner with application, development, architecture, cloud, infrastructure, database, DevOps, and platform teams to embed security-by-design principles and provide technical security guidance throughout project delivery.
- Investigate DAM security events and incidents , perform root-cause analysis, coordinate remediation, and implement permanent corrective actions to prevent recurrence and improve overall security posture.
- Support risk assessments, vulnerability assessments, audits,



compliance reviews, control assessments, and remediation tracking related to DAM, cloud, database, and enterprise data security.
- Participate in solution architecture reviews, proof-of-concepts, technical evaluations, technology selections, and implementation activities , providing security recommendations and technical assurance.
- Drive continuous improvement initiatives to strengthen DAM and data-security posture, improve monitoring and visibility coverage, increase operational efficiency, automate repetitive security processes, and enhance platform reliability.
- Prepare and present weekly and monthly security-status reports covering implementation progress, risks, vulnerabilities, incidents, issues, remediation activities, key metrics, dependencies, and deliverables.
- Maintain current knowledge of IBM Security technologies, DAM capabilities, cloud-security technologies, Kubernetes/EKS security, emerging threats, vulnerabilities, regulatory requirements, and industry best practices , recommending improvements to strengthen the enterprise security posture.

Required Skills & Experience
- 10+ years of Cybersecurity / IAM / Data Security experience with robust enterprise security exposure.
- Expert hands-on experience with IBM Guardium / IBM Data Activity Monitoring (DAM), including architecture, implementation, configuration, policies, monitoring, onboarding, troubleshooting, and operations.
- Strong expertise in IBM Guardium S-TAP / E-STAP, database activity monitoring, sensitive-data monitoring, and security policy management.
- Good knowledge of Database Security, including PostgreSQL, and MySQL.
- Strong expertise in IAM, PAM, authorization, entitlement management, and least privilege.
- Strong experience securing Kubernetes / Amazon EKS, including RBAC, secrets, service accounts, network policies, and workload security.
- Experience integrating DAM, IAM, PAM, SIEM/SOC, vulnerability-management, and enterprise security platforms.
- Strong understanding of Zero Trust, defense-in-depth, encryption, key management, secrets management, and data protection.
- Threat Modeling experience, including STRIDE, attack-surface analysis, threat identification, risk assessment, security control mapping, and remediation recommendations across cloud, applications, APIs, databases, and data platforms.
- Proven experience in security hardening, vulnerability remediation, incident troubleshooting, access reviews, risk assessments, and compliance.
- Strong L2/L3 troubleshooting, technical leadership, architecture, documentation, and stakeholder-management capabilities.

Certifications
- AWS Security Specialty
- CCSP
- IBM DAM Certifications

📌 Security Consultant (Bengaluru)
🏢 Tech Mahindra
📍 Bengaluru