Senior Consultant - Cybersecurity at IT-Services · Bengaluru (Bangalore) · 4 - 7 years · ₹38L - ₹40L / yr · Posted 1 Oct 2025

Job Description
Who we are looking for:
A Senior consultant with proven technical and consultative experience, fluent Japanese language proficiency, and expected to be strong in both technical and interpersonal skills. A Senior Consultant must be a proven self-starter with the ability to problem-solve, communicate, participate in diverse project teams from a technical perspective, and interface effectively with customers, vendor partners, and colleagues. You will actively contribute to improving operational efficiency on projects and internal initiatives. Deliver timely engagements and work closely with Practice Directors to drive training and education, career development, performance development, and collaboration across the team. In line with Optiv’s commitment to quality, you will confirm that work is of the highest quality as per Optiv’s quality standards, by reviewing the work provided by other members.
How you’ll make an impact:
• Comfortably deliver solo-based work or act as "point" for complex projects
• Acts as technical escalation point to assist other consultants
• Lead in creation, development and delivery of custom security solutions
• Lead security and compliance program-related development and implementation efforts
• Design, implement and educate on specific security processes
• Effectively provide knowledge transfer and post-engagement support activities as necessary
• Excellent team communicator
• Mentor less experienced consultants
• Maintain professional and technical knowledge by attending educational workshops; reviewing professional publications; establishing personal networks; participating in professional associations such as ISACA, ISC2 etc.
• Consistently complete administrative project tasks like time and expense entry, status reporting, and project completion reporting
• Support and occasionally lead practice related development efforts including training and awareness, performance development and cyber strategy accelerators
• Act as contributor in Optiv communities for solutions of focus.
Qualifications
• Bachelor's degree and related work experience
• Proven security architecture experience
• Strong knowledge of multiple security concepts and methods such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architectures and governance
• Strong understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, UNIX, mainframe), security technologies (firewalls, IDS/IPS, etc.) and application programming/scripting languages (C, Java, Perl, Shell)
• Strong understanding of regulatory requirements and compliance issues affecting clients related to privacy and data protection, such as PCI DSS, GLBA, Basel II, EU Data Protection Directive, International Cross Border, and U.S. State Data Privacy Laws
• Expert knowledge of using Microsoft Office
• Ability to build relationships with and influence other functional areas
• Well-developed negotiation skills
• Ability to build consensus
• Solid business acumen and basic project management expertise.
• Ability to manage multiple tasks in parallel
• Willingness to travel to meet client needs.
Good-to-Have Criteria
- Professional certifications such as CISSP, CISM, CISA, CEH, or equivalent
- Exposure to cloud security platforms (AWS, Azure, GCP)
- Experience in data privacy & cross-border compliance projects
- Advanced skills in automation, scripting, or security orchestration
- Previous consulting experience with global clients
- Participation in professional associations (ISACA, ISC2, etc.)
Mandatory Criteria:
- Need candidate having Fluent Japanese language proficiency.
- Need candidate from Cybersecurity companies Only.
- Certifications required by the candidate - (Either from given two) - ISO 27001 or CISSP
- Candidate should have experience in Security architecture & Consulting
- Candidate should have Strong expertise in networking, operating systems (Windows/UNIX/mainframe), firewalls, IDS/IPS
- Candidate should have Knowledge of scripting/programming languages (C, Java, Perl, Shell)
- Candidate should have Hands-on experience in vulnerability assessments, incident response, policy creation, governance
- Candidate should have Strong understanding of regulatory frameworks (PCI DSS, GLBA, Basel II, EU Data Protection, US State Privacy Laws)
- Candidate should have Excellent client-facing and stakeholder management skills
- Candidate should have Ability to mentor, lead projects, and work in diverse teams
- Candidate should be Willing to travel as per business/project requirements

Similar jobs (10)
📢 We're Hiring | Cybersecurity Consultant | Gurugram
Role: Cybersecurity Consultant
Experience: 7+ Years
Location: Gurugram, Haryana
We are looking for experienced cybersecurity professionals with strong hands-on expertise in security operations, infrastructure security, vulnerability management and incident response.
🔹 Key Responsibilities
- Manage and strengthen security controls across enterprise IT infrastructure.
- Perform vulnerability assessments, remediation tracking and patch management.
- Monitor security alerts, investigate incidents and support threat hunting.
- Implement and manage SIEM, EDR and endpoint security solutions.
- Work on IAM controls, including MFA, SSO, RBAC and privileged access management.
- Support network security, including firewalls, IDS/IPS, segmentation and secure remote access.
- Assist with backup, recovery, disaster recovery and business continuity activities.
- Maintain security documentation, remediation evidence and audit compliance.
🔹 Required Skills
- 7+ years of relevant experience in cybersecurity, security engineering or security operations.
- Hands-on experience with SIEM tools such as Microsoft Sentinel, Splunk, QRadar or ArcSight.
- Knowledge of Microsoft security technologies, including Defender and Entra ID, is preferred.
- Experience with vulnerability management tools such as Tenable, Qualys or CrowdStrike Falcon.
- Strong understanding of incident response, threat hunting, network security and security remediation.
- Experience with EDR, IAM and enterprise security controls.
⭐ Preferred: OT/ICS security, IEC 62443, NIST frameworks, backup/DR and network segmentation experience.
📩 Interested candidates: Please share your updated cv at: snigdhaattheratebeanhr.com
The recruiter has not been active on this job recently. You may apply but please expect a delayed response.
Job Title: Technical Consultant – Netskope & SSE (L3 Engineer)
Company: Inflow Technologies
Location: Bangalore (Work From Office, 5 days/week)
About Inflow Technologies:
Inflow Technologies, founded in 2005 and headquartered in Bangalore, is a leading value-added IT infrastructure distributor across Networking, Cybersecurity, Unified Communications, AIDC, Surveillance, Server, Storage, and Software. With 20+ locations across India/South Asia and a 120+ member certified technical team, Inflow supports channel partners through the full solution sales cycle. Annual run-rate revenue: USD 700+ Million.
Position Overview:
We're looking for an experienced Technical Consultant (L3 Engineer) specializing in Netskope and Security Service Edge (SSE) technologies. You'll own end-to-end architecture, design, deployment, and optimization of cloud security solutions — acting as a trusted advisor who translates business requirements into secure, scalable technical architectures, and resolves advanced issues through root cause analysis.
Key Responsibilities:
Implementation & Deployment
- Deploy Netskope CASB (API + Proxy), SWG, DLP (Email/Web/Network), ZTNA (Private Access), NPA, and Prime Advantage package
- Configure traffic steering (Client, GRE, IPsec), policy rules (DLP, URL filtering, access control), and dashboard fine-tuning
- Perform agent rollout across Windows, Mac, and Mobile
Architecture & Design
- Design a secure access architecture for remote users, branch offices, and cloud workloads
- Integrate with identity providers (Azure AD, Okta) and existing security stack (Firewall, Proxy, SIEM)
- Integrate Netskope with SIEM (Splunk, QRadar), EDR tools, and email security
- Configure SSO/SAML authentication
Required Qualifications:
- Bachelor's degree in IT/CS or related field
- 6–8 years of experience (L3 level)
- Preferred certifications: Netskope Certified Cloud Security Architect (NCSA), NSK 100/200/300, CCNA/Security+ (good to have)
Interview Process: 2 rounds (Virtual) + Final round (Face-to-Face)
Hiring: Manager – Business Development | Digital Trust & Security (DT&S)
Are you a seasoned Business Development professional with experience in Cybersecurity Assurance, Compliance, and Digital Trust Services? We are looking for a dynamic leader to drive strategic growth, build high-impact partnerships, and expand market presence across India.
📍 Location: Pan India (WFH/Remote)
💼 Employment Type: Full-Time
📅 Workdays: Monday – Friday
Key Responsibilities
🔹 Strategic Sales Leadership
- Drive regional and national revenue growth for Digital Trust & Security Assurance and Training Services.
- Manage sales forecasting, pipeline development, and target achievement.
- Work closely with operations and delivery teams to create customized client solutions.
Partnership Development & Alliances
- Build and manage strategic partnerships with consulting firms, technology companies, training organizations, industry associations, and government bodies.
- Develop reseller and affiliate programs to expand market reach.
- Manage partnership agreements, MoUs, and alliance performance metrics.
Market Intelligence & Growth Initiatives
- Track cybersecurity, compliance, and regulatory trends.
- Identify new business opportunities aligned with evolving industry standards.
- Represent the organization at industry events, conferences, and networking forums.
What We're Looking For
- 5+ years of B2B Business Development experience
- Minimum 2 years in Cybersecurity Services / Assurance / Compliance domain
- Prior experience in Cybersecurity Assurance, QSA, PCI DSS, ISO 27001, or related services is mandatory
- Strong expertise in strategic partnerships and key account management
- Excellent consultative selling, negotiation, and stakeholder management skills
- Ability to engage and influence CXO-level decision makers
- Experience with CRM platforms and sales analytics tools
Education
Bachelor's Degree in Business, Engineering, Science, or related field
MBA/PGDM in Marketing, Sales, or related specialization preferred
The recruiter has not been active on this job recently. You may apply but please expect a delayed response.
Technical Consultant – Palo Alto Networks
Company: Inflow Technologies
Website: https://inflowtechnologies.com
About: Founded in 2005, Inflow Technologies is a niche IT Infrastructure Distribution Services player offering Value Added Distribution in Networking, Cybersecurity, UCC, AIDC, Surveillance, Server, Storage & Software across India/South Asia. HQ in Bangalore, 20+ locations, 120+ certified technical resources, USD 700M+ annual run-rate revenue.
Location: Bangalore
Work Mode: Work From Office
Work Days: 5 days/week
Position Overview
Senior-level, high-impact technical role driving architecture, implementation, and optimization of Palo Alto Networks' enterprise security solutions. Acts as SME bridging security engineering and client-facing technical consultation.
Key Responsibilities
- Design, deploy, and optimize Palo Alto NGFW solutions in complex enterprise environments
- Provide L3/L4 escalation support for Palo Alto firewall, Prisma, and Cortex-related issues (PAN-OS)
- Architect and implement: Prisma Access (SASE/ZTNA), Prisma Cloud (CSPM, CWPP, CNAPP), Cortex XDR/XSOAR
- Advanced troubleshooting: traffic flow issues, security policy mismatches, VPN (IPSec/GlobalProtect), threat prevention, URL filtering, SSL decryption
- Lead end-to-end implementation projects (design, deployment, migration, optimization)
- Integrate Palo Alto solutions with SIEM/SOC platforms, IAM (SAML, Azure AD, Okta), and public cloud (AWS, Azure, GCP)
- Manage HA, clustering, and firewall upgrades
- Liaise with Palo Alto TAC for critical issue resolution
- Conduct security assessments, best practice reviews, and performance tuning
- Maintain technical documentation (HLDs/LLDs, SOPs, runbooks)
- Mentor L1/L2 engineers
- Participate in change management, maintenance windows, and incident response
Requirements
- Experience: 6–12 years in network and security engineering (min 6 years)
- Education: Bachelor's degree in Computer Science, Engineering, or related field
Process
- Interview Rounds: 2 Virtual + Final Face-to-Face
Role overview
Antier Solutions is hiring a Business & Solutions Consultant to lead discovery, solution design and delivery alignment for a large enterprise client.
The role is domain agnostic: we want a structured problem-solver who can step into any industry, learn it fast and turn business goals into technology solutions our engineering teams can build.
Item Detail
- Position Business & Solutions Consultant
- Engagement Enterprise client account (client-facing)
- Reports to Delivery Head / Practice Lead
- Experience 6–12 years in consulting or digital transformation
- Preferred background Big 4 or equivalent top-tier consulting firm
- Location Mohali / Chandigarh (hybrid; client travel as needed)
Key responsibilities
Client engagement and discovery
• Act as the trusted advisor to client senior stakeholders (CXO, VP, Director level).
• Run discovery workshops, stakeholder interviews and process walkthroughs to capture business goals, pain points and constraints.
• Quickly build working knowledge of the client's industry, operating model, regulations and competitors.
Business analysis and solution design
• Convert business needs into business requirement documents, functional specifications, user stories and acceptance criteria.
• Map as-is and to-be processes, run gap and fit-gap analysis, and define the target operating model where needed.
• Work with architects and engineering leads to shape technically feasible solutions across web, mobile, cloud, data and AI platforms.
• Build business cases, ROI and cost-benefit models, and solution roadmaps with clear phasing.
Delivery and governance
• Own scope, requirements traceability and change control; keep business and technology teams aligned through the delivery cycle.
• Support sprint planning, backlog prioritisation, UAT and go-live readiness.
• Track risks, dependencies and assumptions; escalate early with a recommended mitigation.
• Prepare steering committee decks, status reports and executive summaries.
Pre-sales and growth
• Support proposals, RFP/RFI responses, solution presentations and estimates with the Business Development team.
• Identify upsell and expansion opportunities within the client account.
• Join client and prospect meetings with the sales team as the business and solution expert, and lead technical-business discovery calls to qualify opportunities.
• Translate client needs into compelling solution narratives, demos, proof-of-concept scopes and value propositions that differentiate Antier.
• Prepare effort estimates, commercial models, pricing inputs and delivery plans with delivery and finance teams.
• Co-own large proposals and enterprise deal pursuits: win themes, executive presentations and defense of the solution during client negotiations.
• Build reusable sales assets such as case studies, capability decks, solution accelerators and industry point-of-view papers.
• Use consulting networks and industry knowledge to open doors, support lead generation and strengthen relationships with enterprise decision makers.
• Provide market and competitor insights to the leadership team to sharpen go-to-market strategy and positioning.
• Support a smooth handover from sale to delivery so that commitments made in pre-sales are executed.
Required qualifications and experience
• Bachelor's degree in engineering, business or a related field; MBA or equivalent postgraduate degree from a reputed institute preferred.
• 6–12 years of experience in management or technology consulting, with at least 3 years at a Big 4 firm (Deloitte, EY, KPMG, PwC) or a comparable firm such as Accenture, McKinsey, BCG or Bain.
• Proven record on client-facing engagements for large enterprises across more than one industry or domain.
• Hands-on experience in requirements gathering, process mapping and solution definition for technology or digital transformation programs.
• Experience working with engineering teams on delivery, in Agile or hybrid models.
• Prior exposure to enterprise platforms, data and analytics, cloud, AI or blockchain programs is a strong plus.
• Demonstrated experience supporting pre-sales or business development: proposals, RFP responses, solution pitches and client presentations that contributed to deal wins.
Skills and competencies
Area What we look for
Structured problem solving Hypothesis-driven thinking, issue trees, MECE analysis, root-cause analysis
Domain agility Learns a new industry within weeks and speaks credibly with business owners
Communication Crisp writing, executive presentations, workshop facilitation, active listening
Stakeholder management Handles senior and conflicting stakeholders; builds trust and drives decisions
Technical fluency Understands architecture, APIs, integrations, data flows and cloud basics well enough to challenge and translate
Analytical tools Advanced Excel and PowerPoint; Jira, Confluence, Visio or Lucidchart; working knowledge of Power BI or Tableau
Delivery discipline Agile and Scrum, backlog management, risk and change management
Ownership Works independently on ambiguous problems and takes accountability for outcomes
Good to have, and what we offer
Good to have
• Certifications such as CBAP, PMP, PMI-PBA, CSPO or TOGAF.
• Experience with global clients across the US, UK, Middle East or APAC.
• Exposure to RFP and proposal writing for technology services.
What we offer
• Direct exposure to a large enterprise client and senior decision makers.
• Close collaboration with Antier's architects and engineering teams on AI, blockchain, fintech and enterprise platforms.
• A defined growth path into Principal Consultant or Client Partner roles.
• Competitive compensation aligned to Big 4 experience, with performance-linked rewards.
Cyber Security Expert
We are seeking a highly skilled Cyber Security Expert with strong expertise in AI-driven
security tools and ethical hacking techniques. The ideal candidate will safeguard our digital
infrastructure, proactively identify vulnerabilities, and design intelligent defense mechanisms
against evolving cyber threats.
Key Responsibilities
• Threat Analysis: Identify, assess, and mitigate potential risks across systems and
networks.
• AI Security Tools: Deploy and manage AI-based solutions for intrusion detection,
anomaly monitoring, and predictive threat modelling.
• Ethical Hacking: Conduct penetration testing, simulate cyber-attacks, and recommend
remediation strategies.
• Incident Response: Lead investigations, contain breaches, and implement recovery
measures.
• Compliance & Governance: Ensure adherence to data protection laws, industry
standards, and organizational policies.
• Training & Awareness: Educate employees on best practices and emerging threats.
Required Skills & Qualifications
• Proven hands-on experience with AI-powered security platforms (e.g., SIEM, SOAR,
ML-based anomaly detection).
• Strong knowledge of ethical hacking tools (Metasploit, Burp Suite, Kali Linux, etc.).
• Expertise in network security, firewalls, IDS/IPS, and endpoint protection.
• Familiarity with cloud security (AWS, cloud platform).
• Proficiency in scripting languages (Python, Bash, PowerShell) for automation.
• Solid understanding of cryptography, authentication protocols, and secure coding
practices.
Position: Manager – Information Security
Experience: 8+ years (with minimum 3 years in leadership roles)
Location: Gurgaon
Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor
Key Responsibilities:
? Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
? Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).
? Oversee security risk assessments, audits, and remediation plans across IT and business units.
? Manage a team of security professionals; mentor, coach, and evaluate performance.
? Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.
? Lead incident response, RCA, and post-mortem reviews.
? Drive security awareness and training programs across the organization.
? Manage security budgets, vendor relationships, and contract negotiations.
Technical Skills:
? Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.
? Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).
? Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.
mail updated resume with salary details-
email: etalenthire[at]gmail[dot]com
satish: 88O 27 49 743
website: www.glansolutions.com
The recruiter has not been active on this job recently. You may apply but please expect a delayed response.
Position: Technical Lead – Forcepoint (Data & Cloud Security)
Company: Inflow Technologies
Location: Bangalore
Work Mode: Work From Office | 5 days/week
Experience Required: Minimum 6 years
Interview Process: 2 rounds (Virtual + Final Face-to-Face)
About Inflow Technologies
Founded in 2005, Inflow is a value-added IT infrastructure distributor covering Networking, Cybersecurity, UC&C, AIDC, Surveillance, Server, Storage & Software across India/South Asia. HQ'd in Bangalore with 20+ locations, backed by a 120+ certified technical team, and ~USD 700M+ annual run-rate revenue.
Position Overview
Acting as the Forcepoint subject matter expert, this role owns end-to-end design, deployment, and troubleshooting of enterprise data and cloud security architectures — spanning DLP, SWG, CASB, and SSE/ZTNA. The role sits at the intersection of solution architecture and hands-on L3 execution: defining security policies, configuring network proxies, and resolving complex support escalations in a client-facing, consultative capacity.
Core Products
- Forcepoint DLP (Endpoint, Network, Web, Email)
- Forcepoint Web Security
- Forcepoint Email Security
- Forcepoint CASB
- Forcepoint Suite / Forcepoint One
- Forcepoint Cloud Security / SSE (incl. ZTNA)
- Forcepoint DSPM
Key Responsibilities
1. Solution Design & Architecture
- Design enterprise architectures: DLP (Endpoint + Network + Discovery), Web Security (Proxy/Hybrid/Cloud), CASB & SaaS protection, Forcepoint Suite/One
- Install & configure Management Server, Policy Engine, Detection Servers, Protectors (Email/Web/Network), Endpoint agents (Windows/Mac)
- Implement EDM/IDM/OCR and data classification policies
2. Web Security (SWG)
- Deploy on-prem (V-series appliances) and cloud SWG/hybrid mode
- Configure transparent/explicit proxy, SSL inspection, URL filtering
3. Email Security
- Configure SMTP routing, DLP email policies, encryption & compliance rules
4. Advanced Policy Configuration
- Design/tune DLP policies (structured + unstructured data), web filtering (user/group/app-based), cloud app governance rules
5. L3 Troubleshooting & RCA (Critical)
- Handle: DLP not detecting over HTTPS, endpoint agent communication failures, web proxy latency/SSL failures, policy not applying to users, email DLP bypass
- Approach: log analysis (Policy Engine, endpoint, web), packet capture/traffic analysis, root cause identification & permanent fix
Qualifications & Certifications (Preferred)
- Bachelor's degree (IT/CS or related)
- Forcepoint Certified Administrator (FCA)
- Forcepoint DLP Specialist
- CCNA / Security+ (nice-to-have)
The recruiter has not been active on this job recently. You may apply but please expect a delayed response.
We are looking for a highly experienced Senior Salesforce Consultant / Salesforce Architect with strong expertise in Salesforce architecture, solution design, enterprise discovery, platform assessment, data analysis, integrations, and business process transformation.
The consultant will bring deep Salesforce platform expertise to the discovery and transformation team, supporting requirements gathering, assessment of existing Salesforce environments, data and process analysis, platform rationalization, and evaluation of Salesforce as a potential target platform.
The ideal candidate should be comfortable engaging with both business and technical stakeholders and translating complex business requirements into practical Salesforce capabilities and target-state solutions.
Lead Data Security Solution Engineer
Exp: 10+ years
Rate: 35 LPA
Location: Remote
Time zone: ET (US Eastern time)
Shift: Night Shift
Type: Fulltime
Responsibilities:
1. Technical and Database Assessment
Review Data In-Licensing requirements, workflow maps, data flows, data lineage, entitlement rules, and dependency records.
Assess relational database platforms, schemas, connectivity methods, interfaces, drivers, service identities, query patterns, and downstream consumption.
Identify where licensed data is stored, transformed, replicated, extracted, cached, archived, or backed up.
Assess current database security capabilities and identify gaps, constraints, risks, and prerequisites.
2. Data-Level Authentication and Identity Integration
Assess authentication for named users, service identities, workloads, and analytical tools accessing databases.
Evaluate OAuth/OIDC or other identity- and token-based authentication directly to the database where supported by the selected technology.
Design integration between enterprise identities, security groups, project groups, database principals, roles, and policy engines.
Reduce reliance on shared or long-lived credentials where feasible and define secure credential or token handling for unavoidable exceptions.
Align with tools currently available and identify gaps if any,
3. Fine-Grained Authorization and Data Firewalling
Design database-level controls that restrict access to explicitly authorized users, groups, services, projects, or licensing populations.
Design and implement row-level security, column-level security, dynamic masking, views, policy-based filtering, or equivalent controls as appropriate.
Define isolation patterns for different licensed datasets and agreements while preserving permitted platform use for other users.
Ensure controls are consistently enforced as close to the data layer as technically feasible and are not solely dependent on application logic.
4. Auditing, Monitoring, and Traceability
Design database auditing to capture who accessed data, what was accessed, when access occurred, and which identity or service was used.
Define logging for queries, exports, failed access attempts, permission changes, and privileged activity where supported and required.
Integrate audit telemetry with appropriate monitoring and reporting capabilities and define retention and evidence requirements.
Validate that audit records are searchable, attributable, protected from inappropriate modification, and useful for investigation.
5. Data Lifecycle, Revocation, and Deletion
Design controls for access revocation when users change roles, leave a project, or when licensing rights expire.
Design methods to identify and remove licensed data from primary stores and relevant downstream copies, extracts, caches, or derived stores.
Address deletion implications for referential integrity, backups, archives, replication, recovery processes, and downstream consumers.
Define validation, exception handling, and evidence mechanisms to demonstrate that required deletion activities were completed.
6. Solution Architecture and Engineering
Translate requirements into current-state and target-state architectures, technical specifications, security patterns, and implementation plans.
Compare solution options and document trade-offs across security, feasibility, performance, scalability, operability, cost, and technology constraints.
Define database connectivity, policy-enforcement, identity, audit, monitoring, lifecycle, and integration components.
Collaborate with database, IAM, security architecture, infrastructure, application, data platform, governance, and scientific teams.
7. POC Design and Execution
Select suitable relational database and workflow candidates that represent Data In-Licensing scenarios and material technical risks.
Define POC architecture, test data, test identities, success criteria, negative tests, performance considerations, and rollback approach.
Implement and validate identity-based authentication, fine-grained authorization, data firewalling, auditing, access revocation, and deletion scenarios.
Document outcomes, limitations, operational considerations, reusable patterns, and recommendations for broader adoption.
What we expect:
Expected Deliverables
Technical assessment of databases, integrations, identities, and data flows
Current-state database security and capability assessment
Target-state data security architecture and detailed technical design
Database authentication and identity-integration design
Row-level, column-level, masking, and policy-enforcement design
Data firewalling and licensed-dataset isolation pattern
Audit, monitoring, traceability, and reporting design
Access revocation, retention, lifecycle, and deletion design
Solution options, feasibility, gap, dependency, and risk assessment
POC architecture, implementation, test results, and recommendations
Reusable implementation patterns and operational handover documentation
Required Technical Skills and Experience
Strong hands-on experience with relational databases, SQL, database architecture, schemas, roles, privileges, and access paths.
Practical experience implementing database-level authorization, including row-level and column-level controls or equivalent fine-grained mechanisms.
Strong knowledge of database authentication, IAM, OAuth 2.0, OIDC, tokens, service identities, workload identities, and secrets management.
Experience designing secure database connectivity and integrations for applications, analytical tools, APIs, ETL/ELT, and data pipelines.
Experience with database auditing, query/activity monitoring, centralized logging, alerting, and investigation support.
Understanding of data lineage, lifecycle, retention, revocation, deletion, backup, archive, and recovery implications.
Ability to evaluate heterogeneous database technologies and design platform-appropriate controls.
Strong architecture, engineering, troubleshooting, documentation, and stakeholder-collaboration skills.
Nice to have:
Experience with enterprise data platforms, cloud or hybrid databases, data catalogs, access governance, and policy-enforcement technologies.
Experience in pharmaceutical research, scientific data, intellectual property protection, data licensing, or another regulated environment.
Experience designing and executing security POCs and converting validated patterns into production-ready designs.
Knowledge of privacy, contractual-use restrictions, segregation, and evidence requirements affecting licensed data.









