Security Consultant-Application Security

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

In this role, you'll work in one of our IBM Consulting Client Innovation Centers (Delivery Centers), where we deliver deep technical and industry expertise to a wide range of public and private sector clients around the world. Our delivery centers offer our clients locally based skills and technical expertise to drive innovation and adoption of new technology.

Your role and responsibilities

As a Security Consultant specializing in Application Security, you will help clients understand and address application security issues, risks, and vulnerabilities through expert analysis and guidance. You will provide consulting services to analyze and resolve security incidents, ultimately supporting clients in achieving a superior security posture. Your primary responsibilities will include: * Analyze Security Issues: Conduct interviews, workshops, and assessments to identify application security risks, exposures, and vulnerabilities, and provide recommendations for improvement. * Develop Security Strategies: Apply security principles and knowledge of Application Security technologies, Threat models, and DevSecOps concepts to define business drivers and develop associated security strategies, programs, and incident response plans. * Resolve Security Incidents: Collaborate with clients to analyze and resolve security incidents, providing expert guidance and support to ensure timely and effective remediation. * Provide Remediation Recommendations: Develop and present remediation recommendations and roadmaps to clients, helping them to improve their overall security posture. * Deliver Consulting Services: Provide high-quality consulting services, working closely with clients to understand their unique security needs and delivering tailored solutions to meet those needs.

Required education
Bachelor's Degree

Preferred education
Master's Degree

Required technical and professional expertise

* Exposure to Application Security Technologies: Familiarity with application security technologies, including threat models and DevSecOps concepts, to analyze security issues and develop effective security strategies. * Experience with Security Assessments: Conducting interviews, workshops, and assessments to identify application security risks, exposures, and vulnerabilities, and providing recommendations for improvement. * Knowledge of Incident Response Planning: Understanding of incident response planning and ability to develop associated security strategies, programs, and incident response plans. * Familiarity with Security Strategy Development: Applying security principles to define business drivers and develop associated security strategies, programs, and remediation recommendations. * Understanding of DevSecOps Concepts: Familiarity with DevSecOps concepts and best practices to provide expert guidance and support to clients in achieving a superior security posture.

Preferred technical and professional experience

* Familiarity with Cloud Security: Exposure to cloud security technologies and concepts, including cloud-based threat models and DevSecOps practices, to analyze security issues and develop effective security strategies in cloud environments. * Knowledge of Compliance Frameworks: Understanding of compliance frameworks and regulatory requirements, such as HIPAA or PCI-DSS, to provide expert guidance and support to clients in achieving a superior security posture. * Experience with Security Tools: Exposure to various security tools, including vulnerability scanners and penetration testing software, to conduct security assessments and identify application security risks.

Years of Experience:
7-9