Security Consultant-Application Security

Introduction

Embarking on a career with IBM Consulting means engaging in long-lasting client partnerships and fostering collaboration on a global scale. You will have the opportunity to work with prominent companies across diverse sectors, assisting them in navigating their hybrid cloud and AI transformations. With the backing of our strategic alliances, cutting-edge IBM technology, and Red Hat, you'll be equipped to instigate significant change and enhance client outcomes. At IBM Consulting, a spirit of curiosity is the cornerstone of success. You will be encouraged to question the status quo, pursue innovative ideas, and devise creative solutions that yield tangible results. Our culture prioritizes growth and empathy, emphasizing your long-term career advancement while appreciating your distinct skills and experiences.

Your Role And Responsibilities

As a Security Consultant focusing on Application Security, your role will involve assisting clients in identifying and mitigating application security challenges, risks, and vulnerabilities through expert analysis and advice. You will deliver consulting services aimed at analyzing and addressing security incidents, thereby aiding clients in achieving an enhanced security posture.

Your Primary Responsibilities Will Include

• Analyze Security Issues: Conduct interviews, workshops, and assessments to pinpoint application security risks, exposures, and vulnerabilities while providing actionable recommendations for improvement.
• Develop Security Strategies: Utilize security principles and knowledge of Application Security technologies, Threat models, and DevSecOps concepts to establish business drivers and formulate corresponding security strategies, programs, and incident response plans.
• Resolve Security Incidents: Partner with clients to analyze and resolve security incidents, offering expert guidance and support to ensure timely and efficient remediation.
• Provide Remediation Recommendations: Create and present remediation strategies and roadmaps to clients, assisting them in enhancing their overall security posture.
• Deliver Consulting Services: Offer high-quality consulting services, collaborating closely with clients to comprehend their specific security requirements and delivering customized solutions to address those needs.
  
  

Preferred Education

Master's Degree

Required Technical And Professional Expertise

• Exposure to Application Security Technologies: Familiarity with application security technologies, including threat models and DevSecOps concepts, to assess security issues and formulate effective security strategies.
• Experience with Security Assessments: Conducting interviews, workshops, and assessments to identify application security risks, exposures, and vulnerabilities while providing recommendations for enhancement.
• Knowledge of Incident Response Planning: Understanding of incident response planning and the capability to develop relevant security strategies, programs, and incident response plans.
• Familiarity with Security Strategy Development: Applying security principles to identify business drivers and develop related security strategies, programs, and remediation recommendations.
• Understanding of DevSecOps Concepts: Familiarity with DevSecOps principles and best practices to offer expert guidance and assistance to clients in achieving an elevated security posture.
  
  

Preferred Technical And Professional Experience

• Familiarity with Cloud Security: Exposure to cloud security technologies and concepts, including cloud-based threat models and DevSecOps methodologies, to evaluate security issues and craft effective security strategies in cloud settings.
• Knowledge of Compliance Frameworks: Understanding of compliance frameworks and regulatory mandates, such as HIPAA or PCI-DSS, to provide expert guidance and support to clients in achieving a superior security posture.
• Experience with Security Tools: Exposure to a variety of security tools, including vulnerability scanners and penetration testing software, to perform security assessments and identify application security risks.