Security Consultant-Application Security

Overview

Embark on a rewarding journey with IBM Consulting, where our focus is on fostering enduring relationships with clients and collaborating effectively on a global scale. You'll engage with top-tier organizations across diverse sectors, guiding them in their hybrid cloud and AI transformations. Supported by our strategic alliances, advanced IBM technology, and Red Hat, you will be equipped to facilitate impactful change and enhance client outcomes. At IBM Consulting, we thrive on curiosity and innovation, encouraging you to challenge conventional thinking, pursue new ideas, and design creative solutions that yield tangible results. Our commitment to growth and empathy prioritizes your long-term career advancement while recognizing your distinctive skills and experiences.

Your Responsibilities

In your role as a Security Consultant with a focus on Application Security, you will assist clients in identifying and mitigating application security challenges, risks, and vulnerabilities through comprehensive assessments, workshops, and interviews. Your consulting expertise will be instrumental in analyzing security incidents and guiding clients toward establishing a robust security framework.

Key Responsibilities Include

• Identify Security Issues: Perform assessments, workshops, and interviews to uncover application security challenges, risks, and vulnerabilities, providing actionable recommendations for enhancement.
• Formulate Security Strategies: Leverage your knowledge of security principles, Application Security technologies, threat models, and DevSecOps concepts to articulate business drivers and construct relevant security strategies, programs, and incident response frameworks.
• Address Security Incidents: Deliver consulting services to analyze and remedy security incidents, collaborating closely with clients to implement effective remediation strategies and roadmaps.
• Engage with Clients: Partner with clients to comprehend their security requirements and deliver customized consulting services that enhance their overall security posture.
• Implement Security Solutions: Execute security solutions and offer best practice guidance to empower clients in achieving an elevated security posture.
  
  

Preferred Education

Master's Degree

Essential Technical and Professional Expertise

• Application Security Knowledge: Familiarity with security principles and insights into Application Security technologies, including threat models and DevSecOps practices.
• Experience in Security Assessments: Proven track record in conducting assessments, workshops, and interviews to detect application security issues, risks, and vulnerabilities.
• Incident Response Experience: Background in analyzing and addressing security incidents, with the ability to develop incident response plans and remediation strategies.
• Security Strategy Formulation: Demonstrated experience in applying security principles to define business drivers and craft relevant security strategies and programs.
• Understanding of DevSecOps: Knowledge of DevSecOps best practices and concepts to assist clients in achieving a robust security posture.
  
  

Desirable Technical and Professional Experience

• Cloud Security Awareness: Familiarity with cloud-based application security technologies and threat models, enhancing your ability to provide consulting services for clients utilizing cloud infrastructure.
• Compliance Knowledge: Understanding of industry-specific compliance regulations and standards, such as HIPAA or PCI-DSS, which will aid in developing effective security strategies and programs for clients.
• Experience with Security Technologies: Exposure to a variety of security tools and technologies, including vulnerability scanners and penetration testing tools, to effectively analyze and resolve security incidents.