Security Consultant-Application Security

Overview

A position at IBM Consulting is grounded in fostering enduring client relationships and collaborating globally. In this role, you will partner with prominent organizations across various sectors, assisting them in navigating their hybrid cloud and AI transformations. With the backing of our strategic alliances, advanced IBM technology, and Red Hat resources, you will be equipped to implement impactful changes and enhance client outcomes. At IBM Consulting, we believe that curiosity is key to success. You will have the opportunity to question conventional approaches, experiment with innovative concepts, and develop creative solutions that generate tangible results. Our environment prioritizes growth and empathy, focusing on your long-term professional development while appreciating your distinct skills and experiences.

Your Role and Responsibilities

As a Security Consultant with a focus on Application Security, your primary responsibility will be to assist clients in identifying and mitigating application security challenges, risks, and vulnerabilities through various methods, including assessments, workshops, and interviews. You will deliver expert consulting services aimed at analyzing and addressing security incidents, ultimately guiding clients toward enhanced security measures.

Your Key Responsibilities Will Include

• Identify Security Challenges: Conduct assessments, workshops, and interviews to uncover application security challenges, risks, and vulnerabilities, providing actionable recommendations for enhancement.
• Formulate Security Strategies: Leverage security principles and expertise in Application Security technologies, threat models, and DevSecOps concepts to establish business drivers and craft corresponding security strategies, programs, and incident response protocols.
• Address Security Incidents: Offer consulting support to analyze and mitigate security incidents, collaborating closely with clients to execute effective remediation strategies and plans.
• Engage with Clients: Partner with clients to comprehend their security requirements and deliver customized consulting solutions that bolster their overall security framework.
• Implement Security Solutions: Execute security solutions and advise on best practices to help clients achieve an elevated security posture.
  
  

Preferred Education

Master's Degree

Essential Technical and Professional Expertise

• Experience in Application Security: Knowledge of security principles and familiarity with Application Security technologies, including threat models and DevSecOps methodologies.
• Proficient in Security Assessments: Proven experience conducting assessments, workshops, and interviews to pinpoint application security challenges, risks, and vulnerabilities.
• Incident Response Expertise: Background in analyzing and resolving security incidents, including the creation of incident response plans and remediation strategies.
• Security Strategy Formulation: Experience in applying security principles to define business drivers and develop relevant security strategies and programs.
• Understanding of DevSecOps Concepts: Knowledge of DevSecOps best practices to assist clients in enhancing their security posture.
  
  

Desirable Technical and Professional Experience

• Knowledge of Cloud Security: Familiarity with cloud application security technologies and threat models is advantageous for providing consulting services to clients utilizing cloud infrastructure.
• Awareness of Compliance Standards: Understanding of industry-specific compliance regulations and standards, such as HIPAA or PCI-DSS, is beneficial for developing security strategies and programs for clients.
• Experience with Security Tools: Exposure to various security tools and technologies, including vulnerability scanners and penetration testing tools, can enhance your ability to analyze and resolve security incidents.