Security Consultant-Application Security

Overview

A position within IBM Consulting is anchored in the establishment of enduring client partnerships and collaborative efforts on a global scale. You will engage with top-tier organizations across various sectors, assisting them in navigating their hybrid cloud and AI transformations. With the backing of our strategic alliances, advanced IBM technologies, and Red Hat, you will possess the resources necessary to instigate significant change and enhance client outcomes. At IBM Consulting, a spirit of inquiry drives achievement. You will be motivated to question conventional methods, seek out innovative ideas, and devise creative solutions that yield tangible results. Our environment prioritizes growth and empathy, focusing on your long-term career progression while appreciating your distinct skills and experiences.

Your Role and Responsibilities

As a Security Consultant with a focus on Application Security, you will assist clients in identifying and addressing application security challenges, risks, and vulnerabilities via assessments, workshops, and interviews. Your consulting services will be vital in analyzing and mitigating security incidents, ultimately helping clients attain an enhanced security posture.

Your Key Responsibilities Include

• Assess Security Challenges: Perform assessments, workshops, and interviews to pinpoint application security challenges, risks, and vulnerabilities, and offer improvement recommendations.
• Formulate Security Strategies: Utilize security principles and knowledge of Application Security technologies, threat modeling, and DevSecOps concepts to establish business drivers and create relevant security strategies, programs, and incident response plans.
• Address Security Incidents: Offer consulting services to investigate and resolve security incidents, partnering with clients to implement effective remediation strategies and roadmaps.
• Engage with Clients: Collaborate with clients to comprehend their security requirements and deliver customized consulting services to enhance their overall security posture.
• Implement Security Solutions: Deploy security solutions and provide insights on best practices to ensure clients maintain a robust security posture.
  
  

Preferred Education

Master's Degree

Essential Technical and Professional Expertise

• Knowledge of Application Security: Familiarity with security principles and Application Security technologies, including threat modeling and DevSecOps concepts.
• Experience with Security Assessments: Proven experience in conducting assessments, workshops, and interviews to uncover application security issues, risks, and vulnerabilities.
• Incident Response Experience: Exposure to the analysis and resolution of security incidents, including the formulation of incident response plans and remediation strategies.
• Security Strategy Formulation: Experience in applying security principles to outline business drivers and develop relevant security strategies and programs.
• Understanding of DevSecOps Concepts: Familiarity with DevSecOps best practices to assist clients in achieving an improved security posture.
  
  

Preferred Technical and Professional Experience

• Knowledge of Cloud Security: Familiarity with cloud application security technologies and threat modeling is advantageous for providing consulting services to clients utilizing cloud infrastructure.
• Understanding of Compliance Standards: A comprehension of industry-specific compliance regulations and standards, such as HIPAA or PCI-DSS, is beneficial in crafting security strategies and programs for clients.
• Experience with Security Technologies: Exposure to a variety of security tools and technologies, such as vulnerability scanners and penetration testing tools, can be beneficial in the analysis and resolution of security incidents.