Security Consultant-Application Security

Introduction

Embarking on a career with IBM Consulting means fostering enduring relationships with clients and collaborating on a global scale. You will engage with top-tier companies across various sectors, assisting them in navigating their hybrid cloud and AI transformations. With the backing of our strategic partners, state-of-the-art IBM technology, and Red Hat, you will possess the resources necessary to instigate significant change and enhance client outcomes. At IBM Consulting, we believe that curiosity is the catalyst for success. You will be encouraged to challenge conventional thinking, explore innovative concepts, and develop solutions that yield tangible results. Our commitment to growth and empathy prioritizes your long-term professional development while recognizing your distinct skills and experiences.

Your Role And Responsibilities

As a Security Consultant with a focus on Application Security, you will assist clients in comprehending and tackling application security challenges, risks, and vulnerabilities through expert analysis and strategic guidance. Your role will involve delivering consulting services aimed at analyzing and mitigating security incidents, ultimately helping clients attain a robust security posture.

Your Primary Responsibilities Will Include

• Analyze Security Issues: Conduct interviews, workshops, and assessments to pinpoint application security risks, exposures, and vulnerabilities, while providing actionable recommendations for enhancement.
• Develop Security Strategies: Leverage security principles alongside your knowledge of Application Security technologies, Threat models, and DevSecOps concepts to identify business drivers and formulate comprehensive security strategies, programs, and incident response plans.
• Resolve Security Incidents: Partner with clients to investigate and address security incidents, offering expert advice and support to ensure swift and effective remediation.
• Provide Remediation Recommendations: Craft and present tailored remediation recommendations and roadmaps to clients, guiding them in strengthening their overall security posture.
• Deliver Consulting Services: Offer high-caliber consulting services, collaborating closely with clients to grasp their specific security requirements and delivering customized solutions to meet those needs.
  
  

Preferred Education

Master's Degree

Required Technical And Professional Expertise

• Exposure to Application Security Technologies: Familiarity with application security technologies, including threat models and DevSecOps concepts, to analyze security issues and devise effective security strategies.
• Experience with Security Assessments: Conducting interviews, workshops, and assessments to identify application security risks, exposures, and vulnerabilities, along with offering recommendations for improvement.
• Knowledge of Incident Response Planning: Understanding of incident response planning and the capability to develop related security strategies, programs, and incident response plans.
• Familiarity with Security Strategy Development: Applying security principles to elucidate business drivers and craft corresponding security strategies, programs, and remediation recommendations.
• Understanding of DevSecOps Concepts: Familiarity with DevSecOps concepts and best practices to provide expert guidance and support, helping clients achieve a superior security posture.
  
  

Preferred Technical And Professional Experience

• Familiarity with Cloud Security: Exposure to cloud security technologies and concepts, including cloud-based threat models and DevSecOps practices, facilitating the analysis of security issues and the development of effective security strategies in cloud environments.
• Knowledge of Compliance Frameworks: Understanding of compliance frameworks and regulatory requirements, such as HIPAA or PCI-DSS, enabling you to provide expert guidance and support for clients in enhancing their security posture.
• Experience with Security Tools: Exposure to diverse security tools, including vulnerability scanners and penetration testing software, to conduct security assessments and identify application security risks.