Technical Consultant-Application Security

Introduction

A career at IBM Consulting is grounded in building durable client relationships and delivering close collaboration with teams around the world. You’ll partner with leading organizations across industries to help shape their hybrid cloud and AI strategies. Backed by strategic partners, IBM technology, and Red Hat, you’ll gain the capabilities to drive meaningful change and speed up real client outcomes. At IBM Consulting, curiosity is a catalyst for success—you’ll be encouraged to question the status quo, try new approaches, and develop solutions that produce measurable results. Our culture of growth and empathy supports your long-term career development while recognizing the value of your individual skills and experiences.

Your Role And Responsibilities

As a Technical Consultant in Application Security, you will help clients understand security challenges, identify risks, and assess vulnerabilities across their application environments. You will use deep technical knowledge to embed security controls throughout the Software / Application Development lifecycle.

Your Primary Responsibilities Will Include

• Implement Security Measures: Use technical expertise to integrate security measures across the Software / Application Development lifecycle, covering Design, Build, and deployment activities.
• Analyze Vulnerabilities: Lead Application Security Vulnerability management by assessing high-risk vulnerabilities, developing mitigation strategies, and reducing false positives.
• Provide Expertise: Deliver detailed guidance across Application Security areas, including Threat Modelling, Secure SDLC, DevSecOps, and Application Security testing.
• Ensure Secure Modernization: Apply security guardrails during Application Modernization initiatives in multicloud environments.
• Develop Mitigation Plans: Create actionable plans to address and mitigate security risks and vulnerabilities found in client applications.
  
  

Preferred Education

Master's Degree

Required Technical And Professional Expertise

• Application Security Expertise: Exposure to integrating security measures across the Software / Application Development lifecycle, including Design, Build, and deployment phases.
• Vulnerability Analysis: Experience using vulnerability management tools and methods to evaluate high-risk vulnerabilities and create mitigation plans.
• Security Domain Knowledge: Exposure to multiple Application Security domains, such as Threat Modelling, Secure SDLC, DevSecOps, and Application Security testing.
• Multicloud Security: Experience applying security guardrails during Application Modernization programs on multicloud environments.
• Risk Mitigation Planning: Exposure to creating plans to mitigate security risks and vulnerabilities identified in client applications.
  
  

Preferred Technical And Professional Experience

• Multicloud Security Expertise: Exposure to implementing security guardrails during Application Modernization programs on multicloud environments, including designing and deploying secure architectures.
• Advanced Threat Modelling: Experience using threat modelling tools and techniques to identify and mitigate potential security threats in client applications.
• Secure SDLC Knowledge: Exposure to incorporating security measures across the Software / Application Development lifecycle, including Design, Build, and deployment phases, to support secure application development.