Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your Role And Responsibilities

As a Security Consultant specializing in Application Security, you will help clients understand and address application security issues, risks, and vulnerabilities through assessments, workshops, and interviews. You will provide consulting services to analyze and resolve security incidents, ultimately supporting clients in achieving a superior security posture.

Your Primary Responsibilities Will Include

Analyze Security Issues: Conduct assessments, workshops, and interviews to identify application security issues, risks, and vulnerabilities, and provide recommendations for improvement.
Develop Security Strategies: Apply security principles and knowledge of Application Security technologies, Threat models, and DevSecOps concepts to define business drivers and develop associated security strategies, programs, and incident response plans.
Resolve Security Incidents: Provide consulting services to analyze and resolve security incidents, working closely with clients to implement effective remediation plans and roadmaps.
Collaborate with Clients: Work with clients to understand their security needs and provide tailored consulting services to support their overall security posture.
Deliver Security Solutions: Implement security solutions and provide guidance on best practices to ensure clients achieve a superior security posture.

Preferred Education

Master's Degree

Required Technical And Professional Expertise

Exposure to Application Security: Familiarity with security principles and knowledge of Application Security technologies, including threat models and DevSecOps concepts.
Understanding of Security Assessments: Experience working with assessments, workshops, and interviews to identify application security issues, risks, and vulnerabilities.
Incident Response Knowledge: Exposure to analyzing and resolving security incidents, including developing incident response plans and remediation recommendations.
Security Strategy Development: Experience applying security principles to define business drivers and develop associated security strategies and programs.
DevSecOps Concepts: Familiarity with DevSecOps best practices and concepts to support clients in achieving a superior security posture.

Preferred Technical And Professional Experience

Familiarity with Cloud Security: Exposure to cloud-based application security technologies and threat models is beneficial for providing consulting services to clients with cloud-based infrastructure.
Knowledge of Compliance Regulations: Understanding of industry-specific compliance regulations and standards, such as HIPAA or PCI-DSS, can be helpful in developing security strategies and programs for clients.
Experience with Security Tools: Exposure to various security tools and technologies, such as vulnerability scanners and penetration testing tools, can be advantageous in analyzing and resolving security incidents.

Security Consultant-Application Security