Security Consultant

Tech Mahindra; Bengaluru; On-site; INR 2,500,000 - 3,600,000; Full time

Job summary

Tech Mahindra seeks a Security SME with 10+ years in cybersecurity to lead IBM DAM and Cloud Security initiatives. The role covers architecture, implementation, and operations of DAM, E‑STAP, IAM, and enterprise data security controls, aligned with Zero Trust and defense‑in‑depth principles.

You will drive onboarding of applications and data sources into DAM, manage vulnerabilities and patching, and collaborate with cross‑functional teams to ensure policy compliance and secure-by-design

Qualifications

• 10+ years in Cybersecurity/IAM/Data Security.
• Hands-on experience with IBM Guardium/DAM architecture and operations.
• Strong IAM, PAM, entitlement management, and least privilege knowledge.

Responsibilities

• Serve as the Security SME for IBM DAM and Cloud Security, covering architecture, design, implementation and operations.
• Lead the rollout and onboarding of DAM across enterprise applications, databases, and data sources.
• Design and maintain DAM security policies, monitoring rules, access controls, and baselines.
• Perform health checks, capacity planning, tuning, and incident response for DAM platform.
• Conduct threat modeling and security assessments across cloud, databases, and data platforms.

Skills

IBM DAM

Cloud Security

Kubernetes/EKS

IAM / PAM

Zero Trust

Security Architecture

Education

Bachelor's degree in CS/IT or related

Tools

IBM Guardium

Job description

We are seeking an experienced Security Professional to provide technical leadership and hands-on expertise across Data Security, IBM Data Activity Monitoring (DAM), Cloud Security, Database Security, Application Security, Kubernetes/EKS, IAM, and enterprise security integrations.

Security SME will be responsible for the architecture, design, implementation, integration, rollout, operation, troubleshooting, hardening, and continuous improvement of the Cloud Security, DAM Appliance and broader data-security environment. SME role will work closely with the practice teams to ensure security controls align with Zero Trust, least privilege, defense-in-depth, regulatory requirements, and enterprise security standards.

Key Responsibilities.

• Serve as the Security SME for IBM Data Activity Monitoring (DAM) and Cloud Security, providing end-to-end expertise across security architecture, solution design, implementation, configuration, integration, troubleshooting, and operational support.
• Lead the implementation, rollout, onboarding, and operationalization of IBM DAM across enterprise applications, databases, data sources, APIs, and critical business use cases, ensuring appropriate monitoring, auditability, and security coverage.
• Design, implement, and maintain DAM security policies, monitoring rules, roles, entitlements, data-access controls, authorization mechanisms, and security baselines aligned with enterprise security and compliance requirements.
• Perform DAM platform health checks, performance monitoring, capacity planning, tuning, troubleshooting, optimization, and lifecycle management to maintain platform stability, availability, and security.
• Lead the onboarding of applications, databases, data sources, and new business use cases into DAM, defining appropriate monitoring requirements, access controls, audit policies, and security controls.
• Manage vulnerability remediation, security patching, configuration hardening, version upgrades, and technology lifecycle activities across the DAM technology stack.
• Provide L2/L3 technical support and troubleshooting for complex IBM DAM, E-STAP, EKS/Kubernetes, DAM appliances, agents, database connectivity, policies, and security integrations, including incident investigation and root-cause analysis.
• Design and implement secure access controls for databases, applications, APIs, cloud workloads, and enterprise data platforms, applying Zero Trust, least privilege, need-to-know, and segregation-of-duties principles.
• Conduct periodic access reviews and entitlement assessments to identify excessive, inappropriate, dormant, orphaned, or conflicting access and coordinate remediation with application, database, IAM, and business owners.
• Develop and maintain enterprise data-security standards, technical security controls, configuration baselines, SOPs, operational runbooks, troubleshooting guides, and knowledge articles.
• Review cloud and hybrid-cloud architectures to identify security risks, vulnerabilities, trust-boundary issues, excessive privileges, insecure configurations, data-exposure risks, and integration weaknesses, providing actionable remediation recommendations.
• Support cloud migration and transformation initiatives by embedding security architecture, data protection, identity and access management, encryption, monitoring, compliance, and regulatory requirements into solution designs.
• Apply Zero Trust, defense-in-depth, secure-by-design, least privilege, and risk-based security principles across cloud, database, Kubernetes/EKS, application, and enterprise data environments.
• Perform threat modeling and security assessments for applications, APIs, databases, cloud workloads, Kubernetes/EKS environments, and enterprise data platforms using STRIDE, attack-surface analysis, abuse-case analysis, trust-boundary analysis, and threat identification.
• Identify attack vectors, vulnerabilities, architectural weaknesses, trust-boundary violations, security-control gaps, and potential business impacts, translating findings into actionable security requirements and remediation plans.
• Conduct security architecture and solution-design reviews covering authentication, authorization, privileged access, network segmentation, data protection, encryption, logging, monitoring, API security, and third-party integrations.
• Integrate threat-modeling and security-review outcomes into architecture, solution design, application development, cloud migration, and security-control implementation, ensuring security requirements are addressed throughout the technology lifecycle.
• Partner with application, development, architecture, cloud, infrastructure, database, DevOps, and platform teams to embed security-by-design principles and provide technical security guidance throughout project delivery.
• Investigate DAM security events and incidents, perform root-cause analysis, coordinate remediation, and implement permanent corrective actions to prevent recurrence and improve overall security posture.
• Support risk assessments, vulnerability assessments, audits, compliance reviews, control assessments, and remediation tracking related to DAM, cloud, database, and enterprise data security.
• Participate in solution architecture reviews, proof-of-concepts, technical evaluations, technology selections, and implementation activities, providing security recommendations and technical assurance.
• Drive continuous improvement initiatives to strengthen DAM and data-security posture, improve monitoring and visibility coverage, increase operational efficiency, automate repetitive security processes, and enhance platform reliability.
• Prepare and present weekly and monthly security-status reports covering implementation progress, risks, vulnerabilities, incidents, issues, remediation activities, key metrics, dependencies, and deliverables.
• Maintain current knowledge of IBM Security technologies, DAM capabilities, cloud-security technologies, Kubernetes/EKS security, emerging threats, vulnerabilities, regulatory requirements, and industry best practices, recommending improvements to strengthen the enterprise security posture.

Required Skills & Experience

• 10+ years of Cybersecurity / IAM / Data Security experience with strong enterprise security exposure.
• Expert hands-on experience with IBM Guardium / IBM Data Activity Monitoring (DAM), including architecture, implementation, configuration, policies, monitoring, onboarding, troubleshooting, and operations.
• Strong expertise in IBM Guardium S‑TAP / E‑STAP, database activity monitoring, sensitive‑data monitoring, and security policy management.
• Good knowledge of Database Security, including PostgreSQL, and MySQL.
• Strong expertise in IAM, PAM, authorization, entitlement management, and least privilege.
• Strong experience securing Kubernetes / Amazon EKS, including RBAC, secrets, service accounts, network policies, and workload security.
• Experience integrating DAM, IAM, PAM, SIEM/SOC, vulnerability‑management, and enterprise security platforms.
• Strong understanding of Zero Trust, defense‑in‑depth, encryption, key management, secrets management, and data protection.
• Threat Modeling experience, including STRIDE, attack-surface analysis, threat identification, risk assessment, security control mapping, and remediation recommendations across cloud, applications, APIs, databases, and data platforms.
• Proven experience in security hardening, vulnerability remediation, incident troubleshooting, access reviews, risk assessments, and compliance.
• Strong L2/L3 troubleshooting, technical leadership, architecture, documentation, and stakeholder‑management capabilities.