Security Consultant-Application Security

IBM; Gurugram District; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

IBM Consulting in India is seeking a Security Consultant specializing in Application Security to guide clients through assessments, threat modeling, and incident response; you will help define security strategies and roadmaps. You will work with clients to understand their security needs and deliver tailored consulting services to support a superior security posture.

You will collaborate with clients to implement security solutions and drive best practices, leveraging DevSecOps concepts and

Qualifications

• Experience with application security principles and technologies.
• Knowledge of threat modeling and DevSecOps concepts.
• Ability to conduct security assessments and interviews to identify risks.
• Experience in incident-response planning and remediation recommendations.
• Develop security strategies aligned with business drivers.

Responsibilities

• Analyze security issues via assessments, workshops, and interviews.
• Develop security strategies, programs, and incident response plans.
• Resolve security incidents and guide remediation roadmaps.
• Collaborate with clients to understand security needs and provide tailored services.
• Deliver security solutions and best-practice guidance to improve posture.

Skills

Application Security

Threat Modeling

DevSecOps

Security Assessments

Incident Response

Security Strategy

Client Collaboration

Job description

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your role and responsibilities

As a Security Consultant specializing in Application Security, you will help clients understand and address application security issues, risks, and vulnerabilities through assessments, workshops, and interviews. You will provide consulting services to analyze and resolve security incidents, ultimately supporting clients in achieving a superior security posture.

• Analyze Security Issues: Conduct assessments, workshops, and interviews to identify application security issues, risks, and vulnerabilities, and provide recommendations for improvement.
• Develop Security Strategies: Apply security principles and knowledge of Application Security technologies, Threat models, and DevSecOps concepts to define business drivers and develop associated security strategies, programs, and incident response plans.
• Resolve Security Incidents: Provide consulting services to analyze and resolve security incidents, working closely with clients to implement effective remediation plans and roadmaps.
• Collaborate with Clients: Work with clients to understand their security needs and provide tailored consulting services to support their overall security posture.
• Deliver Security Solutions: Implement security solutions and provide guidance on best practices to ensure clients achieve a superior security posture.

Required technical and professional expertise

• Exposure to Application Security: Familiarity with security principles and knowledge of Application Security technologies, including threat models and DevSecOps concepts.
• Understanding of Security Assessments: Experience working with assessments, workshops, and interviews to identify application security issues, risks, and vulnerabilities.
• Incident Response Knowledge: Exposure to analyzing and resolving security incidents, including developing incident response plans and remediation recommendations.
• Security Strategy Development: Experience applying security principles to define business drivers and develop associated security strategies and programs.
• DevSecOps Concepts: Familiarity with DevSecOps best practices and concepts to support clients in achieving a superior security posture.

Preferred technical and professional experience

• Familiarity with Cloud Security: Exposure to cloud-based application security technologies and threat models is beneficial for providing consulting services to clients with cloud-based infrastructure.
• Knowledge of Compliance Regulations: Understanding of industry-specific compliance regulations and standards, such as HIPAA or PCI-DSS, can be helpful in developing security strategies and programs for clients.
• Experience with Security Tools: Exposure to various security tools and technologies, such as vulnerability scanners and penetration testing tools, can be advantageous in analyzing and resolving security incidents.

IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.