Security Consultant-Application Security

IBM; Mumbai; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

IBM Consulting is seeking a Security Consultant specializing in Application Security to help clients address vulnerabilities, incidents, and risks through expert analysis and guidance. You will work with clients to develop remediation strategies and strengthen their security posture across industries.

Responsibilities include conducting security assessments, applying threat models, and delivering tailored consulting services while leveraging DevSecOps practices to achieve superior security

Qualifications

• Experience in analyzing application security risks, vulnerabilities, and threats.
• Ability to develop security strategies and roadmaps for incidents and operations.
• Familiarity with threat modeling and DevSecOps practices.
• Understanding of incident response planning and execution.

Responsibilities

• Analyze Security Issues: identify risks and vulnerabilities and provide recommendations.
• Develop Security Strategies: define drivers and programs with threat models and DevSecOps.
• Resolve Security Incidents: help clients analyze and remediate incidents.
• Provide Remediation Recommendations: present roadmaps to improve security posture.
• Deliver Consulting Services: tailor solutions to client needs and contexts.

Skills

Application Security

Security Assessments

Incident Response

Security Strategy

DevSecOps

Tools

Vulnerability Scanners

Penetration Testing Tools

Job description

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your role and responsibilities

As a Security Consultant specializing in Application Security, you will help clients understand and address application security issues, risks, and vulnerabilities through expert analysis and guidance. You will provide consulting services to analyze and resolve security incidents, ultimately supporting clients in achieving a superior security posture.

Your primary responsibilities will include:

• Analyze Security Issues: Conduct interviews, workshops, and assessments to identify application security risks, exposures, and vulnerabilities, and provide recommendations for improvement.
• Develop Security Strategies: Apply security principles and knowledge of Application Security technologies, Threat models, and DevSecOps concepts to define business drivers and develop associated security strategies, programs, and incident response plans.
• Resolve Security Incidents: Collaborate with clients to analyze and resolve security incidents, providing expert guidance and support to ensure timely and effective remediation.
• Provide Remediation Recommendations: Develop and present remediation recommendations and roadmaps to clients, helping them to improve their overall security posture.
• Deliver Consulting Services: Provide high-quality consulting services, working closely with clients to understand their unique security needs and delivering tailored solutions to meet those needs.

Required technical and professional expertise

• Exposure to Application Security Technologies: Familiarity with application security technologies, including threat models and DevSecOps concepts, to analyze security issues and develop effective security strategies.
• Experience with Security Assessments: Conducting interviews, workshops, and assessments to identify application security risks, exposures, and vulnerabilities, and providing recommendations for improvement.
• Knowledge of Incident Response Planning: Understanding of incident response planning and ability to develop associated security strategies, programs, and incident response plans.
• Familiarity with Security Strategy Development: Applying security principles to define business drivers and develop associated security strategies, programs, and remediation recommendations.
• Understanding of DevSecOps Concepts: Familiarity with DevSecOps concepts and best practices to provide expert guidance and support to clients in achieving a superior security posture.

Preferred technical and professional experience

• Familiarity with Cloud Security: Exposure to cloud security technologies and concepts, including cloud-based threat models and DevSecOps practices, to analyze security issues and develop effective security strategies in cloud environments.
• Knowledge of Compliance Frameworks: Understanding of compliance frameworks and regulatory requirements, such as HIPAA or PCI-DSS, to provide expert guidance and support to clients in achieving a superior security posture.
• Experience with Security Tools: Exposure to various security tools, including vulnerability scanners and penetration testing software, to conduct security assessments and identify application security risks.

IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.