Security Consultant-Application Security

IBM India Pvt. Limited; Mumbai; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

IBM India Pvt. Limited is seeking a Security Consultant specializing in Application Security to help clients understand and address security issues, risks, and vulnerabilities through expert analysis and guidance.

You will provide consulting services to analyze and resolve security incidents, ultimately supporting clients in achieving a superior security posture. Responsibilities include conducting interviews and assessments to identify risks, developing security strategies, and collaborating

Qualifications

• Bachelor's degree in a relevant field is required.
• Master's degree is preferred.
• Experience in application security and DevSecOps practices.
• Knowledge of incident response planning and security strategies.
• Familiarity with threat modeling and remediation guidance.

Responsibilities

• Analyze security issues in client applications and provide expert guidance.
• Develop security strategies, threat models, and incident response plans.
• Collaborate with clients to resolve security incidents and remediate vulnerabilities.
• Provide remediation recommendations and roadmaps to improve security posture.
• Deliver high-quality security consulting services tailored to client needs.

Skills

Application security

Threat modeling

DevSecOps concepts

Incident response

Security strategy development

Regulatory compliance knowledge

Education

Bachelor's degree

Master's degree

Tools

Vulnerability scanners

Penetration testing software

Cloud security tools

Job description

Your Role and Responsibilities:

As a Security Consultant specializing in Application Security, you will help clients understand and address application security issues, risks, and vulnerabilities through expert analysis and guidance. You will provide consulting services to analyze and resolve security incidents, ultimately supporting clients in achieving a superior security posture.

Your Primary Responsibilities Will Include:

• Analyze Security Issues: Conduct interviews, workshops, and assessments to identify application security risks, exposures, and vulnerabilities, and provide recommendations for improvement.
• Develop Security Strategies: Apply security principles and knowledge of Application Security technologies, Threat models, and DevSecOps concepts to define business drivers and develop associated security strategies, programs, and incident response plans.
• Resolve Security Incidents: Collaborate with clients to analyze and resolve security incidents, providing expert guidance and support to ensure timely and effective remediation.
• Provide Remediation Recommendations: Develop and present remediation recommendations and roadmaps to clients, helping them to improve their overall security posture.
• Deliver Consulting Services: Provide high-quality consulting services, working closely with clients to understand their unique security needs and delivering tailored solutions to meet those needs.

Required Education:

Bachelor's Degree

Preferred Education:

Master's Degree

Required Technical and Professional Expertise:

• Exposure to Application Security Technologies: Familiarity with application security technologies, including threat models and DevSecOps concepts, to analyze security issues and develop effective security strategies.
• Experience with Security Assessments: Conducting interviews, workshops, and assessments to identify application security risks, exposures, and vulnerabilities, and providing recommendations for improvement.
• Knowledge of Incident Response Planning: Understanding of incident response planning and ability to develop associated security strategies, programs, and incident response plans.
• Familiarity with Security Strategy Development: Applying security principles to define business drivers and develop associated security strategies, programs, and remediation recommendations.
• Understanding of DevSecOps Concepts: Familiarity with DevSecOps concepts and best practices to provide expert guidance and support to clients in achieving a superior security posture.

Preferred Technical and Professional Experience:

• Familiarity with Cloud Security: Exposure to cloud security technologies and concepts, including cloud-based threat models and DevSecOps practices, to analyze security issues and develop effective security strategies in cloud environments.
• Knowledge of Compliance Frameworks: Understanding of compliance frameworks and regulatory requirements, such as HIPAA or PCI-DSS, to provide expert guidance and support to clients in achieving a superior security posture.
• Experience with Security Tools: Exposure to various security tools, including vulnerability scanners and penetration testing software, to conduct security assessments and identify application security risks.

Years of Experience: 6 - 7