Security Consultant - Cloud Security

IBM; Bengaluru; Hybrid; INR 1,500,000 - 2,100,000; Full time

Job summary

IBM Consulting in Bengaluru, India, is seeking a Security Consultant specialized in cloud security to help clients understand and manage the entire security lifecycle across multi-cloud environments. You will work with global teams to design, implement and operate secure cloud solutions that align with industry standards and best practices.

Responsibilities include leading cloud security assessments, configuring controls for AWS, Azure and AliCloud, supporting incidents, maintaining security

Qualifications

• Cloud computing experience (AWS, AliCloud, Azure), incl. CloudFormation, EC2, EMR, S3, Redshift, RDS, SQS and AutoScaling Groups.
• Experience in patch management and vulnerability scanning.
• Familiarity with standards, guidelines and regulatory compliance: ISO 27001, Cloud Security Alliance, NIST 800-53, PCI DSS, SOC2 and FedRamp.
• Strong analytical & problem-solving skills with ability to translate ideas into practical implementation.
• Ability to manage stakeholder relationships including team members, vendors and partners.
• Excellent leadership and communication skills with ability to present and communicate effectively with both technical and non-technical audiences.
• Ability to provide technical and professional leadership, guidance, and training to others.

Responsibilities

• Understand and manage the security lifecycle in enterprise cloud environments.
• Design, implement and configure cloud security systems.
• Lead cloud security assessments and recommend configurations for client clouds (AWS, Azure, GCP, Alibaba, Oracle).
• Support escalated incidents and critical situations.
• Interface with Engineering and assist testing or troubleshooting.
• Reproduce issues and provide feedback to Engineering.
• Develop and maintain information security policies, standards and guidelines.
• Identify security gaps in new infrastructure or application build-outs.
• Troubleshoot cloud infrastructure issues in multi-cloud environments and lead analysis of technical platform issues.
• Gather evidence, support audits with IT GRC vertical.
• Create and maintain cloud security documentation.
• Serve as expert on cloud cyber risk for stakeholders.
• Maintain relationships with third-party vendors and service providers.
• Work with internal stakeholders to gather requirements and develop solutions.
• Keep up-to-date with trends in cloud security.
• Participate in seminars/conferences to stay current.

Skills

Cloud security

AWS

Azure

AliCloud

CloudFormation

EC2

EMR

S3

Redshift

RDS

SQS

AutoScaling Groups

Vulnerability assessment

Regulatory compliance

ISO 27001

NIST 800-53

PCI DSS

SOC2

FedRamp

Leadership

Communication skills

Education

Master's Degree

Job description

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your Role And Responsibilities

As a Security Consultant specializing in cloud security, you help organizations understand and manage the entire security lifecycle within their enterprise.

• Possess strong understanding of the concepts, approaches, methods, and techniques used for the implementation and effective management of a cloud security program
• Support in design, implementation and configuration of the Cloud security systems
• Lead cloud security assessments and provide recommendations on required configurations for client cloud platforms (such as AWS, Azure, GCP, Alibaba Cloud, Oracle Cloud) and environments based on Cloud Cyber Risk Framework and industry standard frameworks such as PDP, GDPR, ISO, CSA-CSM and NIST
• Provide support for escalated incidents or critical situations
• Interface with Engineering and assist with testing or troubleshooting
• Reproduce issues to verify problems and provide feedback to Engineering and teams
• Contribute to development and maintenance of Information Security Policies, Standards and Guidelines
• Identify security gaps or concerns pertaining to new infrastructure or application build out. 9. Troubleshoot problems with cloud infrastructure (e.g., domain name service, virtual network peering, dedicated cloud connectivity services) and resources (e.g., virtual machines, virtual networks, cloud databases) in a multi-cloud vendor environment and lead analysis of technical platform issues, and resolution as part of cyber risk mitigation steps
• Gather evidence, perform remediation, and work with the IT GRC vertical to support audit efforts.
• Create and maintain documentation of departmental security procedures pertaining to cloud security
• Serve as an expert on cloud cyber risk for other business and technology stakeholders.
• Maintain and build effective, professional relationships with third party vendors and service providers that result in timely delivery of requirements and the highest standards of quality and cost effectiveness
• Work with internal stakeholders to gather requirements and develop the most effective solutions
• Keep abreast with latest trends in the field of cloud security
• Participate in seminars/conferences/forums to keep up-to-date with the industry best practice

Preferred Education

Master's Degree

Required Technical And Professional Expertise

• Cloud computing experience (AWS, AliCloud, Azure), and in particular, CloudFormation, EC2, EMR, S3, Redshift, RDS, SQS and AutoScaling Groups
• Experience in patch management and vulnerability scanning
• Familiarity with industry standards, guidelines, and regulatory compliance requirements related to information security and cloud computing such as ISO 27001, Cloud Security Alliance, NIST 800-53, PCI DSS, SOC2 and FedRamp
• Strong analytical & problem-solving skills with ability to translate ideas into practical implementation
• Ability to manage stakeholder relationships including team members, vendors and partners 6. Excellent leadership and communication skills with ability to present and communicate effectively with both technical and non-technical audience
• Ability to provide technical and professional leadership, guidance, and training to other

Preferred Technical And Professional Experience

• Cloud computing experience (AWS, AliCloud, Azure), and in particular, CloudFormation, EC2, EMR, S3, Redshift, RDS, SQS and AutoScaling Groups
• Experience in patch management and vulnerability scanning
• Familiarity with industry standards, guidelines, and regulatory compliance requirements related to information security and cloud computing such as ISO 27001, Cloud Security Alliance, NIST 800-53, PCI DSS, SOC2 and FedRamp
• Strong analytical & problem-solving skills with ability to translate ideas into practical implementation
• Ability to manage stakeholder relationships including team members, vendors and partners 6. Excellent leadership and communication skills with ability to present and communicate effectively with both technical and non-technical audience
• Ability to provide technical and professional leadership, guidance, and training to other