Technical Consultant-Application Security

IBM; Bengaluru; On-site; INR 1,400,000 - 2,200,000; Full time

Job summary

IBM Consulting is seeking a Technical Consultant in Application Security to guide clients in understanding security challenges across the Software/Application Development lifecycle, incorporating security measures from design through deployment.

You will apply deep expertise in threat modelling, Secure SDLC, DevSecOps, and testing to secure client applications and reduce vulnerabilities across multicloud environments.

Qualifications

• Experience integrating security measures across the Software Development lifecycle.
• Ability to analyze high-risk vulnerabilities and formulate mitigation plans.
• Experience implementing guardrails in multicloud environments.
• Knowledge of Threat Modelling, Secure SDLC, DevSecOps and testing.
• Experience identifying and mitigating security risks in application landscapes.

Responsibilities

• Design and implement security measures across the SDLC.
• Analyze high-risk vulnerabilities and minimize false positives.
• Apply security guardrails during modernization in multicloud environments.
• Provide security expertise on domains like Threat Modelling and DevSecOps.
• Manage security risks and recommend mitigation and remediation strategies.

Skills

Application Security

Vulnerability Management

Multicloud Security

Threat Modelling

Secure SDLC

DevSecOps

Application Security testing

Security Risk Management

Education

Master's Degree

Job description

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your Role And Responsibilities

As a Technical Consultant in Application Security, you will guide clients in understanding security challenges, risks, and vulnerabilities in their application landscape. You will apply deep technical expertise to incorporate security measures throughout the Software/Application Development lifecycle.

Your Primary Responsibilities Will Include

• Develop Security Measures: Design and implement security measures throughout the Software/Application Development lifecycle, including Design, Build, and deployment phases, to mitigate security risks and vulnerabilities.
• Analyze Vulnerabilities: Drive Application Security Vulnerability management by analyzing high-risk vulnerabilities, formulating mitigation plans, and minimizing false positives to ensure the security of applications.
• Implement Security Guardrails: Apply expertise in implementing security guardrails during Application Modernization programs on multicloud environments to ensure secure application development and deployment.
• Provide Security Expertise: Offer in-depth knowledge of various Application Security domains, such as Threat Modelling, Secure SDLC, DevSecOps, and Application Security testing, to guide clients in securing their applications.
• Manage Security Risks: Identify and manage security risks and vulnerabilities in clients' application landscapes, providing recommendations for mitigation and remediation.

Preferred Education

Master's Degree

Required Technical And Professional Expertise

• Application Security Expertise: Experience with incorporating security measures throughout the Software/Application Development lifecycle, including Design, Build, and deployment phases.
• Vulnerability Management: Experience in analyzing high-risk vulnerabilities, formulating mitigation plans, and minimizing false positives to ensure the security of applications.
• Multicloud Security: Experience implementing security guardrails during Application Modernization programs on multicloud environments.
• Application Security Domains: In-depth knowledge of various Application Security domains, such as Threat Modelling, Secure SDLC, DevSecOps, and Application Security testing.
• Security Risk Management: Experience identifying and managing security risks and vulnerabilities in application landscapes, with expertise in providing recommendations for mitigation and remediation.

Preferred Technical And Professional Experience

• Deep Understanding of DevSecOps: Experience with implementing DevSecOps practices to ensure the security of applications throughout the Software/Application Development lifecycle. Knowledge of DevSecOps tools and methodologies is beneficial.
• Familiarity with Multicloud Environments: Experience working with multiple cloud providers, such as AWS, Azure, or Google Cloud, is advantageous. Understanding of cloud security controls and compliance requirements is desirable.
• Threat Modelling Expertise: In-depth knowledge of threat modelling methodologies and tools, such as STRIDE or PASTA, is beneficial. Experience with threat modelling in Agile development environments is advantageous.