Technical Consultant-Application Security

IBM Computing; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

IBM Consulting in Pune is seeking a Technical Consultant to lead security initiatives across the Software Development lifecycle, guiding clients through application security challenges and multicloud deployments with deep technical expertise.

You will implement secure design, perform threat modelling, and drive Secure SDLC practices to help clients reduce vulnerabilities and accelerate secure cloud transformations.

Qualifications

• Experience applying security measures across the Software Development lifecycle.
• Knowledge of threat modelling, secure SDLC, and DevSecOps.
• Multicloud security concepts and guardrails.
• Ability to formulate mitigation plans for identified risks.

Responsibilities

• Implement security measures across the SDLC, including design, build, and deployment phases.
• Analyze vulnerabilities and drive vulnerability management with mitigation plans.
• Provide in-depth expertise on application security domains and testing.
• Ensure secure modernization with guardrails in multicloud environments.
• Develop mitigation strategies for identified security risks in client apps.

Skills

Application Security

Vulnerability Analysis

Security Domain Knowledge

Multicloud Security

Risk Mitigation Planning

Tools

Threat Modelling tools

Vulnerability management tools

Job description

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your role and responsibilities

As a Technical Consultant in Application Security, you will guide clients in understanding security challenges, risks, and vulnerabilities in their application landscape. You will apply deep technical expertise to incorporate security measures throughout the Software / Application Development lifecycle.

Your primary responsibilities will include:

• Implement Security Measures: Apply technical expertise to incorporate security measures throughout the Software / Application Development lifecycle, including Design, Build, and deployment phases.
• Analyze Vulnerabilities: Drive Application Security Vulnerability management by analyzing high-risk vulnerabilities, formulating mitigation plans, and minimizing false positives.
• Provide Expertise: Offer in-depth knowledge of various Application Security domains, such as Threat Modelling, Secure SDLC, DevSecOps, and Application Security testing.
• Ensure Secure Modernization: Implement security guardrails during Application Modernization programs on multicloud environments.
• Develop Mitigation Plans: Formulate plans to mitigate identified security risks and vulnerabilities in client applications.

Required technical and professional expertise

• Application Security Expertise: Exposure to incorporating security measures throughout the Software / Application Development lifecycle, including Design, Build, and deployment phases.
• Vulnerability Analysis: Experience working with vulnerability management tools and techniques to analyze high-risk vulnerabilities and formulate mitigation plans.
• Security Domain Knowledge: Exposure to various Application Security domains, such as Threat Modelling, Secure SDLC, DevSecOps, and Application Security testing.
• Multicloud Security: Experience working with security guardrails during Application Modernization programs on multicloud environments.
• Risk Mitigation Planning: Exposure to formulating plans to mitigate identified security risks and vulnerabilities in client applications.

Preferred technical and professional experience

• Multicloud Security Expertise: Exposure to implementing security guardrails during Application Modernization programs on multicloud environments, including designing and deploying secure architectures.
• Advanced Threat Modelling: Experience working with threat modelling tools and techniques to identify and mitigate potential security threats in client applications.
• Secure SDLC Knowledge: Exposure to incorporating security measures throughout the Software / Application Development lifecycle, including Design, Build, and deployment phases, to ensure secure application development.

IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.