Security Consultant:Data Security

In this role, youll work in one of our IBM Consulting Client Innovation Centers (Delivery Centers), where we deliver deep technical and industry expertise to a wide range of public and private sector clients around the world. Our delivery centers offer our clients locally based skills and technical expertise to drive innovation and adoption of new technology.

Your Role and Responsibilities
Information and Data are some of the most important organizational assets in todays businesses. As a Security Consultant, you will be a key advisor for IBMs clients, analysing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the clients organization with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.
The ability to be a team player, Strong communication collaboration.

Required Technical and Professional Expertise

• Application Security, Threat Modelling, Secure Code Review, Penetration Testing, Vulnerability Testing, SAST (Static Application Security Testing), DAST (Dynamic Application security Testing), DevSecOps Implemented Clean Code principles, JUnits
• Java development, JavaScript, Python, Ruby, C++/C#, Perl etc Must have strong business acumen with ability to work with application development, QA and security teams.
• A strong understanding of application security frameworks
• The ability and skill to train other people in procedural and technical topics
• As a Security Consultant, you will be a key advisor for IBMs clients, analysing business requirements to design and implement the best security solutions for their needs.

Preferred Technical and Professional Expertise

• Must have a solid understanding of application security code reviews and penetration testing & Experience with enterprise java technologies: Spring, JUnit, Hibernate
• 4+ years experience in application development and security.
• Practical understanding and use of commercial application security tools