Technical Consultant - Application Security

Introduction
At IBM work is more than a job – it’s a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better but to attempt things you’ve never thought possible. Are you ready to lead in this new era of technology and solve some of the world’s most challenging problems? If so lets talk.

Your Role and Responsibilities
This role requires extensive knowledge and experience in identifying and providing recommendations to security risks specific to software applications hosted in AWS & Azure cloud environments in-line with industry standards & best practices. It requires expertise in areas such as secure coding practices interface review API security review & threat modeling security testing techniques and compliance requirements. You will lead all the technical discussions with application owners & customer stake holders and provide guidance to internal teams in executing security assessments. We are looking for an experienced resource with strong knowledge & skill set to support the application security assessment part pf DevSecOps track.

Required Technical and Professional Expertise

• To be Successful you must have strong Hands-on experience DevSecOps in application security domain.
• You should have experience in the assessment of complex applications in consumer industry.
• Access Model Review
• Secure Coding Practices & Confirm Use of Lint tools
• Security Toolchain (DevSecOps) Access Request
• ITPF Compliance Assessment
• Migration Plan Review
• System UAT Review
• Solution Outline Security Review
• System Config Review
• System Security Validation
• Threat Modelling
• Security Assessment Report Analysis/Review The resource should have strong knowledge in AWS & Azure could infrastructure

Preferred Technical and Professional Expertise
n/a