Security Consultant-Application Security

Introduction

As security Specialist a, You will play a role in client facing support for IBM Managed Infra Security Delivery and delivering management services for Deploy, configure, and maintain Radware Server/Link Load Balancer solutions to ensure optimal performance and reliability as part of IBM Security Delivery Team. If you thrive in a dynamic, reciprocal workplace, IBM provides an environment to explore new opportunities every single day. And if you relish the freedom to bring creative, thoughtful solutions to the table, there's no limit to what you can accomplish here.

Your Role And Responsibilities

Your Role and Responsibilities

• Conduct Vulnerability Assessment & Penetration Testing (VAPT) for web applications, APIs, and networks.
• Analyze and identify security vulnerabilities, ensuring alignment with OWASP Top 10 and secure coding best practices.
• Provide security requirement analysis for applications.
• Offer risk mitigation planning, vulnerability remediation recommendations, compliance guidance, and metrics reporting.
• Plan and coordinate Network & Application Security testing.
• Utilize security testing tools such as Burp Suite, Kali-Linux, AppScan, Nessus.
• Generate and share reports with customers using MS Office tools.
• Collaborate with teams to enhance security implementations and provide best practice recommendations.
  
  

Preferred Education

Bachelor's Degree

Required Technical And Professional Expertise

• 3-4 years of demonstrating experience in planning and executing VA & penetration tests exercises against web applications, APIs, Network.
• Minimum 3+ years of experience in Network and Application Security
• Proficient in Secure coding best practices and OWASP TOP 10 vulnerabilities
• Experience in security requirements analysis for application
• Experience in security requirement implementation recommendations & guidance
• Prior experience in Network & Application Security Test planning & coordination
• Experience in Application risk mitigation planning, Vulnerabilities remediation recommendation & guidance, Compliance & Metrics reporting
  
  

Preferred Technical And Professional Experience

• Industry certifications such as CEH/OSCP or equivalent preferred.
• Familiarity with security standards (OWASP, SANS, ISO).