DAS: Data and application security Jobs in Mumbai - IBM

Responsibilities:

• AppSec (DAST/SAST), VA-PT, Mobile Security
  • Should be able to recommend remediation action for the security vulnerabilities.
  • Good understanding of OWASP top 10 and web Application security audits.
  • Familiarity with tools like Nmap, Kali Linux, Metasploit, BurpSuite, SAINT, Qualys, Nessus, Wireshark etc. Ability to assess new testing tools.
  • Ability to generate project deliverables/reports and present the findings to all the internal and external stakeholders
  • Develop testing methodologies and frameworks
  • Able to understand client requirements during the scoping and testing phase and able to make informed decisions.
  • Knowledge of any of the programming or scripting language is an added advantage
• Data Loss Prevention (DLP)
  • Implementation experience of DLP solutions and architecture for the organization
  • Design, deploy, validate, and support effective security solutions that provide complete coverage and protection.
  • Provide support from the proof of concept phase to deployment for DLP
  • Experience with DLP process flow and Data Flow Analysis
  • Implement simplified security metrics approach that enables executive leaders to quickly take action on security related risks.
  • Develop and optimize processes to improve security threat identification and remediation
  • Maintain active understanding of industry practices for DLP improvements and incident response.
• Database Activity Monitoring (DAM)
  • Implementation experience of DAM solutions and architecture for the organization
  • Design, deploy, validate, and support effective security solutions that provide complete coverage and protection.
  • Provide support from the proof of concept phase to deployment for DAM
  • Develop and optimize processes to improve security threat identification and remediation
  • Maintain active understanding of industry practices for DAM improvements and incident response.

• Set technical direction and developed solution architecture in a complex client environment
• Used modeling techniques and provided expert advice to demonstrate how the proposed solution meets business requirements
• Assessed technical solutions and conducted technical quality reviews
• Developed and applied IT standards in creation of solutions
• Selected relevant methodologies and adapted, applied and enforced their use to successfully guide the creation of work products that met requirements
• Designed and implemented solutions to solve complex technical problems
• Documented client requirements and architectural decisions.
• Managed the architectural elements of a project plan
• Defined a security solution that met the client's security requirements using IBM and industry standard procedures and tools
• Developed the business case for the value added or realized by a technical solution project by outlining specific targets and goals

• Provide global practice leadership by facilitating a community of likeminded practitioners to share and exchange ideas for practice growth and improvement
• Contribute content and advice to the offering development process
• Help shape the emerging model of the global Security practice

• Help establish capability and skills models for the core domain
• Become a role model for global practitioners in the core domain

• Overall experience of at least 14+ years of which at least 10 years’ experience in management consulting and systems integration in a top tier professional services firm
• At least 10 years’ experience working in projects related to the core domain
• Experience working across diverse teams to facilitate solutions
• Experience working with Security practitioners
  Readiness to travel 50%
• Demonstrated communication and presentation skills
• Effective written skills
• Ability to research and develop new security offerings
• Comfortable working in a project based / client serving model
• Ability to lead and shape client expectations
• Help drive pursuits and engage in complex deals, matching outcomes to expectations
• Ability to work easily with diverse and dynamic teams
• Ability to work in a matrix management model
• Working knowledge of industry standard risk, governance and security standard methodologies
• Expertise on skills like NIPS, WAF, SIEM, Nessus, CEH, Qualys guard, Vulnerability Assessment and Penetration Testing, Network Security, Web Application Security
• Proven ability of incident response processes (detection, triage, incident analysis, remediation and reporting)
• Proven attention to detail and organizational skills and ability to coordinate input and develop relevant metrics
• Competent with Microsoft Office, e.g. Word, PowerPoint, Excel, Visio, etc.
• Automation knowledge via RPA/Scripting (Java/Python etc)
• Strong understanding of tool KPIs/Metrics for proper reporting/dashboarding

• One or more security certifications: OWASP,CEH, Security+, GSEC, GCIH, etc
• You love collaborative environments that use agile methodologies to encourage creative design thinking and find innovative ways to develop with cutting edge technologies
• Ambitious individual who can work under their own direction towards agreed targets/goals and with creative approach to work
• Intuitive individual with an ability to manage change and proven time management
• Proven interpersonal skills while contributing to team effort by accomplishing related results as needed
• Up-to-date technical knowledge by attending educational workshops, reviewing publications