Application Security Consultant

About the role

IBM Consulting in Singapore is seeking an Application Security Consultant to help clients identify, assess, and remediate security risks across their software portfolios. You will work closely with development and DevSecOps teams to improve security posture and support hybrid cloud and AI initiatives.

Key responsibilities

• Conduct interviews, workshops and assessments to uncover application security risks, exposures and vulnerabilities.
• Develop security strategies, programs and incident‑response plans based on threat models and DevSecOps concepts.
• Analyze and resolve security incidents, providing expert guidance for timely remediation.
• Review and validate results from SAST and DAST tools, as well as OS, container and database scans.
• Provide remediation recommendations and road‑maps, and track compliance status.
• Collaborate with development teams to ensure secure coding practices and hardening of web servers, APIs, containers and databases.

Required profile

• Professional level experience in application security consulting.
• Strong analytical skills to assess security incidents and provide actionable guidance.
• Ability to communicate findings and recommendations clearly to clients.

Required skills

• Static Application Security Testing (SAST) tools
• Dynamic Application Security Testing (DAST) tools
• OS, container and database vulnerability scanning
• Secure coding practices
• DevSecOps concepts
• Threat modeling

What we offer

• Competitive monthly salary ranging from SGD 7,500 to SGD 12,000.
• Opportunities to work with leading enterprises on cloud and AI transformation projects.
• Continuous learning and career development within IBM’s global consulting network.