Application Security Consultant

About the role

IBM Consulting is seeking an Application Security Consultant to help clients identify, assess, and remediate security risks in their software applications. You will work closely with development and DevSecOps teams, providing expert guidance to improve security posture across hybrid cloud and AI environments.

Key responsibilities

• Conduct interviews, workshops, and assessments to uncover application security risks, exposures, and vulnerabilities.
• Develop security strategies, programs, and incident‑response plans based on threat models and DevSecOps concepts.
• Analyze and resolve security incidents, delivering timely remediation guidance.
• Produce remediation recommendations and roadmaps tailored to each client’s environment.
• Provide high‑quality consulting services, aligning solutions with client‑specific security needs.

Required profile

• Master’s degree (preferred).
• Experience reviewing and validating results from SAST and DAST tools.
• Proven ability to audit operating‑system, container, and database scans for vulnerabilities and misconfigurations.
• Strong understanding of hardening measures for web servers, APIs, containers, and databases.
• Experience supporting internal security audits and maintaining audit documentation.

Required skills

• SAST (Static Application Security Testing)
• DAST (Dynamic Application Security Testing)
• OS vulnerability scanning
• Container and database scanning
• Web server and API security
• Secure coding practices
• Threat modeling
• DevSecOps collaboration
• Audit documentation and remediation tracking