job description
Join IBM as a Senior Application Security Consultant and play a pivotal role in safeguarding enterprise applications against evolving cyber threats. Based in the vibrant regions of Bali, Indonesia, you will collaborate with global clients to assess, design, and implement robust security solutions tailored to their application landscapes.
In this dynamic role, you will leverage your expertise in application security testing, threat modeling, and secure coding practices to identify vulnerabilities and recommend actionable mitigations. Your insights will empower organizations to build security into their development lifecycle (DevSecOps), ensuring compliance with industry standards like OWASP, ISO 27001, and NIST.
IBM offers a competitive compensation package, professional growth opportunities, and the chance to work with cutting-edge technologies in a collaborative, innovation-driven environment. If you are passionate about cybersecurity and thrive in a client-facing role, we invite you to apply and help shape the future of secure digital transformation.
Responsibility
- Conduct comprehensive application security assessments, including penetration testing, code reviews, and architecture analysis.
- Develop and deliver threat modeling and risk assessment reports for enterprise applications.
- Advise clients on secure coding practices (e.g., OWASP Top 10) and DevSecOps integration.
- Design and implement security controls for cloud-native, web, and mobile applications.
- Collaborate with cross-functional teams to remediate identified vulnerabilities and improve security postures.
- Stay abreast of emerging threats and industry trends to provide proactive security guidance.
- Create and deliver security awareness training for developers and stakeholders.
- Support compliance efforts by aligning security practices with regulatory frameworks (e.g., GDPR, PCI-DSS).
Qualifications
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field; advanced degrees or certifications (e.g., CISSP, CEH, OSCP, CSSLP) are a plus.
- Minimum 5 years of experience in application security, with a focus on penetration testing, SAST/DAST tools (e.g., Burp Suite, OWASP ZAP).
- Proficiency in secure coding languages (e.g., Java, Python, .NET) and frameworks.
- Experience with cloud security (AWS, Azure, GCP) and containerization (Docker, Kubernetes).
- Strong understanding of authentication protocols (OAuth, SAML) and encryption standards.
- Excellent communication and presentation skills to articulate complex security concepts to non-technical audiences.
- Proven ability to work in Agile/DevOps environments and collaborate with development teams.
- Familiarity with compliance standards (ISO 27001, SOC 2, HIPAA) is highly desirable.