Security- Engineer
IBM · Posted Oct 14
Hybrid cloud, artificial intelligence, enterprise software, quantum computing, and IT consulting services
Get a personal compatibility score
Add a resume for personal matches
About the role
IBM Infrastructure & Technology designs and operates the systems that keep the world running, spanning high-resiliency mainframes, hybrid cloud platforms, networking, automation, and site reliability, with teams ensuring performance, security, and scalability for clients and industries. The organization delivers resilient, future-ready solutions and works with diverse technologies and colleagues worldwide. This role is a seasoned security position focused on cybersecurity investigations, data privacy and regulatory compliance, Python-based backend and REST API development, application security testing (SAST/DAST), vulnerability triage, threat modeling, and DevSecOps integration across the SDLC.
What you will do
- Lead Cybersecurity Investigations: Participate in cybersecurity investigations, ensuring timely and effective responses to incidents, and review and approve root cause analysis and action plans.
- Deploy Data Privacy Regulations: Assess the impact of new data privacy regulations on our portfolio, deploy and track implementation, and develop dashboards for regulatory operational activities.
- Provide Regulatory Guidance: Offer help and guidance on regulations to account teams, enabling them to navigate complex regulatory requirements.
- Operationalize Security Projects: Work with other teams to translate security projects into business-as-usual tasks, ensuring seamless execution and ongoing management.
- Monitor Incident Trends: Track incident and action plan trends, identifying areas for improvement, and optimizing our security posture.
- Design, develop, test, and maintain scalable backend applications and automation tools using Python.
- Develop secure REST APIs and backend services following secure coding best practices.
- Perform and analyze Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) scans.
- Review and triage Mend vulnerability findings and drive remediation through the PSIRT process.
- Coordinate and support Security Risk Testing (SRT) and Penetration Testing activities.
- Analyze security findings, identify false positives, prioritize genuine vulnerabilities, and work with development squads to drive remediation.
- Create, maintain, and continuously update product threat models as the application evolves.
- Conduct security design and architecture reviews to identify potential risks and recommend mitigation strategies.
- Integrate security scanning and automation into CI/CD pipelines to enable DevSecOps practices.
- Collaborate with architects, developers, and security teams to embed security throughout the SDLC.
- Act as the security champion for the product by promoting secure coding practices and improving the overall security posture.
Skills used in this role
What the employer is looking for
- 7+ years of hands-on experience in Python application development, building scalable backend applications and REST APIs.
- Strong programming skills in Python with experience in object-oriented design, debugging, performance optimization, and automation.
- Hands-on experience with Application Security and Secure SDLC practices.
- Hands-on experience with SAST, DAST, Mend (Software Composition Analysis), PSIRT processes, and Security Risk Testing (SRT).
- Experience coordinating or supporting internal/external Penetration Testing activities.
- Strong experience analyzing vulnerability reports, triaging security findings, identifying false positives, and driving remediation with development teams.
- Hands-on experience creating, maintaining, and reviewing product threat models.
- Strong understanding of secure coding principles and common application security vulnerabilities.
- Experience integrating security tools into CI/CD pipelines and DevSecOps workflows.
- Experience with Git, CI/CD tools (Jenkins/GitHub Actions), and Agile software development practices.
- Excellent analytical, problem-solving, communication, and stakeholder management skills.
- Experience with application security tools such as SonarQube, Burp Suite, ZAP, or equivalent.
- Experience performing architecture security reviews and security design assessments.
- Experience with cloud-native applications, Docker, Kubernetes/OpenShift, and API security.
- Familiarity with threat modeling tools would be advantage.
- Experience automating security validation and remediation using Python.
- Knowledge of Infrastructure as Code (Terraform/Ansible) security.
- Security certifications are an added advantage.
- Experience working in Agile/Scrum teams and collaborating across global engineering organizations.
Benefits and support
- Compensation and benefits are detailed in the job posting
About IBM
International Business Machines Corporation (IBM) is a global technology and consulting company that provides hybrid cloud, artificial intelligence, and enterprise infrastructure solutions. Operating in over 175 countries, IBM helps businesses across industries modernize operations, secure data, and drive digital transformation through platforms like watsonx and Red Hat OpenShift. Founded over a century ago, the company remains a pioneer in high-performance computing, enterprise automation, and quantum technology.
- Industry
- Information Technology
- Company size
- 260,000+ employees
- Founded
- June 16, 1911
- Location
- Armonk, New York, USA
- Funding stage
- Public Company
Funding
Public Company · $3.5B raised
- ·Post Ipo Debt$150M
Leadership
Chairman, President and Chief Executive Officer
Senior Vice President and Chief Financial Officer
Senior Vice President, Software and Chief Commercial Officer
Senior Vice President, IBM Consulting
Senior Vice President, Marketing and Communications
Recent coverage
Stock Titan / PRNewswire
IBM Advances to Stage C of DARPA Quantum Benchmarking Initiative2026-10-07
IBM Newsroom
IBM Teams Up with SAP to Help Businesses Modernize Operations and Advance AI-Readiness2026-10-07
IBM Newsroom
Cleveland Clinic, RIKEN and IBM Team Advance to Finals for 2026 ACM Gordon Bell Prize2026-09-09
IBM Newsroom
IBM and the USTA Introduce New AI-Powered Fan Experiences for 2026 US Open2026-08-24