Technical Security Consultant

Introduction

Information and Data are some of the most important organisational assets in today's businesses. As a Security Consultant, you will be a key advisor for IBM's clients, analysing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the client's organisation with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.

Your role and responsibilities

The Technical Security Consultant is responsible for providing expert technical guidance and support to clients on a wide range of security matters. This role involves assessing existing security systems, identifying vulnerabilities, recommending and implementing security solutions, and developing security policies and procedures. The consultant acts as a trusted advisor, helping organizations strengthen their security posture and comply with relevant regulations.

• Security Assessments and Audits: Conduct comprehensive technical security assessments, including vulnerability scanning, penetration testing (sometimes directly, sometimes by managing external vendors), and security architecture reviews.
• Risk Management: Identify, analyze, and evaluate security risks and threats to IT systems, applications, and data. Develop and recommend mitigation strategies and security controls.
• Security Architecture and Design: Design and implement secure IT architectures, including network security, cloud security, endpoint security, and application security.
• Security Solution Implementation: Assist with the selection, configuration, and deployment of various security technologies and tools, such as firewalls, intrusion detection/prevention systems (IDS/IPS), security information and event management (SIEM) systems, anti-malware solutions, and data loss prevention (DLP) tools.
• Policy and Procedure Development: Develop, document, and maintain security policies, standards, procedures, and guidelines.
• Incident Response Planning: Assist in the development and testing of incident response plans and procedures. Provide technical support during security incidents.
• Compliance and Governance: Advise clients on relevant security regulations, standards (e.g., ISO 27001, PCI DSS, GDPR, HIPAA), and best practices. Assist with compliance audits and remediation efforts.
• Security Awareness Training: Develop and deliver technical security awareness training to client personnel.
• Technical Reporting and Documentation: Prepare clear and concise technical reports, presentations, and documentation outlining findings, recommendations, and implementation plans.
• Staying Current: Keep abreast of the latest security threats, vulnerabilities, technologies, and industry trends.
• Client Communication and Relationship Management: Effectively communicate technical concepts to both technical and non-technical audiences. Build and maintain strong client relationships.
• Collaboration: Work collaboratively with client IT teams, management, and other stakeholders. May also collaborate with other consultants and vendors.

• Technical Skills:
  • In-depth knowledge of security principles, frameworks, and best practices.
  • Strong understanding of network protocols, operating systems (Windows, Linux), and cloud platforms (AWS, Azure, GCP).
  • Experience with security tools and technologies (firewalls, IDS/IPS, SIEM, vulnerability scanners, etc.).
  • Familiarity with scripting languages (e.g., Python, PowerShell) is often beneficial.
  • Understanding of cryptography and secure communication protocols.
  • Knowledge of application security principles and common web vulnerabilities (OWASP Top 10).

• Soft Skills:
  • Excellent analytical and problem-solving skills.
  • Strong communication (written and verbal) and presentation skills.
  • Ability to explain complex technical concepts clearly and concisely.
  • Strong interpersonal and client management skills.
  • Ability to work independently and as part of a team.
  • Strong attention to detail.
  • Ethical and professional conduct.