IBM Security Architect 

India, Kerala, Kochi 

147395565

The scope of work includes:

• the collection and validation of requirements,
• the identification of risks, threats, vulnerabilities, potential anomalous flows and interactions,
• the definition of the security processes for assurance, management and compliance,
• the definition of security subsystems, and
• the design of integration and deployment architectures for security in Networks, Infrastructure, Middleware, Applications and Systems & Service Management systems.

Responsibilities:

• Review and assess IBM Data & AI services, and applications as per defined by the IBM’s Security and Privacy by Design (SPbD) framework.
• Identify security design gaps in existing and proposed architectures and recommend changes or enhancements.
• Lead the efforts to streamline the security processes and tooling through the active participation in “Design Thinking” sessions for process and tooling changes and enhancements.
• Engage, collaborate, and build trusted relationships with product managers, developers, and other security engineers.
• Develop guidance and enablement material to produce secure software, services and applications that align with IBM’s commitments to customers and IBM’s IT Security Standards.
• Advise, Design, implement enterprise-class secure software/services.
• Align company standards, industry regulations, frameworks and security with overall business and technology strategy.
• Identify and communicate current and emerging security threats.
• Design security architecture elements to mitigate threats as they emerge.
• Assess risk and develop mitigation and remediation plans for security findings in services and applications.

Required Technical and Professional Expertise

• 8+ Years of Software Domain Experience
• Business Awareness: You have an understanding about the business that you are trying to secure. For example, working knowledge of cloud technologies, the ability to describe what the security concerns and impact might be for an organization looking to move from on-premises compute to public cloud.
• Distributed Systems / Software Design: understand the compromises that teams make every day to make things work. Security Architect should have strong influence towards secure implementation and development.
• Threats, Risks, and Modeling: know the difference between a threat and risk. The ability to understand what organizations need to protect, who they need to protect it from, and how that protection should work.
• Vulnerabilities and Exploitation: the ability to discern between a weakness, flaw, or error found within a system, software, host, etc. which have the potential to be leveraged by an attacker to compromise a network, application, an infrastructure, etc.
• Collaboration: being personable, approachable, and empathetic are extremely valuable qualities as a Security Architect. The Security Architect role requires a lot of cooperation and engagement within the organization that they support.
• 5 or more years of experience as an Engineer or Architect (Software, Solutions, Network, Security, etc.,)
• Experience with Incident Response / Operations or addressing breaches, incidents.
• Experience with forensic analysis – strong critical thinking and analytical skills.
• Understanding of current software (on-premises), cloud technologies and Software-as-a-Service (SaaS) concepts.
• Experience developing software and writing code.

Preferred Technical and Professional Expertise
At least two (2) years’ experience in the following:

• Working knowledge of the security tooling.
• Working experience developing software and writing code.
• Experience with Agile design and Project Management methodologies.
• Experience with industry compliances (HIPAA, SOC, ISO, FISMA, FedRamp).