What are the responsibilities and job description for the Security Engineer - DevSecOps position at IBM?
For more than a century, IBM has been a global technology innovator, leading advances in AI, automation and hybrid cloud solutions that help businesses grow.
Introduction
Before applying for this role, please read the following information about this opportunity found below.
Information and Data are some of the most important organizational assets in today’s businesses. As a Security Consultant, you will be a key advisor for IBM’s clients, analyzing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the client’s organization with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.
Your Role and Responsibilities
The DevSecOps Security Engineer will support dynamic and static analysis (DAST and SAST) of code for multiple applications using Fortify and work across technical teams to support the remediation of findings. The DevSecOps Security Engineer will support a large team of infrastructure, security and application team during migration of on-prem and cloud applications to the client Azure Government enclave. The security engineer will configure, operate and maintain Security Code Scanning tools (Fortify). The engineer will provide support for security assessment and authorization / ATO process, security audits.
Required Technical and Professional Expertise
- 5 years experience supporting secure DevSecOps practices using FORTIFY
- 5 years experience running Dynamic and Static Application Security Testing (SAST)
- 5 years experience working with source version control, build / release tools and methodologies
- 5 years experience with CI / CD pipelines
- 5 years experience with the software build process
- 5 years experience supporting backups and disaster recovery
- 5 years experience maintaining access control and the integrity of data throughout the platform
- 5 years experience designing, developing, evaluating and modifying systems and systems-oriented products.
- 5 years experience configuring, deploying and maintaining and optimizing security code scanning tools (Fortify)
- Perform Cyber Supply Chain Risk Management (C-SCRM) activities to include configuring, deploying and maintaining SCRM tool (Mend) and analyze reports.
- Support Security Assessment and Authorization / ATO process
- Certified in industry recognized areas such as CISSP, CISA, or CISM
Preferred Technical and Professional Expertise
Key Job Details
Role : Security Engineer – DevSecOps
Location : Washington, US
Category : Consulting
Employment Type : Full-Time
Travel Required : No Travel
Contract Type : Regular
Company : (0147) International Business Machines Corporation
Req ID : 716922BR
Projected Minimum Salary : $136,000 per year
Projected Maximum Salary : $136,000-$162,754 / year
Date Posted : September 28, 2024
J-18808-Ljbffr
Salary : $136,000 - $162,754
