**Introduction**
**Your Role and Responsibilities**
**Required Technical and Professional Expertise**:
- Perform architecture security reviews and provide defense in depth controls and consulting on securing SaaS, PaaS, or IaaS cloud services.
- Collaborate with other Security Architects on design, develop, research, and implement security architectures and process enhancements.
- Lead security initiatives and principles toward adoption within the organization.
- Experience performing threat modeling and design reviews to assess security implications and requirements for introduction of new technologies, services, solutions, and knowledge of security industry best-practices.
- Working knowledge of information security controls, guidelines, and standards (e.g., ISO27000 series, OWASP, CSA CCM, CIS 20 Critical Security Controls, SOC 2, and NIST).
- Professional experience with modern technologies such as public and hybrid cloud (IBM, AWS, GCP, Azure, etc.
), containerization and orchestration (Kubernetes), & microservice architectures.
**Preferred Technical and Professional Expertise**:
- Experience on patching and benchmarking (CIS L1 for example) automation via in-house scripting or enterprise tooling.
- Experience with provisioning & provision automation in AWS, Azure, IBM Cloud, Oracle, or Google Cloud (experience can be with compute nodes, storage, database, any of the "as a Service" offerings, integration with on-prem systems for Hybrid cloud, or bare metal systems).
- Red Team (White hat) pen tester team experience (Kali, Cobalt Strike, Nmap, BurpSuite, etc.).
- Proficient in software design and at least one or more programming languages (Python preferred with 2-4 years of experience).
- Technical expertise throughout the software development lifecycle including design, implementation, and delivery (DevOps processes in a Cloud environment).
- Bachelor's or master's degree in computer science, information security or a related field; professional certification (e.g., CISSP, CCSP).
- FedRAMP experience or knowledge.
- Soft skills - excellent written and verbal communication, explaining vulnerabilities, writing internal guidance documents, coordinating with other teams.
- 10 years' experience with Security Architecture and/or Engineering required.
**About Business Unit**
IBM Cloud Computing is a one-stop-shop that provides all the cloud solutions & cloud tools the industries need.
IBM Cloud portfolio includes infrastructure as a service (IaaS), software as a service (SaaS), and platform as a service (PaaS) offered through public, private, and hybrid cloud delivery models, in addition to the components that make up those clouds.
IBM Cloud ensures seamless integration into public and private cloud environments.
The infrastructure is secure, scalable, and flexible, providing customized enterprise solutions that have made IBM Cloud the Hybrid Cloud
Market leader.
The IBM Cloud platform is the public cloud offering from IBM providing services to global enterprises.
Ready to help drive IBM's success in the Cloud market?
This is your chance to research and learn new Cloud-related technologies, products and solutions and then investigate those architectures and components for security challenges.
Are you interested in driving your technical skills forward to research and propose policy, architecture and implementations to address the ever evolving security challenges in the Cloud.
**About IBM**
**Location Statement**
IBM is committed to creating a diverse environment and is proud to be an equal opportunity employer.
All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics.
IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.