COMPLETE Security Engineer

Introduction
At IBM, work is more than a job - it's a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better, but to attempt things you've never thought possible. Are you ready to lead in this new era of technology and solve some of the world's most challenging problems? If so, lets talk.

Your Role and Responsibilities
We are searching for a skilled and motivated Security Engineer, to join a team responsible for the security initiatives for our Software Networking Suite of products. The ideal candidate will be an experienced security professional with a deep understanding of incident response, and security best practices, and a passion for embedding security throughout the software development lifecycle. As a Security Engineer, you will play a pivotal role in enhancing the security posture of our products and working with technical teams to ensure compliance with security and privacy corporate guidelines

Incident Response Leadership:
- Act as the primary incident response handler for the Software Networking of products, leading the response efforts in the event of security incidents.
- Collaborate with cross-functional teams to swiftly investigate, contain, and remediate security incidents, minimizing potential impact.
- Develop and maintain an effective incident response plan, conducting regular drills and updates to ensure preparedness.

Security Privacy by Design(SPBD) Implementation:
- Champion the adoption and enforcement of Security Privacy by Design (SPBD) Corporate guidelines across all products within the ELM Suite.
- Collaborate with development teams to integrate security and privacy requirements into the product development lifecycle.
- Conduct regular audits and assessments to verify adherence to SPBD principles and implement corrective actions as needed.

Automation and Efficiency Enhancement:
- Identify opportunities for automation in security processes, such as vulnerability assessments, threat detection, and incident response.
- Lead initiatives to develop and implement automated security monitoring, alerting, and reporting systems.
- Continuously evaluate and optimize existing security workflows to enhance efficiency and effectiveness.


Required Technical and Professional Expertise
- Proficiency in Security Incident response methodologies and best practices.
- Strong understanding of Security Privacy by Design (SPBD) principles and their application in product development.
- In-depth knowledge of security testing methodologies including SAST, DAST, and SCA.
- Familiarity with common security frameworks (e.g., OWASP, NIST) and their application.
- Strong understanding of network security, encryption, and authentication protocols.
- Excellent communication skills for effectively collaborating with cross-functional teams.
- Ability to analyze complex security issues and provide actionable solutions.

Preferred Technical and Professional Expertise
- Strong understanding of Security Privacy by Design (SPBD) principles and their application in product development.
- Experience in programming for performing security automation. Preferably any and scripting languages (e.g., Python, Bash, PowerShell).
- Experience in development leadership or project management skills.