Introduction At IBM Infrastructure & Technology, we design and operate the systems that keep the world running. From high-resiliency mainframes and hybrid cloud platforms to networking, automation, and site reliability. Our teams ensure the performance, security, and scalability that clients and industries depend on every day.

Working in Infrastructure & Technology means tackling complex challenges with curiosity and collaboration. You'll work with diverse technologies and colleagues worldwide to deliver resilient, future-ready solutions that power innovation. With continuous learning, career growth, and a supportive culture, IBM provides the opportunities to build expertise and shape the infrastructure that drives progress.

Your Role and Responsibilities As a seasoned Security Professional, you will play a critical role in ensuring the security, regulations, risk, and compliance of our organization. You will collaborate with various teams to operationalize security projects and provide guidance on regulations to account teams.

Your primary responsibilities will include:

- Lead Cybersecurity Investigations: Participate in cybersecurity investigations, ensuring timely and effective responses to incidents, and review and approve root cause analysis and action plans.

- Deploy Data Privacy Regulations: Assess the impact of new data privacy regulations on our portfolio, deploy and track implementation, and develop dashboards for regulatory operational activities.

- Provide Regulatory Guidance: Offer help and guidance on regulations to account teams, enabling them to navigate complex regulatory requirements.

- Operationalize Security Projects: Work with other teams to translate security projects into business-as-usual tasks, ensuring seamless execution and ongoing management.

- Monitor Incident Trends: Track incident and action plan trends, identifying areas for improvement and optimizing our security posture.

- Design, develop, test, and maintain scalable backend applications and automation tools using Python.

- Develop secure REST APIs and backend services following secure coding best practices.

- Perform and analyze Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) scans.

- Review and triage Mend vulnerability findings and drive remediation through the PSIRT process.

- Coordinate and support Security Risk Testing (SRT) and Penetration Testing activities.

- Analyze security findings, identify false positives, prioritize genuine vulnerabilities, and work with development squads to drive remediation.

- Create, maintain, and continuously update product threat models as the application evolves.

- Conduct security design and architecture reviews to identify potential risks and recommend mitigation strategies.

- Integrate security scanning and automation into CI/CD pipelines to enable DevSecOps practices.

- Collaborate with architects, developers, and security teams to embed security throughout the SDLC.





- Act as the security champion for the product by promoting secure coding practices and improving the overall security posture.

Required Education

- Bachelor's Degree

Preferred Education

- Master's Degree

Required Technical and Professional Expertise

- 7 years of hands-on experience in Python application development, building scalable backend applications and REST APIs.

- Strong programming skills in Python with experience in object-oriented design, debugging, performance optimization, and automation.

- Hands-on experience with Application Security and Secure SDLC practices.

- Hands-on experience with SAST, DAST, Mend (Software Composition Analysis), PSIRT processes, and Security Risk Testing (SRT).

- Experience coordinating or supporting internal/external Penetration Testing activities.

- Strong experience analyzing vulnerability reports, triaging security findings, identifying false positives, and driving remediation with development teams.

- Hands-on experience creating, maintaining, and reviewing product threat models.

- Strong understanding of secure coding principles and common application security vulnerabilities.

- Experience integrating security tools into CI/CD pipelines and DevSecOps workflows.

- Experience with Git, CI/CD tools (Jenkins/GitHub Actions), and Agile software development practices.

- Excellent analytical, problem-solving, communication, and stakeholder management skills.

Preferred Technical and Professional Experience

- Experience with application security tools such as SonarQube, Burp Suite, ZAP, or equivalent.

- Experience performing architecture security reviews and security design assessments.

- Experience with cloud-native applications, Docker, Kubernetes/OpenShift, and API security.

- Familiarity with threat modeling tools would be an advantage.

- Experience automating security validation and remediation using Python.

- Knowledge of Infrastructure as Code (Terraform/Ansible) security.

- Security certifications are an added advantage.

- Experience working in Agile/Scrum teams and collaborating across global engineering organizations.

Years of Experience 7 - 10

About Business Unit IBM Systems helps IT leaders think differently about their infrastructure. IBM servers and storage are no longer inanimate - they can understand, reason, and learn so our clients can innovate while avoiding IT issues. Our systems power the world's most important industries and our clients are the architects of the future. Join us to help build our leading-edge technology portfolio designed for cognitive business and optimized for cloud computing.





Your Life @ IBM In a world where technology never stands still, we understand that dedication to our clients' success, innovation that matters, and trust and personal responsibility in all our relationships, lives in what we do as IBMers as we strive to be the catalyst that makes the world work better.

Being an IBMer means you'll be able to learn and develop yourself and your career, you'll be encouraged to be courageous and experiment every day, all whilst having continuous trust and support in an workplace where everyone can thrive whatever their personal or professional background.

Our IBMers are growth-minded, always staying curious, open to feedback, and learning new information and skills to constantly transform themselves and our company. They are trusted to provide ongoing feedback to help other IBMers grow, as well as collaborate with colleagues, keeping in mind a team-focused approach to include different perspectives to drive exceptional outcomes for our customers. The courage our IBMers have to make critical decisions every day is essential to IBM becoming the catalyst for progress, always embracing challenges with resources they have to hand, a can-do attitude and always striving for an outcome-focused approach within everything that they do.

Are you ready to be an IBMer?

About IBM IBM's greatest invention is the IBMer. We believe that through the application of intelligence, reason, and science, we can improve business, society, and the human condition, bringing the power of an open hybrid cloud and AI strategy to life for our clients and partners around the world.

Restlessly reinventing since 1911, we are not only one of the largest corporate organizations in the world, we're also one of the biggest technology and consulting employers, with many of the Fortune 500 companies relying on the IBM Cloud to run their business.

At IBM, we pride ourselves on being an early adopter of artificial intelligence, quantum computing, and blockchain. Now it's time for you to join us on our journey to being a responsible technology innovator and a force for good in the world.

IBM is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, neurodivergence, age, or other characteristics protected by applicable law. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.

Other Relevant Job Details When applying to jobs of your interest, we recommend that you do so for those that match your experience and expertise. Our recruiters advise that you apply to not more than 3 roles in a year for the best candidate experience. For additional information about location requirements, please discuss with the recruiter following submission of your application.

Locations - Bangalore, Karnataka, India

📌 Security- Engineer (India)
🏢 IBM
📍 India