Security Engineer

Job description

Introduction
At IBM, work is more than a job - it's a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better, but to attempt things you've never thought possible. Are you ready to lead in this new era of technology and solve some of the world's most challenging problems? If so, lets talk.

Your Role and Responsibilities
The Db2 Ecosystem team is seeking for a Security engineers to join our deployment team in our Kochi software lab. This is your opportunity to dive into the world of coding, automation and building secure software. You’ll be part of a DevOps team working on leading technology that is solving some of the world’s most complex problems in Data and AI and supporting the whole Db2 development organization. You will be tasked to ensure the security and compliance of couple of application in Db2 based Data and AI system. There will be opportunities to work closely with Architects, Data Experts, Database Engine Experts, Security experts and high performance development team to diagnose and plan the delivery of secure software to IBM customers. You will nurture innovation and celebrate out-of-the box thinking. You will facilitate collaboration as well as self-organization within the team. You will ensure that we supply secure and robust software products to our internal and external customers.

Your responsibilities will include:
·  Analysing, triaging and tracking identified vulnerabilities and ensuring timely remediation by development teams.
·  Helping development teams understand and resolve a wide range of security issue. Examples might include CVE vulnerability analytis and resolution, various test findings, secure coding practices etc.
·  Helping compile evidence for security certifications in a timely manner.
·  Responding to customer support cases relating to security.
·  Improving automation around security detection and issue tracking.
·  Work with Security Architects to ensure that every release shipped is secure as per industry standards.
·  Lead implementation of security updates and compliance for the product
·  Mentor junior members technically and professionally
·  Work with the broader Db2 development team to ensure product security and stability.
·  Programming Languages and Tools:
·  Linux (including package managers, yum/dnf, rpm, bash)
·  Openshift
·  Kubernetes
·  Docker
·  Shell scripting
·  Python
·  Go
·  Java
·  SQL
·  GitHub and Zen-Hub for project management (Agile).
·  Jenkins for CI/CD Pipeline
·  Application Security testing including primarily general code scanning knowledge/experience (Static/dynamic/interactive/container scans)
·  Db2 Security
·  Database servers
·  Authentication and Authorization mechanisms
·  PKI
·  IAM and Cloud security
·  Sonarqube
·  Primary - Linux environment, Shell Scripting, Python, Java, SQL, Docker, Kubernetes / Must have - Shell scripting, Python, Java, SQL, Kubernetes, Docker / Good to have - Go, Openshift, Jenkins,

Required Technical and Professional Expertise

·  5+ year of professional experience in Software Security and handling security scanning tools.
·  3+ year of professional experience in DevOps/DevSecOps
·  3+ year of professional experience in developing enterprise level software.
·  Experience in automated deployment of enterprise in Linux and Windows operating systems.
·  Good understanding of Database concepts.
·  Debugging and problem analysis skills.
·  Passion for technology.
·  Ability to learn quickly
·  Self-reliant and collaborative
·  Bachelor’s degree in Engineering or Mathematics. Master’s Degree is preferred.

Preferred Technical and Professional Expertise

·  NONE